General Info

File name

oanda4setup.exe

Full analysis
https://app.any.run/tasks/8d440be3-7310-4300-83a8-be152d7a07ce
Verdict
Malicious activity
Analysis date
2/11/2019, 05:05:53
OS:
Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:

MIME:
application/x-dosexec
File info:
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5

0db00a483673daa7e3355a9837db4090

SHA1

b205351045302f1a6608a0351330e78b3206dbe9

SHA256

7790740c1975a6903bda8cc5db687d6e4af7ce2aff46ea101074631efbe63f2f

SSDEEP

24576:Y+Gxs/2sDdVHpk4CtdjNz88X10h603HOTXapEijstHSmjd:zGxWDXHpk/jNzJl63sXapItH1R

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distored by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Software environment set and analysis options

Launch configuration

Task duration
60 seconds
Additional time used
none
Fakenet option
off
Heavy Evaision option
off
MITM proxy
off
Route via Tor
off
Network geolocation
off
Privacy
Public submission
Autoconfirmation of UAC
on

Software preset

  • Internet Explorer 8.0.7601.17514
  • Adobe Acrobat Reader DC MUI (15.023.20070)
  • Adobe Flash Player 26 ActiveX (26.0.0.131)
  • Adobe Flash Player 26 NPAPI (26.0.0.131)
  • Adobe Flash Player 26 PPAPI (26.0.0.131)
  • Adobe Refresh Manager (1.8.0)
  • CCleaner (5.35)
  • FileZilla Client 3.36.0 (3.36.0)
  • Google Chrome (68.0.3440.106)
  • Google Update Helper (1.3.33.17)
  • Java 8 Update 92 (8.0.920.14)
  • Java Auto Updater (2.8.92.14)
  • Microsoft .NET Framework 4.6.1 (4.6.01055)
  • Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Professional 2010 (14.0.6029.1000)
  • Microsoft Office Proof (English) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (French) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
  • Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
  • Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Single Image 2010 (14.0.6029.1000)
  • Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
  • Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
  • Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
  • Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (14.15.26706.0)
  • Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 (14.15.26706)
  • Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 (14.15.26706)
  • Mozilla Firefox 61.0.2 (x86 en-US) (61.0.2)
  • Notepad++ (32-bit x86) (7.5.1)
  • Opera 12.15 (12.15.1748)
  • Skype version 8.29 (8.29)
  • VLC media player (2.2.6)
  • WinRAR 5.60 (32-bit) (5.60.0)

Hotfixes

  • Client LanguagePack Package
  • Client Refresh LanguagePack Package
  • CodecPack Basic Package
  • Foundation Package
  • IE Troubleshooters Package
  • InternetExplorer Optional Package
  • KB2534111
  • KB2999226
  • KB976902
  • LocalPack AU Package
  • LocalPack CA Package
  • LocalPack GB Package
  • LocalPack US Package
  • LocalPack ZA Package
  • ProfessionalEdition
  • UltimateEdition

