home

nacl64.exe

Safer Browser

Safer Technologies, Inc

The application nacl64.exe by Safer Technologies, Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Safer Technologies, Inc.  (signed by Safer Technologies, Inc)

Product:
Safer Browser

Version:
46.0.2459.158

MD5:
7b3c1f326be39a0dcf111fdb737d53b0

SHA-1:
5f7d3d58d5ad71587a59f7c182be1d88d6f0fbee

SHA-256:
26cc887fe9511406f1a2c460c52558f9d42ac08674e788afd277d4fdc792d8d5

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
8/11/2025 10:17:41 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SaferTechnologies (M)
15.11.26.18

File size:
2 MB (2,149,496 bytes)

Product version:
46.0.2459.158

Copyright:
Copyright 2015 Safer Technologies, Inc. All rights reserved.

Original file name:
nacl64.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\safer technologies\safer browser\application\46.0.2459.158\nacl64.exe

Digital Signature
Signed by:
Safer Technologies, Inc

Authority:
COMODO CA Limited

Valid from:
2/25/2014 4:00:00 PM

Valid to:
2/26/2016 3:59:59 PM

Subject:
CN="Safer Technologies, Inc", OU=Applied Cryptography, O="Safer Technologies, Inc", STREET=2711 CENTERVILLE RD STE 400, L=NEW CASTLE, S=DE, PostalCode=19808, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00AD7775F77C246C94E75D0D23C8F43D9B

File PE Metadata
Compilation timestamp:
11/18/2015 6:07:12 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:BwccL8fxyRugfxkvkkP5sPtJWA5fQMB+Q/Gc5GE:BQL8fxyRLFPfQc

Entry address:
0xA3D98

Entry point:
48, 83, EC, 28, E8, 63, EA, 00, 00, 48, 83, C4, 28, E9, 36, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 18, 48, 89, 7C, 24, 20, 41, 56, 48, 83, EC, 20, 4C, 8B, C2, 48, 63, F1, 33, C0, 48, 85, D2, 0F, 95, C0, 85, C0, 75, 10, E8, 04, 36, 00, 00, C7, 00, 16, 00, 00, 00, E9, 5D, 01, 00, 00, 83, FE, FE, 75, 10, E8, EF, 35, 00, 00, C7, 00, 09, 00, 00, 00, E9, 4D, 01, 00, 00, 85, C9, 0F, 88, 35, 01, 00, 00, 3B, 35, 8A, FD, 17, 00, 0F, 83, 29, 01, 00, 00, 48, 8B, CE, 48, 8B, C6, 48, C1, F8, 05, 48, 8D...
 
[+]

Entropy:
5.1398

Code size:
817 KB (836,608 bytes)

Remove nacl64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.