home

mt4setup.exe

Setup

MetaQuotes Software Corp.

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program Alpari Limited MT4 by MetaQuotes Software Corp.. The file has been seen being downloaded from new-my.alpari.ru.
Publisher:
MetaQuotes Software Corp.  (signed and verified)

Product:
Setup

Version:
5.0.0.910

MD5:
103be1f2b1fcf1f1381aacd495ea291c

SHA-1:
f716773899ccfdb2473127d14164a50340dc84b1

SHA-256:
c4ebdcc1b1734b177d453ab8bf1dd9d01c6e6f2b0af12a9d64ed06362b40cce8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:39:05 PM UTC  (a few moments ago)

File size:
443.9 KB (454,520 bytes)

Product version:
5.0.0.910

Copyright:
© 2001-2014, MetaQuotes Software Corp.

Trademarks:
MetaTrader

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mt4setup.exe

Digital Signature
Signed by:
MetaQuotes Software Corp.

Authority:
COMODO CA Limited

Valid from:
1/23/2014 4:00:00 AM

Valid to:
1/23/2017 3:59:59 AM

Subject:
CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6324EFF48E7850635D538AAFF2D614C4

File PE Metadata
Compilation timestamp:
3/7/2014 6:23:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:zX/mo3SyExUgZNfNZ/S2nGmFlGDlPuDjS1obkUSGbSlv6lfv2gjdsK01mCl:bbZEdDj/RnGKGDlEvbBSokYTjdlAl

Entry address:
0x124190

Entry point:
60, BE, 00, F0, 4E, 00, 8D, BE, 00, 20, F1, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
216 KB (221,184 bytes)

Program Uninstaller
Program name:
Alpari Limited MT4

Display publisher:
MetaQuotes Software Corp.

Display version:
4.00

Uninstall string:
C:\Program Files\Alpari Limited MT4\uninstall.exe


The file mt4setup.exe has been seen being distributed by the following URL.

https://new-my.alpari.ru/ru/platforms/terminal_download/.../

Scan mt4setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.