Behavior activities

MALICIOUS SUSPICIOUS INFO
Application was dropped or rewritten from another process
  • terminal.exe (PID: 3220)
  • metaeditor.exe (PID: 1520)
  • metaeditor.exe (PID: 2316)
  • metaeditor.exe (PID: 2528)
  • terminal.exe (PID: 2896)
  • terminal.exe (PID: 3888)
Changes settings of System certificates
  • oanda4setup.exe (PID: 3628)
Low-level read access rights to disk partition
  • oanda4setup.exe (PID: 3628)
  • terminal.exe (PID: 3888)
Creates files in the user directory
  • oanda4setup.exe (PID: 3628)
  • oanda4setup.exe (PID: 3000)
  • metaeditor.exe (PID: 2316)
  • terminal.exe (PID: 2896)
Modifies the open verb of a shell class
  • terminal.exe (PID: 3888)
Adds / modifies Windows certificates
  • oanda4setup.exe (PID: 3628)
Changes IE settings (feature browser emulation)
  • terminal.exe (PID: 3888)
Reads internet explorer settings
  • oanda4setup.exe (PID: 3628)
Application launched itself
  • oanda4setup.exe (PID: 3000)
Creates a software uninstall entry
  • oanda4setup.exe (PID: 3628)
Executable content was dropped or overwritten
  • terminal.exe (PID: 2896)
  • oanda4setup.exe (PID: 3628)
Starts Internet Explorer
  • oanda4setup.exe (PID: 3628)
Creates files in the program directory
  • oanda4setup.exe (PID: 3628)
Reads internet explorer settings
  • iexplore.exe (PID: 684)
  • iexplore.exe (PID: 3800)
Creates files in the user directory
  • iexplore.exe (PID: 3800)
Changes internet zones settings
  • iexplore.exe (PID: 3108)
  • iexplore.exe (PID: 3816)
Application launched itself
  • iexplore.exe (PID: 3816)
Reads settings of System Certificates
  • oanda4setup.exe (PID: 3628)

Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report

Static information

TRiD
.exe
|   Win32 Executable (generic) (52.9%)
.exe
|   Generic Win/DOS Executable (23.5%)
.exe
|   DOS Executable Generic (23.5%)
EXIF
EXE
MachineType:
Intel 386 or later, and compatibles
TimeStamp:
1970:01:14 10:16:48+01:00
PEType:
PE32
LinkerVersion:
14.16
CodeSize:
999424
InitializedDataSize:
159744
UninitializedDataSize:
2224128
EntryPoint:
0x312d70
OSVersion:
6
ImageVersion:
null
SubsystemVersion:
6
Subsystem:
Windows GUI
FileVersionNumber:
5.0.0.1983
ProductVersionNumber:
5.0.0.1983
FileFlagsMask:
0x003f
FileFlags:
(none)
FileOS:
Win32
ObjectFileType:
Dynamic link library
FileSubtype:
null
LanguageCode:
Neutral
CharacterSet:
Unicode
Comments:
https://www.metaquotes.net
CompanyName:
MetaQuotes Software Corp.
FileDescription:
Setup
FileVersion:
5.0.0.1983
InternalName:
Setup
LegalCopyright:
© 2000-2019, MetaQuotes Software Corp.
LegalTrademarks:
MetaTrader
OriginalFileName:
Setup
ProductName:
Setup
ProductVersion:
5.0.0.1983

Screenshots

Processes

Total processes
46
Monitored processes
14
Malicious processes
7
Suspicious processes
1

Behavior graph

+
start drop and start oanda4setup.exe no specs oanda4setup.exe terminal.exe no specs iexplore.exe iexplore.exe iexplore.exe iexplore.exe explorer.exe no specs explorer.exe no specs terminal.exe metaeditor.exe no specs terminal.exe no specs metaeditor.exe no specs metaeditor.exe no specs
Specs description
Program did not start
Integrity level elevation
Task сontains an error or was rebooted
Process has crashed
Task contains several apps running
Executable file was dropped
Debug information is available
Process was injected
Network attacks were detected
Application downloaded the executable file
Actions similar to stealing personal data
Behavior similar to exploiting the vulnerability
Inspected object has sucpicious PE structure
File is detected by antivirus software
CPU overrun
RAM overrun
Process starts the services
Process was added to the startup
Behavior similar to spam
Low-level access to the HDD
Probably Tor was used
System was rebooted
Connects to the network
Known threat

Process information

Click at the process to see the details.

