home

orbex4setup.exe

Setup

MetaQuotes Software Corp.

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Orbex Trader by MetaQuotes Software Corp.. This is installed with Orbex Trader. The file has been seen being downloaded from www.orbex.com and multiple other hosts.
Publisher:
MetaQuotes Software Corp.  (signed and verified)

Product:
Setup

Version:
5.0.0.883

MD5:
c61d59284a2067acf43c0e97b9f16c1c

SHA-1:
6da3e658720e77089104e5a868886a91cffa928a

SHA-256:
f1aeaaf2feee1a660a1ff888898980c9bec599feea260fe9bc848e76941476c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:30:16 PM UTC  (today)

File size:
388 KB (397,280 bytes)

Product version:
5.0.0.883

Copyright:
© 2001-2014, MetaQuotes Software Corp.

Trademarks:
MetaTrader

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\orbex4setup.exe

Digital Signature
Signed by:
MetaQuotes Software Corp.

Authority:
COMODO CA Limited

Valid from:
1/23/2014 8:00:00 AM

Valid to:
1/23/2017 7:59:59 AM

Subject:
CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6324EFF48E7850635D538AAFF2D614C4

File PE Metadata
Compilation timestamp:
1/24/2014 11:28:18 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:58yaWAUoF2BlQTEUj45JOLhtaXkww3KolEs0aY+8NrO1YqkkCXSlo6UAHP0KBhqg:5OWAUPlQTEUcCsI3xNsNzqxCXk1HcLg

Entry address:
0x11E560

Entry point:
60, BE, 00, B0, 4E, 00, 8D, BE, 00, 60, F1, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.2810

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
208 KB (212,992 bytes)

Program Uninstaller
Program name:
Orbex Trader

Display publisher:
MetaQuotes Software Corp.

Display version:
4.00

Uninstall string:
C:\Program Files\Orbex Trader\uninstall.exe


The file orbex4setup.exe has been discovered within the following program.

Orbex Trader  by MetaQuotes Software Corp.
www.metaquotes.net
About 1% of users remove it
 
Powered by Should I Remove It?

The file orbex4setup.exe has been seen being distributed by the following 7 URLs.

https://www.orbex.com/uploads/.../ORBEX MT4 REAL.exe

http://email.orbex.com/.../click?upn=FuFmMTPxs0x-2BHtlEGGxY5bC7Yec7YiCsM3GGDLlaDFvz0Bx5QrjBHFgbn-2FTTj3qbxzLf0j3MUTAqXpF2k6XlOw-3D-3D_YbRprYLot9ETuQ2O7-2BozOY-2FutwLJcMeO6s3sWikDNucLDZH-2FyOOENeWFGYm-2BfGiIvSA2UDRm8nb334FuncRwfwc8cQGX-2BHjTZXyLtl2-2BVkaVqDiNqQuK5lbTPKIc2CxP5HuurIsoyAldtU8V3s6x-2Fm88YBXYORC9Jz69i-2B1WfXnknSsqRmv-2Fmq7B6p1Qopfw9pao2w-2FrpC0pwCc-2Fm5BJBE0INdhJAGx-2BpWRN5M2RVFE-3D

https://www.google.com/url?hl=en&q=http://email.orbex.com/.../click?upn=FuFmMTPxs0x-2BHtlEGGxY5bC7Yec7YiCsM3GGDLlaDFvz0Bx5QrjBHFgbn-2FTTj3qbxzLf0j3MUTAqXpF2k6XlOw-3D-3D_O7Hbp3xRc34hxxh4vr0gCObGtG1PZAX-2Bb2pnon-2FxDKbd8GDdDfs4-2BPl0kQFswpN1JEgZbcGn0LGbAy-2BHg-2FvEaivIsEIfayyM2PIdiHq1JUOYcFCAusIjQsqGwXL3mPY2-2BuQnTaEWvFDg5xLJ9stinzYr2vlySq-2FljXM20lL2pvQ-2Fv7q-2FQV8Oe9IAvQgGYTCq72EKcRBYFUDYgcYbCgWBBA-3D-3D&source=gmail&ust=1470553288400000&usg=AFQjCNGuiCjBfBelAB6cAyMGdSERVRVjYg

http://www.orbex.com/uploads/.../orbex4setup.exe

http://email.orbex.com/.../click?upn=FuFmMTPxs0x-2BHtlEGGxY5bC7Yec7YiCsM3GGDLlaDFvz0Bx5QrjBHFgbn-2FTTj3qbxzLf0j3MUTAqXpF2k6XlOw-3D-3D_humD371wDzY-2B4nOuTTwdeYPmmVmnxQmKEQtoLTryMgqWpK5C0mF0241jB9Q6kl-2Fc3uITyyKTLaZj2Hz3TouNCUNLVB27ElSUpgs7HpOIJQULwL6aBS3iTQk7rK3lJxYKQaUapgad-2BbgkM0yFAiAsgsWL-2B780U1oMGgzXYqLZDzoVVfQRDbtU7Jk54BUooBwbRirFiAY61s3MvIvD5-2BDjz5RRFtlyNm9P7O-2BLoRUO1v0-3D

https://www.orbex.com/uploads/.../orbex4setup.exe

http://www.orbex.com/uploads/.../orbex4setup.exe

Scan orbex4setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.