home

trafsvc.exe

Trafsvc service

SOFT, OOO

It runs as a separate (within the context of its own process) windows Service named “TMeter 15.0.793”.
Publisher:
Trafficreg Software  (signed by SOFT, OOO)

Product:
Trafsvc service

Version:
15.0.793.0

MD5:
a891f961cf1a91162b4cb4ffbe7f5573

SHA-1:
5932969b729c616fa0a1407a78b4c429871c00d9

SHA-256:
b922161774606253c9c61514c9d40db32395330d8620d0480f641d708b17608f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 12:25:13 AM UTC  (today)

File size:
823.5 KB (843,280 bytes)

Product version:
15.0.793.0

Copyright:
Copyright (C) 2015 Trafficreg Software

Original file name:
TrafSvc2.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tmeter\trafsvc.exe

Digital Signature
Signed by:
SOFT, OOO

Authority:
COMODO CA Limited

Valid from:
3/24/2015 10:00:00 AM

Valid to:
3/24/2016 9:59:59 AM

Subject:
CN="SOFT, OOO", O="SOFT, OOO", STREET=98 prospekt Im V.I.Lenina, L=Volgograd, S=Volgograd region, PostalCode=400078, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA9587D742301E2B34CFF67326ECF6F2

File PE Metadata
Compilation timestamp:
5/25/2015 7:09:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
24576:foIl4Eqd0KVmiHKTQl9CgDwDWu0KBKmg:fzl4Td0iHKTQleDWu0K

Entry address:
0x1000

Entry point:
68, 01, 40, 5F, 00, E8, 01, 00, 00, 00, C3, C3, AE, 44, 93, 3F, E8, 96, D8, 57, F0, FA, 2B, 7B, 17, 48, E6, 87, 9F, 69, 5C, 32, 97, 30, 15, E3, 36, A4, 55, BA, 15, B6, F9, 17, 5A, 12, 91, 43, 5E, 01, D4, 58, 7E, 79, 0A, 49, 7B, E4, EA, D1, 71, 9C, B0, F0, EF, 62, 54, DF, ED, A7, D1, 9D, 37, 99, E2, 4A, 36, D3, 1E, 4B, 0D, 27, 5C, 54, 5F, 52, B6, 93, BE, B8, 55, AC, 4F, 14, 55, D9, A8, EC, 95, 60, AC, 69, 5B, 11, 5B, 2D, 5B, 41, 1F, 7D, CB, 90, EA, 84, 0B, 01, 0E, 9F, F1, FB, BC, 9A, 4E, 73, D8, F3, ED, F6...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.5 MB (1,589,248 bytes)

Service
Display name:
TMeter 15.0.793

Service name:
TrafSvc

Description:
Counts IP traffic and creates reports of IP traffic usage.

Type:
Win32OwnProcess


Scan trafsvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.