home

setup.exe

This is a setup and installation application. The file has been seen being downloaded from www.neoretix.com.
MD5:
f6986351bce83ec6f2baee68e291acc9

SHA-1:
754d94978fadd2a263419f880e90769c7b4ae9e2

SHA-256:
382e770f0bed3d9afd5c60dd74f3dc3068f130d6cf8aaff95f47434991caebe2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/7/2025 10:21:10 PM UTC  (today)

File size:
6.9 KB (7,103 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
96:QEz7adb1Mdb1nYAy5q0Puu2bDZL1V5i1xQzGfBbkwQgf3NyG1tag2nuD8zAXqa82:rvajMjur2Hve1xQAXf3NvGzmqaIg

Entry point:
3C, 21, 64, 6F, 63, 74, 79, 70, 65, 20, 68, 74, 6D, 6C, 3E, 0D, 0A, 3C, 68, 74, 6D, 6C, 3E, 0D, 0A, 09, 0D, 0A, 3C, 68, 65, 61, 64, 3E, 0D, 0A, 0D, 0A, 09, 3C, 6D, 65, 74, 61, 20, 63, 68, 61, 72, 73, 65, 74, 3D, 22, 75, 74, 66, 2D, 38, 22, 2F, 3E, 0D, 0A, 09, 3C, 6D, 65, 74, 61, 20, 68, 74, 74, 70, 2D, 65, 71, 75, 69, 76, 3D, 22, 58, 2D, 55, 41, 2D, 43, 6F, 6D, 70, 61, 74, 69, 62, 6C, 65, 22, 20, 63, 6F, 6E, 74, 65, 6E, 74, 3D, 22, 49, 45, 3D, 65, 64, 67, 65, 2C, 63, 68, 72, 6F, 6D, 65, 3D, 31, 22, 2F, 3E...
 
[+]

The file setup.exe has been seen being distributed by the following URL.

http://www.neoretix.com/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.