PID
3000
CMD
"C:\Users\admin\AppData\Local\Temp\oanda4setup.exe"
Path
C:\Users\admin\AppData\Local\Temp\oanda4setup.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
Setup
Version
5.0.0.1983
Modules
Image
c:\users\admin\appdata\local\temp\oanda4setup.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\dbghelp.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\shell32.dll
c:\windows\system32\version.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\propsys.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\shdocvw.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\mpr.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\devrtl.dll

PID
3628
CMD
"C:\Users\admin\AppData\Local\Temp\oanda4setup.exe"
Path
C:\Users\admin\AppData\Local\Temp\oanda4setup.exe
Indicators
Parent process
oanda4setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
Setup
Version
5.0.0.1983
Modules
Image
c:\users\admin\appdata\local\temp\oanda4setup.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\dbghelp.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\shell32.dll
c:\windows\system32\version.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\credssp.dll
c:\windows\system32\schannel.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptnet.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\cabinet.dll
c:\windows\system32\devrtl.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\system32\dhcpcsvc6.dll
c:\windows\system32\dhcpcsvc.dll
c:\windows\system32\windowscodecs.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\propsys.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\linkinfo.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\srvcli.dll
c:\windows\system32\cscapi.dll
c:\windows\system32\slc.dll
c:\program files\oanda - metatrader\terminal.exe
c:\program files\oanda - metatrader\metaeditor.exe
c:\program files\oanda - metatrader\uninstall.exe
c:\windows\system32\apphelp.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\program files\internet explorer\iexplore.exe
c:\windows\system32\netutils.dll

PID
3888
CMD
"C:\Program Files\OANDA - MetaTrader\terminal.exe" /install
Path
C:\Program Files\OANDA - MetaTrader\terminal.exe
Indicators
No indicators
Parent process
oanda4setup.exe
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\oanda - metatrader\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\cryptbase.dll

PID
3108
CMD
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
Path
C:\Program Files\Internet Explorer\iexplore.exe
Indicators
Parent process
oanda4setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
Microsoft Corporation
Description
Internet Explorer
Version
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\cryptbase.dll
c:\program files\internet explorer\sqmapi.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\ieui.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\clbcatq.dll
c:\program files\internet explorer\ieproxy.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\url.dll
c:\windows\system32\version.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\propsys.dll
c:\windows\system32\xmllite.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\msfeeds.dll
c:\windows\system32\sxs.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\mlang.dll
c:\windows\system32\userenv.dll
c:\windows\system32\linkinfo.dll

PID
3800
CMD
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3108 CREDAT:79873
Path
C:\Program Files\Internet Explorer\iexplore.exe
Indicators
Parent process
iexplore.exe
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
Microsoft Corporation
Description
Internet Explorer
Version
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\secur32.dll
c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll
c:\progra~1\micros~1\office14\msohev.dll
c:\program files\java\jre1.8.0_92\bin\jp2ssv.dll
c:\program files\java\jre1.8.0_92\bin\msvcr100.dll
c:\program files\java\jre1.8.0_92\bin\deploy.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\sxs.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\userenv.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\schannel.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\credssp.dll
c:\progra~1\micros~1\office14\urlredir.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\comdlg32.dll
c:\program files\internet explorer\ieshims.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\rpcrtremote.dll
c:\program files\internet explorer\sqmapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\devobj.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\propsys.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\sspicli.dll
c:\program files\internet explorer\ieproxy.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\mlang.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\apphelp.dll
c:\program files\java\jre1.8.0_92\bin\ssv.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
c:\windows\system32\version.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\msimtf.dll

PID
3816
CMD
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
Path
C:\Program Files\Internet Explorer\iexplore.exe
Indicators
Parent process
oanda4setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
Microsoft Corporation
Description
Internet Explorer
Version
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\cryptbase.dll
c:\program files\internet explorer\sqmapi.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\ieui.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\clbcatq.dll
c:\program files\internet explorer\ieproxy.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\url.dll
c:\windows\system32\version.dll
c:\windows\system32\xmllite.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\propsys.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\msfeeds.dll
c:\windows\system32\sxs.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\mlang.dll
c:\windows\system32\userenv.dll
c:\windows\system32\linkinfo.dll

