home

trafsvc.exe

Trafsvc service

SOFT, OOO

It runs as a separate (within the context of its own process) windows Service named “TMeter 16.0.857”.
Publisher:
Trafficreg Software  (signed by SOFT, OOO)

Product:
Trafsvc service

Version:
16.0.857.0

MD5:
7ef8c9584f89e23e172a83486cfcbdcc

SHA-1:
9147e66c5e448f32048bbbf32bd05c317e88be9a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:45:14 AM UTC  (today)

File size:
869 KB (889,872 bytes)

Product version:
16.0.857.0

Copyright:
Copyright (C) 2016 Trafficreg Software

Original file name:
TrafSvc2.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tmeter\trafsvc.exe

Digital Signature
Signed by:
SOFT, OOO

Authority:
COMODO CA Limited

Valid from:
3/24/2015 4:00:00 AM

Valid to:
3/24/2016 3:59:59 AM

Subject:
CN="SOFT, OOO", O="SOFT, OOO", STREET=98 prospekt Im V.I.Lenina, L=Volgograd, S=Volgograd region, PostalCode=400078, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA9587D742301E2B34CFF67326ECF6F2

File PE Metadata
Compilation timestamp:
3/19/2016 8:42:00 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
24576:mU5mbstOjd3P1SkB4VkmpZvxqPKautY2bRn+KgF5ttZTk:metOjd3P7OVfpDqPy/MVZtZT

Entry address:
0x1000

Entry point:
68, 01, 50, 62, 00, E8, 01, 00, 00, 00, C3, C3, E6, 07, 35, D5, 1B, 0B, D6, 9B, 0D, 35, D8, DF, 3C, F2, 5D, 89, 6E, 36, 8D, 89, 69, 0F, 38, F1, 49, 9C, D8, A8, EF, C1, 33, 01, 2F, C3, 0B, 22, 29, 3B, 69, 92, FA, E4, 36, 2B, 4F, 7D, 94, D5, FF, 17, BC, E9, 1A, 69, FA, E5, F1, 1B, 91, E4, 84, 15, 64, E0, 83, 82, B9, 18, BA, E1, 62, 41, 7C, A0, 11, 35, E3, 9F, C7, 63, AB, 68, DB, 8C, E1, C3, 25, 80, AE, 47, 79, 44, B9, 4E, 35, 7C, DC, 0B, 03, CA, 68, DA, 82, 3F, 3B, B6, 89, C7, 45, B2, 88, D4, 63, FF, 47, 3F...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.7 MB (1,734,656 bytes)

Service
Display name:
TMeter 16.0.857

Service name:
TrafSvc

Description:
Counts IP traffic and creates reports of IP traffic usage.

Type:
Win32OwnProcess


Scan trafsvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.