» saferbrowserprotector.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

saferbrowserprotector.exe

SaferBrowserProtector

Safer Technologies, Inc

The application saferbrowserprotector.exe by Safer Technologies, Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler named SaferBrowserProtectTask triggered daily at a specified time. This file is typically installed with the program Safer Browser by Safer Technologies, Inc. which is a potentially unwanted software program.

File name:

Publisher:

Safer Technologies, Inc. (signed by Safer Technologies, Inc)

Product:

SaferBrowserProtector

Version:

39.0.2163.0

MD5:

1be9a93bf9bc8bcfe96e0ee35ce3393a

SHA-1:

2f3857506a6343b96da850835408ce0203d64cdf

SHA-256:

2d1e7f7954d71146e01fc3db49511cf20c553bc9626f84dd289648dcf7ef444e

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

8/11/2025 10:28:43 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

16.10.12.13

File size:

1.8 MB (1,906,296 bytes)

Product version:

39.0.2163.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\safer technologies\safer browser\application\saferbrowserprotector.exe

Digital Signature

Signed by:

Safer Technologies, Inc

Authority:

COMODO CA Limited

Valid from:

2/25/2014 7:00:00 PM

Valid to:

2/26/2016 6:59:59 PM

Subject:

CN="Safer Technologies, Inc", OU=Applied Cryptography, O="Safer Technologies, Inc", STREET=2711 CENTERVILLE RD STE 400, L=NEW CASTLE, S=DE, PostalCode=19808, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00AD7775F77C246C94E75D0D23C8F43D9B

File PE Metadata

Compilation timestamp:

11/20/2014 11:06:19 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

49152:PSoVqxBSPhlTqMQBX0lC2PcXiSR448eKsSn4GWNE1PR58fmt:XV2SPhlTqJXD2PcXiSR448e84GWNE1Pf

Entry address:

0x11A6CB

Entry point:

E8, 03, F5, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 77, 6F, 53, 57, A1, CC, 25, 5A, 00, 85, C0, 75, 1D, E8, 7B, F2, 00, 00, 6A, 1E, E8, D1, F2, 00, 00, 68, FF, 00, 00, 00, E8, 30, 1D, 00, 00, A1, CC, 25, 5A, 00, 59, 59, 85, F6, 74, 04, 8B, CE, EB, 03, 33, C9, 41, 51, 6A, 00, 50, FF, 15, 34, 63, 54, 00, 8B, F8, 85, FF, 75, 26, 6A, 0C, 5B, 39, 05, 08, 2F, 5A, 00, 74, 0D, 56, E8, 24, F6, 00, 00, 59, 85, C0, 75, A9, EB, 07, E8, 09, 03, 00, 00, 89, 18, E8, 02, 03, 00, 00, 89, 18, 8B... 
[+]

Entropy:

6.6101

Code size:

1.3 MB (1,330,176 bytes)

Scheduled Task

Task name:

SaferBrowserProtectTask

Trigger:

Daily (Runs daily at 9:39 AM)

The file saferbrowserprotector.exe has been discovered within the following program.

Safer Browser by Safer Technologies, Inc.

The browser will track the user's behavior according to the TOS: "Our Applications collect certain data about your devices (including your hardware profiles, cookie text files, browser extensions, device IDs and IP Addresses), your browser and browser searches and search results, websites and web pages you visit and their content, and your clicks and interactions with websites, web pages and our Applications.

www.safer.com

About 61% of users remove it

Remove saferbrowserprotector.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.