home

SFAgent.exe

SPAMfighter

SPAMfighter ApS

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SPAMfighter Agent’. This is installed with SEM Client.
Publisher:
SPAMfighter ApS  (signed and verified)

Product:
SPAMfighter

Description:
SPAMfighter Agent

Version:
1, 2, 1, 5

MD5:
022d85226af30bc45e158151cd6aaab5

SHA-1:
282ae5e7e95e71a3e993408be71a2b35488e4cdc

SHA-256:
1e9cdc962d926366cbf2f608303c64dcbc4fc5b7c29238c5b42750f229b9f8ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:26:21 AM UTC  (today)

File size:
301.6 KB (308,880 bytes)

Product version:
1, 2, 1, 5

Copyright:
Copyright (C) 2003, 2007 SPAMfighter ApS

Original file name:
SFAgent.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\spamfighter\sfagent.exe

Digital Signature
Signed by:
SPAMfighter ApS

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/13/2006 9:30:00 AM

Valid to:
7/13/2008 9:29:59 AM

Subject:
CN=SPAMfighter ApS, OU=SECURE APPLICATION DEVELOPMENT, O=SPAMfighter ApS, L=Frederiksberg, S=Copenhagen, C=DK

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
297D3CC6FBA29F8B93BF6F4D6BB3D68C

File PE Metadata
Compilation timestamp:
10/23/2007 9:46:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:JPfa5hS7g9nPM4q47owmfUnovhVNLuLJVQVy9md2X5YY:JPfa5E7g9047ruF5C+d2Jv

Entry address:
0x19276

Entry point:
E8, 8E, 9D, 00, 00, E9, 16, FE, FF, FF, C3, B8, 2A, 3B, 42, 00, A3, 70, 8C, 44, 00, C7, 05, 74, 8C, 44, 00, 26, 32, 42, 00, C7, 05, 78, 8C, 44, 00, E4, 31, 42, 00, C7, 05, 7C, 8C, 44, 00, 18, 32, 42, 00, C7, 05, 80, 8C, 44, 00, 8E, 31, 42, 00, A3, 84, 8C, 44, 00, C7, 05, 88, 8C, 44, 00, A4, 3A, 42, 00, C7, 05, 8C, 8C, 44, 00, A4, 31, 42, 00, C7, 05, 90, 8C, 44, 00, 0E, 31, 42, 00, C7, 05, 94, 8C, 44, 00, 9D, 30, 42, 00, C3, E8, 9B, FF, FF, FF, E8, E4, A8, 00, 00, 83, 7C, 24, 04, 00, A3, CC, B2, 44, 00, 74...
 
[+]

Entropy:
6.4796

Code size:
223 KB (228,352 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SPAMfighter Agent

Command:
"C:\Program Files\spamfighter\sfagent.exe" update delay 60


The file SFAgent.exe has been discovered within the following program.

SEM Client  by SPAMfighter ApS.
Publisher's description - “SPAMfighter Exchange Module is able to detect the version of Exchange being used, and will automatically reconfigure itself to support the installed version. In addition, the Outlook Web Access (OWA) toolbar has been updated to fully support Exchange 2007.”
39% remove it
 
Powered by Should I Remove It?

Scan SFAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.