home

mt4setup.exe

Setup

MetaQuotes Software Corp.

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program Alpari Limited MT4 by MetaQuotes Software Corp.. The file has been seen being downloaded from new-my.alpari.ru.
Publisher:
MetaQuotes Software Corp.  (signed and verified)

Product:
Setup

Version:
5.0.0.889

MD5:
bccb8fc07c97c8677555e77a51a9a1a4

SHA-1:
5ed349c2d999b6e8df47963bb7a5b2d2f7f173a9

SHA-256:
70b016c09f860805d427349ba47226e82f1b7841e6a08089432b193454f8c27d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 11:25:36 AM UTC  (today)

File size:
436.9 KB (447,368 bytes)

Product version:
5.0.0.889

Copyright:
© 2001-2014, MetaQuotes Software Corp.

Trademarks:
MetaTrader

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mt4setup.exe

Digital Signature
Signed by:
MetaQuotes Software Corp.

Authority:
COMODO CA Limited

Valid from:
1/23/2014 4:00:00 AM

Valid to:
1/23/2017 3:59:59 AM

Subject:
CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6324EFF48E7850635D538AAFF2D614C4

File PE Metadata
Compilation timestamp:
2/20/2014 2:52:42 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:QT5zWrL7Y6frEb/eo9WRooKmjv24Bpe1IOkUyXSlY6kY23IDMsTA:QT5qQUQVUwA+4BJOhyXkzAsc

Entry address:
0x11F620

Entry point:
60, BE, 00, C0, 4E, 00, 8D, BE, 00, 50, F1, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
208 KB (212,992 bytes)

Program Uninstaller
Program name:
Alpari Limited MT4

Display publisher:
MetaQuotes Software Corp.

Display version:
4.00

Uninstall string:
C:\Program Files\Alpari Limited MT4\uninstall.exe


The file mt4setup.exe has been seen being distributed by the following URL.

https://new-my.alpari.ru/ru/platforms/terminal_download/.../

Scan mt4setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.