home

safersurftray.exe

SaferSurf

GlobRob GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SaferSurf Tray’. This is installed with SaferSurf.
Publisher:
Nutzwerk  (signed by GlobRob GmbH)

Product:
SaferSurf

Version:
2.4.7.0

MD5:
dbd1cff6d77498bc9d2a6ba98ce2ad8e

SHA-1:
0783ee7b00bfcf449679a82bb4cf2497a90bbe04

SHA-256:
8f8c4573aae1de62f26d52cfd77f97e5106fcb6871e0e647c2b3cd6239749f2f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:17:29 AM UTC  (today)

File size:
1.3 MB (1,344,040 bytes)

Product version:
2.4.7.0

Copyright:
Copyright (C) 2012-2013 @ Nutzwerk

Original file name:
IconResources.res

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\safersurf\safersurftray.exe

Digital Signature
Signed by:
GlobRob GmbH

Authority:
Thawte, Inc.

Valid from:
3/15/2013 1:00:00 AM

Valid to:
3/23/2014 12:59:59 AM

Subject:
CN=GlobRob GmbH, O=GlobRob GmbH, L=Leipzig, S=Sachsen, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
76358DDAD67E4E6DF43F95AB9CECC50F

File PE Metadata
Compilation timestamp:
10/24/2013 2:21:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:eWMcmR6EYkOMfZRisqFMtWpGNZFtKhNI2uKQD3F/EE+hsqFHtWpGNZFtDR6kF/nv:f1mwd+is26HBRB/Ezhs2NxF/nyRr/Be

Entry address:
0x12DBAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 03, 00, 03, 00, 00, 00, 28, 00, 00, 80, 0E, 00, 00, 00, 38, 01, 00, 80, 10, 00, 00, 00, 68, 01, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.2 MB (1,227,776 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SaferSurf Tray

Command:
"C:\Program Files\safersurf\safersurftray.exe"


The file safersurftray.exe has been discovered within the following program.

SaferSurf  by Nutzwerk
Publisher's description - “SaferSurf clears the referrer information from the data stream each time you change to a new Internet site. So way neither the selected service, where you come from, nor can it find a "Mitlauscher". Additionally, you can surf with the IP number of the SaferSurf server.”
www.safersurf.com
About 8% of users remove it
 
Powered by Should I Remove It?

Scan safersurftray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.