home

safer.exe

Safer Browser

Safer Technologies, Inc

The application safer.exe by Safer Technologies, Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Safer Browser by Safer Technologies, Inc. which is a potentially unwanted software program.
Publisher:
Safer Technologies, Inc.  (signed by Safer Technologies, Inc)

Product:
Safer Browser

Version:
39.0.2163.0.86

MD5:
dd1b62ae0bf571dabdec30af29a79ada

SHA-1:
3ef99532188ec4760600fedaed607b5438b13bb1

SHA-256:
6a97577a18b1b93855c391f102efcc3c7a80e092cb16311fd0778291884173c5

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
8/11/2025 10:20:43 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.1.18.13

File size:
661.6 KB (677,496 bytes)

Product version:
39.0.2163.0.86

Copyright:
Copyright 2014 Safer Technologies, Inc. All rights reserved.

Original file name:
safer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\safer technologies\safer browser\application\safer.exe

Digital Signature
Signed by:
Safer Technologies, Inc

Authority:
COMODO CA Limited

Valid from:
2/25/2014 6:00:00 PM

Valid to:
2/26/2016 5:59:59 PM

Subject:
CN="Safer Technologies, Inc", OU=Applied Cryptography, O="Safer Technologies, Inc", STREET=2711 CENTERVILLE RD STE 400, L=NEW CASTLE, S=DE, PostalCode=19808, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00AD7775F77C246C94E75D0D23C8F43D9B

File PE Metadata
Compilation timestamp:
11/20/2014 11:55:19 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x3D638

Entry point:
E8, 68, B9, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 8B, 45, 08, 99, F7, 7D, 0C, 5D, C3, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, A1, 24, 8C, 48, 00, 56, 6A, 14, 5E, 85, C0, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, 24, 8C, 48, 00, 6A, 04, 50, E8, 20, 52, 00, 00, A3, 20, 8C, 48, 00, 59, 59, 85, C0, 75, 1E, 6A, 04...
 
[+]

Entropy:
6.3963

Code size:
351.5 KB (359,936 bytes)

Shell Open Command
Open type:
http

Command:
"C:\Program Files\safer technologies\safer browser\application\safer.exe" -- "%1"


The file safer.exe has been discovered within the following program.

Safer Browser  by Safer Technologies, Inc.
The browser will track the user's behavior according to the TOS: "Our Applications collect certain data about your devices (including your hardware profiles, cookie text files, browser extensions, device IDs and IP Addresses), your browser and browser searches and search results, websites and web pages you visit and their content, and your clicks and interactions with websites, web pages and our Applications.
www.safer.com
About 61% of users remove it
 
Powered by Should I Remove It?

Remove safer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.