SFAgent.exe
SPAMfighter by SPAMfighter ApS (Signed)
| Version: | 7.6.37.0 |
| MD5: | 46541bdf326db201df9e7cab8144592f |
| SHA1: | d7225fce9cc5af08d32afe55954f5a843644649a |
Overview
sfagent.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program SPAMfighter published by SPAMfighter ApS.. The file is digitally signed by SPAMfighter ApS which was issued by the Thawte certificate authority (CA).
Details
| File name: | sfagent.exe |
| Publisher: | SPAMfighter ApS |
| Product name: | SPAMfighter |
| Description: | SPAMfighter Agent |
| Typical file path: | C:\Program Files\fighters\spamfighter\sfagent.exe |
| File version: | 7.6.37.0 |
| Size: | 1.02 MB (1,065,504 bytes) |
| Build date: | 4/23/2013 11:34 AM |
| Certificate |
| Issued to: | SPAMfighter ApS |
| Authority (CA): | Thawte |
| Effective date: | Sunday, February 19, 2012 |
| Expiration date: | Thursday, April 24, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“SPAMfighter is a global provider of state-of-the-art computer, mobile and server utility products to millions of users from 238 countries/areas around the globe. SPAMfighter's mission is nothing less than saving the world from unwanted spam advertisements and provide innovative optimization, security, and protection solutions.”
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'sfagent' → C:\Program Files\Fighters\SPAMfighter\sfagent.exe
Network connections
[UDP] listens on port 58618
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00007869% | |
| Kernel CPU: | 0.00005110% | |
| User CPU: | 0.00002759% | |
| Kernel CPU time: | 4,727 ms/min | |
| CPU cycles: | 956,780/sec | |
| Memory |
| Private memory: | 13.89 MB | |
| Private (maximum): | 9.64 MB | |
| Private (minimum): | 1.11 MB | |
| Non-paged memory: | 13.89 MB | |
| Virtual memory: | 148.68 MB | |
| Virtual memory (peak): | 149.93 MB | |
| Working set: | 4.86 MB | |
| Working set (peak): | 18.76 MB | |
| Page faults: | 118,048/min | |
| I/O |
| I/O read transfer: | 439 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 201 Bytes/sec | |
| I/O write operations: | 2/sec | |
| I/O other transfer: | 540 Bytes/sec | |
| I/O other operations: | 7/sec | |
| Resource allocations |
| Threads: | 32 | |
| Handles: | 428 | |
| GUI GDI count: | 9 | |
| GUI GDI peak: | 10 | |
| GUI USER count: | 7 | |
| GUI USER peak: | 8 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\fighters\spamfighter\sfagent.exe" |
| Owner: | User |
Threads
Averages
| sfagent.exe (main module) |
| Total CPU: | 0.00028686% | |
| Kernel CPU: | 0.00009692% | |
| User CPU: | 0.00018994% | |
| CPU cycles: | 84,950/sec | |
| Memory: | 1.04 MB | |
| ntdll.dll |
| Total CPU: | 0.00000526% | |
| Kernel CPU: | 0.00000220% | |
| User CPU: | 0.00000306% | |
| CPU cycles: | 324/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
75.00% |
|
| Windows 7 Ultimate |
25.00% |
|
Distribution by country
United States installs about 75.00% of SPAMfighter.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
40.00% |
|
| Toshiba |
40.00% |
|
| Hewlett-Packard |
20.00% |
|
