home

FlyMonitor.exe

TrayApp Application

LeapFrog Enterprises, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FlyMonitor’.
Publisher:
LeapFrog Enterprises, Inc.  (signed and verified)

Product:
TrayApp Application

Description:
Fly Device Monitor

Version:
1, 0, 0, 1

MD5:
878fe1ab5ae2d1dcfeba1665bcffeede

SHA-1:
9b32570f9854e5c8e0a585e6a29f236fbf34d306

SHA-256:
6a69886a59ac9bff254b4355fc7fc8d3632472236dd2a61c367ec815b68f9311

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 8:56:46 AM UTC  (today)

File size:
649.3 KB (664,904 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2006, LeapFrog Enterprises, Inc.

Original file name:
FlyMonitor.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\leapfrog\flyworld\bin\flymonitor.exe

Digital Signature
Signed by:
LeapFrog Enterprises, Inc.

Authority:
VeriSign, Inc.

Valid from:
1/18/2007 6:00:00 PM

Valid to:
1/19/2008 5:59:59 PM

Subject:
CN="LeapFrog Enterprises, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="LeapFrog Enterprises, Inc.", L=Emeryville, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
352CBBE79643B2F947BC9A1929112242

File PE Metadata
Compilation timestamp:
8/21/2007 1:41:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:3pe1p2SInb+tGUWXNAzqFzhippkmxn95tUSBZ/d414w9xJVOnzV2rMhB3sSIux09:3penLGRNAFDFhtNe14ebM2+s8rlaN

Entry address:
0x4B04D

Entry point:
E8, E4, 05, 00, 00, E9, 35, FD, FF, FF, CC, FF, 25, B4, 91, 45, 00, FF, 25, B8, 91, 45, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 16, 80, F9, 20, 73, 06, 0F, AD, D0, D3, FA, C3, 8B, C2, C1, FA, 1F, 80, E1, 1F, D3, F8, C3, C1, FA...
 
[+]

Entropy:
6.7098

Code size:
352 KB (360,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FlyMonitor

Command:
"C:\Program Files\leapfrog\flyworld\bin\flymonitor.exe"


Scan FlyMonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.