home

safepcrepairsetup.exe

SafePCRepair

Mindspark Interactive Network

The application safepcrepairsetup.exe, “SafePCRepair Setup” has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Setup Factory installer, however the file is not signed with an authenticode signature from a trusted source. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from ak.dl.safepcrepair.com.
Publisher:
Mindspark Interactive Network

Product:
SafePCRepair

Description:
SafePCRepair Setup

Version:
1.1.8920.35

MD5:
216611e9379b39d37808b94c48144311

SHA-1:
33bd27c1314f62516152c2af52dd723fdb5fc697

SHA-256:
8b719376bb740b4e4afb29f70f17b3bdc77e81d78975dfe2edb23dd290707047

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
6/22/2025 5:45:28 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.5.29.12

File size:
5.6 MB (5,864,412 bytes)

Product version:
1.1.8920.35

Copyright:
© 2016 Mindspark Interactive Network, Inc. An IAC Company. All rights reserved.

Trademarks:
® & ™ Mindspark Interactive Network, Inc. An IAC Company. All rights reserved.

Original file name:
suf_launch.exe

File type:
Executable application (Win32 EXE)

Installer:
Setup Factory

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\safepcrepairsetup.exe

File PE Metadata
Compilation timestamp:
8/27/2013 4:10:44 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:nhIm0gDHMxJod6uxcx4x8x1UGomgkUinzEdjudgoULDYbukfEVvS8BD0gPsqo9Gi:hImhCy6uGsgev1ktn4fLMPf7890EsBhz

Entry address:
0x15000

Entry point:
90, BB, 93, FF, 18, 00, 90, 90, 68, 22, 50, 41, 00, 5E, 68, 98, 05, 00, 00, 5A, FF, 34, 32, 31, 1C, 24, 8F, 04, 32, 90, 83, EA, 03, 4A, 90, 75, EF, 90, 7B, 82, 19, 00, 93, FF, 18, 00, 93, FF, 58, 00, 72, D6, 18, 00, DB, 3B, 4E, 00, 4F, 34, 4E, 00, 93, 4F, 1A, 00, 92, FF, 18, 00, 9F, 8F, 58, 00, D7, 67, 58, 00, DD, 67, 58, 00, 3F, 7D, 18, 00, D1, 67, 18, 00, DF, 67, 18, 00, 9F, A3, 18, 00, D1, 67, 18, 00, DF, 67, 18, 00, 93, FF, 18, 00, 93, FF, 18, 00, 8F, 8F, 58, 00, 93, FF, 18, 00, 93, FF, 18, 00, 93, FF...
 
[+]

Code size:
22 KB (22,528 bytes)

The file safepcrepairsetup.exe has been seen being distributed by the following URL.

http://ak.dl.safepcrepair.com/images/nocache/vicinio/executable-packages/SafePCRepair/.../SafePCRepairSetup.exe

Remove safepcrepairsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.