home

TrafSvc.EXE

TrafSvc Service

Alexey Kazakovskiy

It runs as a separate (within the context of its own process) windows Service named “TMeter 13.0.641”.
Publisher:
Alexey Kazakovskiy  (signed and verified)

Product:
TrafSvc Service

Version:
13.0.641.0

MD5:
c877cf4a380d54f0296cf0e801f0ebb1

SHA-1:
02ec94397c8043822f45bf6a1bd745728ff25794

SHA-256:
748c5e35d5cee55486d09862e5e878fc32339b2509438ece634f35fef6c708b7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:48:43 AM UTC  (today)

File size:
821.3 KB (841,016 bytes)

Product version:
13.0.641.0

Copyright:
Copyright (c) 2013 Alexey Kazakovsky

Original file name:
TrafSvc.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\tmeter\trafsvc.exe

Digital Signature
Signed by:
Alexey Kazakovskiy

Authority:
GlobalSign nv-sa

Valid from:
8/29/2012 5:01:38 PM

Valid to:
8/30/2013 5:01:38 PM

Subject:
CN=Alexey Kazakovskiy, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121097746975080FC22BBD2788E2FFDEB47

File PE Metadata
Compilation timestamp:
3/31/2013 10:41:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
24576:aCz7jHVSzWGM7gBoy7WxpOLYpwJARYmq/WDyK36u0Yz:ay1SzWG+gB5LYp0/JE6u00

Entry address:
0x1000

Entry point:
68, 01, 90, 7D, 00, E8, 01, 00, 00, 00, C3, C3, A7, FD, D7, 2B, B4, F5, B9, EC, 38, 3B, 73, ED, 5C, E9, 1C, A8, DC, 83, 2E, 57, 02, CE, C1, E3, 8E, 00, 83, 4C, 8F, 47, 05, 32, F0, 94, EB, 74, 6B, 12, 08, 88, 19, 1C, 97, 7F, A8, 6D, 1D, CC, F1, 27, 7F, F1, A6, 9A, 2B, CC, F0, 18, 15, E5, FE, 43, 99, 14, BC, D5, 96, 36, FE, FF, 77, 8F, 88, 3D, 85, 98, 97, 6D, DD, ED, 90, 7C, 43, 2C, 88, A1, 5F, A0, 3B, C4, 92, F7, 69, B9, 10, 8E, 5F, 50, BE, 13, AE, 00, BC, CC, 0F, F9, 5A, B4, 28, 2E, D1, CD, F1, E7, 10, BE...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.4 MB (1,432,064 bytes)

Service
Display name:
TMeter 13.0.641

Service name:
TrafSvc

Description:
Counts IP traffic and creates reports of IP traffic usage.

Type:
Win32OwnProcess


Scan TrafSvc.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.