home

TrafMonitor.EXE

TrafMeter Service Monitor

SOFT, OOO

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TrafMonitor’.
Publisher:
SOFT, OOO  (signed and verified)

Product:
TrafMeter Service Monitor

Version:
16,0,857,0

MD5:
e661b1dc621e26f9162f0a345f1683ed

SHA-1:
f6de1902ea3b8b4d5d37caed19a00a586fa6a688

SHA-256:
9225a2dac4e436213d92ce3d5c88ab7a9a49256ffcd0e3ce479147cda85affbd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:41:34 AM UTC  (today)

File size:
541.5 KB (554,512 bytes)

Product version:
16,0,857,0

Copyright:
Copyright (c) 2016

Original file name:
TrafMonitor.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\tmeter\trafmonitor.exe

Digital Signature
Signed by:
SOFT, OOO

Authority:
COMODO CA Limited

Valid from:
3/24/2015 5:30:00 AM

Valid to:
3/24/2016 5:29:59 AM

Subject:
CN="SOFT, OOO", O="SOFT, OOO", STREET=98 prospekt Im V.I.Lenina, L=Volgograd, S=Volgograd region, PostalCode=400078, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA9587D742301E2B34CFF67326ECF6F2

File PE Metadata
Compilation timestamp:
3/19/2016 10:13:22 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:A6ImXJ2X0SX0YMiF571YP1UJMl0anvNN/vCnus:A6Ic2kY0YMijMiovNN/qnus

Entry address:
0x3A251

Entry point:
E8, 3B, 07, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 38, 93, 46, 00, E8, 99, 04, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, D0, 93, 45, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, 5C, 73, 47, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, 60, 73, 47, 00, 75, 0A, 6A, 1F, E8, 96, 05, 00, 00, 59, EB, 3B, 83, 3D, 60, 73, 47, 00, 00, 75, 2C, 89, 35, 60, 73, 47, 00, 68, 5C, 9D, 45, 00, 68, 48, 9D, 45, 00, E8...
 
[+]

Entropy:
6.2415

Code size:
349 KB (357,376 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TrafMonitor

Command:
C:\Program Files\tmeter\trafmonitor.exe \logon \admin


Scan TrafMonitor.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.