home

trafsvc.exe

Trafsvc service

SOFT, OOO

It runs as a separate (within the context of its own process) windows Service named “TMeter 15.0.808”.
Publisher:
Trafficreg Software  (signed by SOFT, OOO)

Product:
Trafsvc service

Version:
15.0.808.0

MD5:
42683a9fbd49b22cb8fd57e6c78198dc

SHA-1:
68578d37c3fb071274706be3628126f338922853

SHA-256:
28f02b0ea68ab9c0d47e76c47003b4c98281376779ec8c1c868631a388f9a4ed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 1:04:07 AM UTC  (today)

File size:
822 KB (841,744 bytes)

Product version:
15.0.808.0

Copyright:
Copyright (C) 2015 Trafficreg Software

Original file name:
TrafSvc2.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tmeter\trafsvc.exe

Digital Signature
Signed by:
SOFT, OOO

Authority:
COMODO CA Limited

Valid from:
3/24/2015 4:00:00 AM

Valid to:
3/24/2016 3:59:59 AM

Subject:
CN="SOFT, OOO", O="SOFT, OOO", STREET=98 prospekt Im V.I.Lenina, L=Volgograd, S=Volgograd region, PostalCode=400078, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA9587D742301E2B34CFF67326ECF6F2

File PE Metadata
Compilation timestamp:
7/11/2015 5:43:22 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
12288:UFbWgwjs5g6bqLtSO1s4ieGRpbXhps6TbfRVsLDC+z57pG9lNYxcTknIGa08yDbn:U7wjamLtGpDjvvgLD5z1VxcInu0Z

Entry address:
0x1000

Entry point:
68, 01, 20, 5F, 00, E8, 01, 00, 00, 00, C3, C3, 22, 5D, B6, 4C, DE, BB, 3A, 10, 71, 5C, 2C, E5, 47, F2, C8, FA, 96, 29, 92, 0A, 62, 97, B1, 5B, C7, 33, 78, 26, 39, 8F, EA, A1, BE, 7D, BE, D0, 9B, 51, 98, AE, 3B, 27, 8D, 76, A3, 67, D8, C9, CB, C7, 27, 68, 78, 21, AC, BC, 1D, 96, 05, 88, DE, 31, 9D, 67, 94, 0B, AE, F6, 51, 51, 34, F9, 75, A4, B9, 2D, 08, 8F, 12, 2E, D9, 1E, 01, 8D, 79, CF, 43, 07, 84, E3, E5, 5A, 84, F5, D1, 6E, 3C, D3, 05, 28, 51, 2C, 92, A3, 5F, 38, 56, CC, E4, 6E, 70, 8B, C5, 3B, 69, 31...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.5 MB (1,583,104 bytes)

Service
Display name:
TMeter 15.0.808

Service name:
TrafSvc

Description:
Counts IP traffic and creates reports of IP traffic usage.

Type:
Win32OwnProcess


Scan trafsvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.