» sfagent.exe
Overview
Analysis
File Details
Programs (1)

sfagent.exe

Startup Faster!

URSoft, Inc.

The application sfagent.exe, “Startup Faster! - Boot Windows faster.” by URSoft has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Startup Faster! by URSoft, Inc..

File name:

sfagent.exe

Publisher:

URSoft,Inc (signed by URSoft, Inc.)

Product:

Startup Faster!

Description:

Startup Faster! - Boot Windows faster.

Version:

3.0.9

MD5:

0f146f0c537b4731315183717d3e4dcd

SHA-1:

4c65bdc79e6d4a7e68038f40ba3d576858ef8239

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/23/2024 10:36:25 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.URSoft

16.12.8.19

File size:

482.7 KB (494,304 bytes)

Product version:

3.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\startup faster\sfagent.exe

Digital Signature

Signed by:

URSoft, Inc.

Authority:

The USERTRUST Network

Valid from:

1/20/2007 5:00:00 PM

Valid to:

1/20/2009 4:59:59 PM

Subject:

CN="URSoft, Inc.", O="URSoft, Inc.", STREET=7241 W. Addison, L=Chicago, S=IL, PostalCode=60634, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

396303D1672D0BFD4E02BFBD3A9963AD

File PE Metadata

Compilation timestamp:

6/19/1992 4:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:SP1Bm0QQv4DQFu/U3buRKlemZ9DnGAeVyBqguJd:0Z1BqguJ

Entry address:

0x3A364

Entry point:

55, 8B, EC, 83, C4, EC, 53, 33, C0, 89, 45, EC, B8, 6C, 9F, 43, 00, E8, EA, 70, FC, FF, 33, C0, 55, 68, 2E, A4, 43, 00, 64, FF, 30, 64, 89, 20, A1, 6C, FB, 43, 00, 83, 38, 02, 75, 2B, E8, 7D, 89, FE, FF, 84, C0, 75, 22, 6A, 00, 8D, 55, EC, A1, 78, DB, 43, 00, E8, DE, 6F, FC, FF, 8B, 45, EC, 66, 8B, 0D, 3C, A4, 43, 00, B2, 01, E8, D1, 8F, FE, FF, EB, 5B, 68, 40, A4, 43, 00, 6A, FF, 6A, 00, E8, 9D, 71, FC, FF, 8B, D8, E8, 6E, 72, FC, FF, 3D, B7, 00, 00, 00, 75, 05, E8, F2, 6D, FC, FF, A1, EC, FE, 43, 00, 8B... 
[+]

Entropy:

6.2898

Developed / compiled with:

Microsoft Visual C++

Code size:

229.5 KB (235,008 bytes)

The file sfagent.exe has been discovered within the following program.

Startup Faster! by URSoft, Inc.

www.pcfaster.com

44% remove it

Remove sfagent.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.