home

sfaeifin.exe

HIBUN Advanced Edition

Hitachi Software Engineering Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘sfaeifin’.
Publisher:
Hitachi Software Engineering Co., Ltd.  (signed and verified)

Product:
HIBUN Advanced Edition

Version:
9.10

MD5:
496a3a203cd9b955465782926df1aa18

SHA-1:
4b50f1b73eb04ced44fe2cfbaf2f52d3f387badf

SHA-256:
e6f1e459cb2e73425bbba6007db8eadc774b9efa5b3f37db83293138b95ea9aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:07:41 AM UTC  (today)

File size:
221.4 KB (226,720 bytes)

Product version:
09-10

Copyright:
Copyright (C) 1999, 2010, Hitachi Software Engineering Co., Ltd.

Trademarks:
HIBUN(R)

Original file name:
sfaeifin.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hibun-ae\bin\sfaeifin.exe

Digital Signature
Signed by:
Hitachi Software Engineering Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
11/16/2009 9:00:00 AM

Valid to:
11/17/2010 8:59:59 AM

Subject:
CN="Hitachi Software Engineering Co., Ltd.", OU=Product Life cycle Management Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Hitachi Software Engineering Co., Ltd.", L=Shinagawa-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1D4C8CB4F452EA4AD5A641CF188BE9D3

File PE Metadata
Compilation timestamp:
3/25/2010 4:44:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x170AA

Entry point:
E8, DB, 53, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, F8, 4B, 43, 00, 89, 0D, F4, 4B, 43, 00, 89, 15, F0, 4B, 43, 00, 89, 1D, EC, 4B, 43, 00, 89, 35, E8, 4B, 43, 00, 89, 3D, E4, 4B, 43, 00, 66, 8C, 15, 10, 4C, 43, 00, 66, 8C, 0D, 04, 4C, 43, 00, 66, 8C, 1D, E0, 4B, 43, 00, 66, 8C, 05, DC, 4B, 43, 00, 66, 8C, 25, D8, 4B, 43, 00, 66, 8C, 2D, D4, 4B, 43, 00, 9C, 8F, 05, 08, 4C, 43, 00, 8B, 45, 00, A3, FC, 4B, 43, 00, 8B, 45, 04, A3, 00, 4C, 43, 00, 8D, 45, 08, A3, 0C, 4C, 43, 00, 8B...
 
[+]

Entropy:
6.0481

Code size:
136 KB (139,264 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
sfaeifin

Command:
"C:\Program Files\hibun-ae\bin\sfaeifin.exe"


Scan sfaeifin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.