» TAGMonitor.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

TAGMonitor.exe

TrayApp Application

LeapFrog Enterprises, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TagMonitor’. This is installed with LeapFrog Connect.

File name:

TAGMonitor.exe

Publisher:

LeapFrog Enterprises, Inc. (signed and verified)

Product:

TrayApp Application

Description:

Tag Device Monitor

Version:

1, 0, 0, 1

MD5:

b9f515d9e9212845c7e71ae5f1745b55

SHA-1:

fc7a29509bb1a863ad70029e39119d2c4edf0b6c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 7:54:21 AM UTC (today)

File size:

865.3 KB (886,088 bytes)

Product version:

1, 0, 0, 1

Original file name:

TAGMonitor.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\leapfrog\leapfrog connect tag\bin\tagmonitor.exe

Digital Signature

Signed by:

LeapFrog Enterprises, Inc.

Authority:

VeriSign, Inc.

Valid from:

1/15/2008 7:00:00 PM

Valid to:

1/18/2009 6:59:59 PM

Subject:

CN="LeapFrog Enterprises, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="LeapFrog Enterprises, Inc.", L=Emeryville, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2CA91EEFC4822161DB76F82D5CF92049

File PE Metadata

Compilation timestamp:

7/14/2008 7:45:34 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:gYo+wJeMC/hrX2APDmreTcOufNKSBLvCFwSp3jccOYw11jI0nqK:gYo+R/d2APDmreTc7fNNBLKGmjccWqK

Entry address:

0x4CD07

Entry point:

E8, E8, 06, 00, 00, E9, 35, FD, FF, FF, CC, FF, 25, EC, C1, 45, 00, FF, 25, F8, C1, 45, 00, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 16, 80, F9, 20, 73, 06, 0F, AD, D0, D3, FA, C3, 8B, C2, C1, FA, 1F, 80, E1, 1F, D3, F8, C3, C1, FA, 1F, 8B, C2, C3, CC, FF, 25, 04, C2, 45... 
[+]

Entropy:

7.0413

Code size:

364 KB (372,736 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

TagMonitor

Command:

"C:\Program Files\leapfrog\leapfrog connect tag\bin\tagmonitor.exe"

The file TAGMonitor.exe has been discovered within the following program.

LeapFrog Connect by LeapFrog

Publisher's description - “LeapFrog Connect allows you and your children to engage in several important features of your connected LeapFrog toys. You can add or remove files on your toys; view and collect rewards that your child earned during game play; and access valuable parent features.”

www.leapfrog.com/en/pages/support/product_pages/leapfrog_connect.html

3% remove it

Scan TAGMonitor.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.