home

ex4_to_mq4_demo.exe

EX4-TO-MQ4 Decompiler

PUREBEAM.BIZ

This is a setup program which is used to install the application. The file has been seen being downloaded from purebeam.biz.
Publisher:
PUREBEAM.BIZ

Product:
EX4-TO-MQ4 Decompiler

Version:
4.0.417.8

MD5:
58c93dba10e5c95a983d7be5cfa66576

SHA-1:
dcba4a6b9f1827e74b0169d02396551ff9632926

SHA-256:
37dea0f74ed0142ba075c47eebe07274e75a662134746583beacbd4ce15c7de2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:56:20 AM UTC  (today)

File size:
14 MB (14,671,872 bytes)

Product version:
4.0.417.8

Copyright:
Copyright (C) 2007-2012 PUREBEAM.BIZ

Original file name:
ex4_to_mq4.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ex4_to_mq4_demo.exe

File PE Metadata
Compilation timestamp:
5/15/2012 8:49:45 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
393216:HJaDmWQRkpArJaDmWQRkpArJaDmWQRkpA:pa6NRkQa6NRkQa6NRk

Entry address:
0x79386C

Entry point:
60, 60, E9, 8F, 61, 43, 00, E8, F6, 8E, F9, FF, FE, C8, E8, 5F, 28, 01, 00, CB, 59, 90, CB, 94, BC, D6, 5D, 08, 6D, 23, AE, 14, 79, 33, 0E, 3C, B9, 73, 67, 41, 0D, 23, BE, 1C, 09, 6B, 57, E7, C5, FD, 35, F5, B2, D7, C7, 9B, 84, 02, 53, 50, 63, 57, 4B, D6, 77, D8, 62, 4B, 69, 4F, 4E, D4, DE, 99, D4, 8E, EB, D1, 8D, AB, 86, AC, F1, 75, 17, 13, 9B, 15, 26, 12, 96, F4, 24, 46, 00, 47, 0A, 00, 01, FB, 17, 75, A0, 06, C6, 81, AC, D6, E5, A1, 8B, D6, 52, 78, 7E, 32, 6B, 41, 7A, DF, 92, 8E, 2C, 34, 5D, E9, DF, C5...
 
[+]

Entropy:
7.8557  (probably packed)

Code size:
740 KB (757,760 bytes)

The file ex4_to_mq4_demo.exe has been seen being distributed by the following URL.

http://purebeam.biz/download.aspx?file=ex4_to_mq4_demo.exe

Scan ex4_to_mq4_demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.