home

TrafMonitor.EXE

TrafMeter Service Monitor

SOFT, OOO

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TrafMonitor’.
Publisher:
SOFT, OOO  (signed and verified)

Product:
TrafMeter Service Monitor

Version:
15,0,790,0

MD5:
e7b4afa0d6a1891f045429c767d2d5aa

SHA-1:
3679392b2719bf56cc0915607ae9bc3290102b6c

SHA-256:
f01d52c64a5fcee42fc62f357948676866c64ec8a6d8cf7bb678c7c88e785115

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:13:19 AM UTC  (today)

File size:
356.5 KB (365,072 bytes)

Product version:
15,0,790,0

Copyright:
Copyright (c) 2015

Original file name:
TrafMonitor.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tmeter\trafmonitor.exe

Digital Signature
Signed by:
SOFT, OOO

Authority:
COMODO CA Limited

Valid from:
3/23/2015 9:00:00 PM

Valid to:
3/23/2016 8:59:59 PM

Subject:
CN="SOFT, OOO", O="SOFT, OOO", STREET=98 prospekt Im V.I.Lenina, L=Volgograd, S=Volgograd region, PostalCode=400078, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA9587D742301E2B34CFF67326ECF6F2

File PE Metadata
Compilation timestamp:
5/5/2015 5:08:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
6144:T5ilvwJKfsLYbsAlFqofwsLkSiN54eLpK:dilvwJsyAlFJfwkk354

Entry address:
0x2B441

Entry point:
E8, DB, 07, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 30, 08, 44, 00, E8, 39, 05, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 48, 53, 43, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, 78, 91, 44, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, 7C, 91, 44, 00, 75, 0A, 6A, 1F, E8, 36, 06, 00, 00, 59, EB, 3B, 83, 3D, 7C, 91, 44, 00, 00, 75, 2C, 89, 35, 7C, 91, 44, 00, 68, 00, 5C, 43, 00, 68, EC, 5B, 43, 00, E8...
 
[+]

Code size:
204.5 KB (209,408 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TrafMonitor

Command:
C:\Program Files\tmeter\trafmonitor.exe \logon \admin


Scan TrafMonitor.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.