SFAgent.exe
SPAMfighter by SPAMfighter ApS (Signed)
| Version: | 7.6.14.0 |
| MD5: | ae94b9e946239bf390aa8918cadfce40 |
| SHA1: | 8e2e9867bc6f711dc1e2c674da544243b4d525c1 |
| SHA256: | 8c264c4b55fea93792699b3d2bf003026c8e91cf19f9a55a05dcd761d7cae601 |
Overview
sfagent.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program SPAMfighter published by SPAMfighter ApS.. The file is digitally signed by SPAMfighter ApS which was issued by the Thawte certificate authority (CA).
Details
| File name: | sfagent.exe |
| Publisher: | SPAMfighter ApS |
| Product name: | SPAMfighter |
| Description: | SPAMfighter Agent |
| Typical file path: | C:\Program Files\fighters\spamfighter\sfagent.exe |
| File version: | 7.6.14.0 |
| Size: | 1.39 MB (1,460,768 bytes) |
| Certificate |
| Issued to: | SPAMfighter ApS |
| Authority (CA): | Thawte |
| Effective date: | Sunday, February 19, 2012 |
| Expiration date: | Thursday, April 24, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“SPAMfighter is a global provider of state-of-the-art computer, mobile and server utility products to millions of users from 238 countries/areas around the globe. SPAMfighter's mission is nothing less than saving the world from unwanted spam advertisements and provide innovative optimization, security, and protection solutions.”
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'sfagent' → C:\Program Files\Fighters\SPAMfighter\sfagent.exe
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.03350470% | |
| Kernel CPU: | 0.01198792% | |
| User CPU: | 0.02151678% | |
| Kernel CPU time: | 156 ms/min | |
| Context switches: | 21/sec | |
| Memory |
| Private memory: | 6.31 MB | |
| Private (maximum): | 17.07 MB | |
| Private (minimum): | 16.85 MB | |
| Non-paged memory: | 6.31 MB | |
| Virtual memory: | 125.7 MB | |
| Virtual memory (peak): | 141.42 MB | |
| Working set: | 16.85 MB | |
| Working set (peak): | 21.33 MB | |
| Resource allocations |
| Threads: | 15 | |
| Handles: | 408 | |
| GUI GDI count: | 16 | |
| GUI GDI peak: | 18 | |
| GUI USER count: | 21 | |
| GUI USER peak: | 22 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\fighters\spamfighter\sfagent.exe" |
| Owner: | User |
Threads
Averages
| sfagent.exe (main module) |
| Total CPU: | 0.02853765% | |
| Kernel CPU: | 0.00989581% | |
| User CPU: | 0.01864184% | |
| CPU cycles: | 748,236/sec | |
| Context switches: | 1/sec | |
| Memory: | 1.41 MB | |
| wow64.dll (Win32 Emulation on NT64 by Microsoft) |
| Total CPU: | 0.00219937% | |
| Kernel CPU: | 0.00219937% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 3,418/sec | |
| Memory: | 252 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
75.00% |
|
| Windows 7 Ultimate |
25.00% |
|
Distribution by country
United States installs about 75.00% of SPAMfighter.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
40.00% |
|
| Toshiba |
40.00% |
|
| Hewlett-Packard |
20.00% |
|
