» etxcapital4setup.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (5)

etxcapital4setup.exe

Setup

MetaQuotes Software Corp.

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program ETX Capital MT4 by MetaQuotes Software Corp.. This is installed with ETX Capital MT4. The file has been seen being downloaded from download.informer.com and multiple other hosts.

File name:

Publisher:

MetaQuotes Software Corp. (signed and verified)

Product:

Setup

Version:

5.0.0.933

MD5:

890c5cd106c43f967ef031a5bc9bbfae

SHA-1:

72237c9da1fe889d21221d1066d66194ba22409f

SHA-256:

dee7094b932384822f5e4918b7575337b716da9bbdda20d597459621a86933b4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/14/2025 10:29:39 AM UTC (today)

File size:

732 KB (749,608 bytes)

Product version:

5.0.0.933

Trademarks:

MetaTrader

Original file name:

Setup

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\etxcapital4setup.exe

Digital Signature

Signed by:

MetaQuotes Software Corp.

Authority:

COMODO CA Limited

Valid from:

1/23/2014 12:00:00 AM

Valid to:

1/22/2017 11:59:59 PM

Subject:

CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

6324EFF48E7850635D538AAFF2D614C4

File PE Metadata

Compilation timestamp:

4/28/2014 10:38:19 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:dlJpyoFydCXO3fEL4PhnX8bwCtk565HfgBUEaj7GfFqdWvFNF01DwQV/x3:qyAlPEL4pX++u/gG5jeI2XE/x3

Entry address:

0x126A20

Entry point:

60, BE, 00, 10, 4F, 00, 8D, BE, 00, 00, F1, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.7023

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

216 KB (221,184 bytes)

Program Uninstaller

Program name:

ETX Capital MT4

Display publisher:

MetaQuotes Software Corp.

Display version:

4.00

Uninstall string:

C:\Forex_LIVE_115948\uninstall.exe

The file etxcapital4setup.exe has been discovered within the following program.

ETX Capital MT4 by MetaQuotes Software Corp.

www.metaquotes.net

8% remove it

The file etxcapital4setup.exe has been seen being distributed by the following 5 URLs.

http://download.informer.com/.../etxcapital4setup.exe

http://etx-capital-mt4.software.informer.com/.../

https://cdn.monecor.com/.../etxcapital4setup.exe

Scan etxcapital4setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.