home

trafsvc.exe

Trafsvc service

SOFT, OOO

It runs as a separate (within the context of its own process) windows Service named “TMeter 16.0.857”.
Publisher:
Trafficreg Software  (signed by SOFT, OOO)

Product:
Trafsvc service

Version:
16.0.857.0

MD5:
bbfc7295e2d21c2f7c038c3ab5e660af

SHA-1:
df0c52aa0ade48ee3c0522c38285f7449007b43c

SHA-256:
ff5a8d138b6a37cfbae87f9fdcf053ed4b5a131a03de15a6b4c397b249cb0fff

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 1:09:38 AM UTC  (today)

File size:
874.5 KB (895,504 bytes)

Product version:
16.0.857.0

Copyright:
Copyright (C) 2016 Trafficreg Software

Original file name:
TrafSvc2.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tmeter\trafsvc.exe

Digital Signature
Signed by:
SOFT, OOO

Authority:
COMODO CA Limited

Valid from:
3/24/2015 3:00:00 AM

Valid to:
3/24/2016 2:59:59 AM

Subject:
CN="SOFT, OOO", O="SOFT, OOO", STREET=98 prospekt Im V.I.Lenina, L=Volgograd, S=Volgograd region, PostalCode=400078, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA9587D742301E2B34CFF67326ECF6F2

File PE Metadata
Compilation timestamp:
3/19/2016 7:42:36 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
24576:xLBYP9JGYnh3mZRP8iwlq5HoRYCw5uYxctQ:xNqXGYnh4RuykQ

Entry address:
0x1000

Entry point:
68, 01, 80, 62, 00, E8, 01, 00, 00, 00, C3, C3, 02, 44, 18, F5, 62, E3, 77, A0, 3D, E0, 69, CC, 65, 40, 84, 5F, 12, EB, 78, C2, 60, BF, 5D, 16, B1, A9, F6, D2, 5C, 1B, 35, 9F, A0, CF, 7D, 9A, 5A, 64, 30, 41, FC, C6, 2A, 73, 68, F2, D7, 93, 36, F4, E0, 0D, A9, C2, 41, 31, 72, 12, 35, F1, C1, 0B, 88, 62, E3, 83, C3, 73, A8, 9A, 2F, 33, 08, 65, 50, 59, 26, 1E, 6B, F0, 2B, AC, 67, F6, 2E, 8C, F8, 45, 46, FD, 92, 06, BB, 08, 34, C3, F2, EB, B0, 6B, B4, C2, 03, 83, 19, F2, 13, A4, 66, 65, 36, 8B, C9, 6A, 69, 56...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.7 MB (1,742,336 bytes)

Service
Display name:
TMeter 16.0.857

Service name:
TrafSvc

Description:
Counts IP traffic and creates reports of IP traffic usage.

Type:
Win32OwnProcess


Scan trafsvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.