PID
684
CMD
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3816 CREDAT:79873
Path
C:\Program Files\Internet Explorer\iexplore.exe
Indicators
Parent process
iexplore.exe
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
Microsoft Corporation
Description
Internet Explorer
Version
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\comdlg32.dll
c:\program files\internet explorer\ieshims.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\rpcrtremote.dll
c:\program files\internet explorer\sqmapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\propsys.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\rsaenh.dll
c:\program files\internet explorer\ieproxy.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\mlang.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\apphelp.dll
c:\program files\java\jre1.8.0_92\bin\ssv.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
c:\windows\system32\version.dll
c:\progra~1\micros~1\office14\urlredir.dll
c:\windows\system32\secur32.dll
c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll
c:\progra~1\micros~1\office14\msohev.dll
c:\program files\java\jre1.8.0_92\bin\jp2ssv.dll
c:\program files\java\jre1.8.0_92\bin\msvcr100.dll
c:\program files\java\jre1.8.0_92\bin\deploy.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\sxs.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\userenv.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\schannel.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\credssp.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\msimtf.dll

PID
3272
CMD
"C:\Windows\explorer.exe" "C:\Program Files\OANDA - MetaTrader\terminal.exe"
Path
C:\Windows\explorer.exe
Indicators
No indicators
Parent process
oanda4setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
Microsoft Corporation
Description
Windows Explorer
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\explorer.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\slc.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\propsys.dll
c:\windows\system32\cryptbase.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\actxprxy.dll

PID
3480
CMD
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
Path
C:\Windows\explorer.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Version:
Company
Microsoft Corporation
Description
Windows Explorer
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\explorer.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\slc.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\propsys.dll
c:\windows\system32\cryptbase.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\actxprxy.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\devrtl.dll
c:\program files\oanda - metatrader\terminal.exe
c:\windows\system32\mpr.dll

PID
2896
CMD
"C:\Program Files\OANDA - MetaTrader\terminal.exe"
Path
C:\Program Files\OANDA - MetaTrader\terminal.exe
Indicators
Parent process
explorer.exe
User
admin
Integrity Level
MEDIUM
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\oanda - metatrader\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\napinsp.dll
c:\windows\system32\pnrpnsp.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\fwpuclnt.dll
c:\program files\oanda - metatrader\metaeditor.exe
c:\windows\system32\apphelp.dll

PID
2316
CMD
"C:\Program Files\OANDA - MetaTrader\metaeditor.exe" /packed:2 /compile:"1728328_11576" /inc:"C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4" /flg:2
Path
C:\Program Files\OANDA - MetaTrader\metaeditor.exe
Indicators
No indicators
Parent process
terminal.exe
User
admin
Integrity Level
MEDIUM
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\oanda - metatrader\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll

PID
3220
CMD
"C:\Program Files\OANDA - MetaTrader\terminal.exe"
Path
C:\Program Files\OANDA - MetaTrader\terminal.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\oanda - metatrader\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\cryptbase.dll

PID
2528
CMD
"C:\Program Files\OANDA - MetaTrader\metaeditor.exe" /packed:21 /compile:"1732093_22029" /inc:"C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4" /flg:2
Path
C:\Program Files\OANDA - MetaTrader\metaeditor.exe
Indicators
No indicators
Parent process
terminal.exe
User
admin
Integrity Level
MEDIUM
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\oanda - metatrader\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll

PID
1520
CMD
"C:\Program Files\OANDA - MetaTrader\metaeditor.exe"
Path
C:\Program Files\OANDA - MetaTrader\metaeditor.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\oanda - metatrader\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\user32.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll

