home

safeguardbrowser.exe

Alerts LLC

Part of an adware web browser extension that delivers advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application safeguardbrowser.exe by Alerts has been detected as adware by 6 anti-malware scanners.
Publisher:
Alerts LLC  (signed and verified)

Version:
1.0.0.31

MD5:
7e8b33dd2777ca03889d780eeaab45f9

SHA-1:
e05a82785bcf158a885878307bfc3c005177ad76

SHA-256:
127a704f2dc174bb76edf439a36b6876207d5295672c97d29ef3f0bd9deb1c97

Scanner detections:
6 / 68

Status:
Adware

Analysis date:
12/24/2024 11:14:05 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3116

Bkav FE
W32.HfsAdware
1.3.0.6379

Malwarebytes
PUP.Optional.Alerts.A
v2015.05.07.05

Reason Heuristics
Threat.Weather.Alerts
15.5.7.13

Sophos
PUA 'Alerts SafeGuard'
5.14

VIPRE Antivirus
Threat.4793388
39486

File size:
586 KB (600,080 bytes)

Product version:
1.0.0.31

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\safeguard\safeguardbrowser.exe

Digital Signature
Signed by:
Alerts LLC

Authority:
COMODO CA Limited

Valid from:
6/5/2014 2:00:00 AM

Valid to:
6/6/2015 1:59:59 AM

Subject:
CN=Alerts LLC, O=Alerts LLC, STREET="101 Colorado St #2309", L=Austin, S=TX, PostalCode=78701, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A4FE74573C3AAF1867F4DF866A77B161

File PE Metadata
Compilation timestamp:
4/30/2015 8:37:19 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:cJJm9vWHFy5I7q/DUjfcWeekn3SjRHh2n+LAO0AOGCSVYjM9kZ0UdWZo:XaFTekfheekn3CB2n+LicCAYjiK0Ud2o

Entry address:
0x2B996

Entry point:
E8, 30, 82, 00, 00, E9, 7F, FE, FF, FF, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 58, 5B, 47, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, F0, 31, 47, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, 58, 5B, 47, 00, 00, 0F, 83, A7, 01, 00, 00, F7, C7, 03, 00, 00, 00, 0F, 85, B8, 01, 00, 00, F7, C6, 03, 00, 00, 00...
 
[+]

Code size:
332 KB (339,968 bytes)

Remove safeguardbrowser.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.