home

meta_trader_setup.exe

Setup

MetaQuotes Software Corp.

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program Markets.com MetaTrader by MetaQuotes Software Corp.. The file has been seen being downloaded from www.markets.com and multiple other hosts.
Publisher:
MetaQuotes Software Corp.  (signed and verified)

Product:
Setup

Version:
5.0.0.1086

MD5:
fa2181e83c1278937ee7fc43f4cd6b6b

SHA-1:
dee699f1d9fec85dfabcf73294d5673695e80c81

SHA-256:
f23046eedf73aa68687fa854ff623d3d021896f0a8eaa0232e3677bf6b1fbfec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 11:37:39 AM UTC  (today)

File size:
441.5 KB (452,056 bytes)

Product version:
5.0.0.1086

Copyright:
© 2001-2015, MetaQuotes Software Corp.

Trademarks:
MetaTrader

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\meta_trader_setup.exe

Digital Signature
Signed by:
MetaQuotes Software Corp.

Authority:
COMODO CA Limited

Valid from:
1/23/2014 1:00:00 AM

Valid to:
1/23/2017 12:59:59 AM

Subject:
CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6324EFF48E7850635D538AAFF2D614C4

File PE Metadata
Compilation timestamp:
3/1/2015 2:56:45 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:4fy0pnI47ZXvPmp37WyH16UTDI02YkxTH12ExSFS7rtPhz1FbkSVdSlS6wXUaxH/:43pnI47ZIrWqjISkg1apbjVdkgDHAO

Entry address:
0x135B90

Entry point:
60, BE, 00, B0, 4F, 00, 8D, BE, 00, 60, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
236 KB (241,664 bytes)

Program Uninstaller
Program name:
Markets.com MetaTrader

Display publisher:
MetaQuotes Software Corp.

Display version:
4.00

Uninstall string:
C:\Program Files\Markets.com MetaTrader\uninstall.exe


The file meta_trader_setup.exe has been seen being distributed by the following 7 URLs.

http://www.markets.com/download/sites/all/files/downloads/all-languages/winclient/.../meta_trader_setup.exe

http://mt4.markets.com/sites/all/files/downloads/all-languages/.../meta_trader_setup.exe

http://ftp.hp.com/pub/softlib/software12/COL47810/.../EN5530_198.exe

http://www.markets.com//download/sites/all/files/downloads/all-languages/winclient/.../meta_trader_setup.exe

http://www.markets.com/download/sites/all/files/downloads/all-languages/winclient/.../meta_trader_setup.exe

http://www.markets.com/sites/all/files/downloads/all-languages/.../meta_trader_setup.exe

https://www.markets.com/download/sites/all/files/downloads/all-languages/winclient/.../meta_trader_setup.exe

Scan meta_trader_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.