home

xm4setup.exe

Setup

MetaQuotes Software Corp.

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program XM MT4 by MetaQuotes Software Corp.. The file has been seen being downloaded from www.xm.com.
Publisher:
MetaQuotes Software Corp.  (signed and verified)

Product:
Setup

Version:
5.0.0.1016

MD5:
075bee3c4dd461cf467d3dcc3f28ada0

SHA-1:
3a28b22bbf951aeb0b4873803345c8ddaf15aaf5

SHA-256:
89e5af81f0d66c86fde89e9f9eb02ea8f4e60ae7aca1e42e0236b6b51b7ec130

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:13:00 PM UTC  (today)

File size:
454.6 KB (465,560 bytes)

Product version:
5.0.0.1016

Copyright:
© 2001-2014, MetaQuotes Software Corp.

Trademarks:
MetaTrader

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\xm4setup.exe

Digital Signature
Signed by:
MetaQuotes Software Corp.

Authority:
COMODO CA Limited

Valid from:
1/22/2014 10:00:00 PM

Valid to:
1/22/2017 9:59:59 PM

Subject:
CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6324EFF48E7850635D538AAFF2D614C4

File PE Metadata
Compilation timestamp:
11/18/2014 8:01:27 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:3XzgkKMxMiFQ1mUzmEuwUGT7/nlEU6SdvmW0z1FbkSVdSlS6wC6VxB5NYmVf4juF:TA4jm1vmEHUGT7pObbjVdkB6VjDYpusk

Entry address:
0x135750

Entry point:
60, BE, 00, B0, 4F, 00, 8D, BE, 00, 60, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
236 KB (241,664 bytes)

Program Uninstaller
Program name:
XM MT4

Display publisher:
MetaQuotes Software Corp.

Display version:
4.00

Uninstall string:
C:\Program Files (x86)\XM MT4\uninstall.exe


The file xm4setup.exe has been seen being distributed by the following URL.

http://www.xm.com/.../mt4

Scan xm4setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.