Registry activity

Total events
1591
Read events
1411
Write events
180
Delete events
0

Modification events

PID
Process
Operation
Key
Name
Value
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy
URL:MQL4 Buy Protocol
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy\DefaultIcon
C:\Program Files\OANDA - MetaTrader\terminal.exe,1
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy\shell\open\command
C:\Program Files\OANDA - MetaTrader\terminal.exe "%1"
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
52
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy
URL Protocol
3888
terminal.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION
terminal.exe
8000
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File
MQL4 Source File
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File\DefaultIcon
C:\Program Files\OANDA - MetaTrader\MetaEditor.exe,3
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File\shell\open\command
C:\Program Files\OANDA - MetaTrader\MetaEditor.exe "%1"
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File\ShellNew
NullFile
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mq4
MQL4.File
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mq4\ShellNew
NullFile
3888
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
53
3000
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
ID
DD0FD7C5-735F-T-190211
3000
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
Install.Time
1549857981
3000
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3000
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3628
oanda4setup.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
190000000100000010000000E843AC3B52EC8C297FA948C9B1FB2819090000000100000022000000302006082B0601050507030306082B06010505070308060A2B0601040182370A0304030000000100000014000000E12DFB4B41D7D9C32B30514BAC1D81D8385E2D461D0000000100000010000000F919B9CCCE1E59C2E785F7DC2CCF6708140000000100000014000000DAED6474149C143CABDD99A9BD5B284D8B3CC9D80F0000000100000014000000F45A0858C9CD920E647BAD539AB9F1CFC77F24CB0B00000001000000320000005500530045005200540072007500730074002000280043006F006400650020005300690067006E0069006E006700290000006200000001000000200000006FFF78E400A70C11011CD85977C459FB5AF96A3DF0540820D0F4B8607875E58F20000000010000006A040000308204663082034EA003020102021044BE0C8B500024B411D3362DE0B35F1B300D06092A864886F70D0101050500308195310B3009060355040613025553310B3009060355040813025554311730150603550407130E53616C74204C616B652043697479311E301C060355040A131554686520555345525452555354204E6574776F726B3121301F060355040B1318687474703A2F2F7777772E7573657274727573742E636F6D311D301B0603550403131455544E2D5553455246697273742D4F626A656374301E170D3939303730393138333132305A170D3139303730393138343033365A308195310B3009060355040613025553310B3009060355040813025554311730150603550407130E53616C74204C616B652043697479311E301C060355040A131554686520555345525452555354204E6574776F726B3121301F060355040B1318687474703A2F2F7777772E7573657274727573742E636F6D311D301B0603550403131455544E2D5553455246697273742D4F626A65637430820122300D06092A864886F70D01010105000382010F003082010A0282010100CEAA813FA3A36178AA31005595119E270F1F1CDF3A9B826830C04A611DF12F0EFABE79F7A523EF55519684CDDBE3B96E3E31D80A2067C7F4D9BF94EB47043E02CE2AA25D870409F6309D188A97B2AA1CFC41D2A136CBFB3D91BAE7D97035FAE4E790C39BA39BD33CF5129977B1B709E068E61CB8F39463886A6AFE0B76C9BEF422E467B9AB1A5E77C18507DD0D6CBFEE06C7776A419EA70FD7FBEE9417B7FC85BEA4ABC41C31DDD7B6D1E4F0EFDF168FB25293D7A1D489A1072EBFE10112421E1AE1D89534DB647928FFBA2E11C2E5E85B9248FB470BC26CDAAD328341F3A5E54170FD65906DFAFA51C4F9BD962B19042CD36DA7DCF07F6F8365E26AAB8786750203010001A381AF3081AC300B0603551D0F0404030201C6300F0603551D130101FF040530030101FF301D0603551D0E04160414DAED6474149C143CABDD99A9BD5B284D8B3CC9D830420603551D1F043B30393037A035A0338631687474703A2F2F63726C2E7573657274727573742E636F6D2F55544E2D5553455246697273742D4F626A6563742E63726C30290603551D250422302006082B0601050507030306082B06010505070308060A2B0601040182370A0304300D06092A864886F70D01010505000382010100081F52B1374478DBFDCEB9DA959698AA556480B55A40DD21A5C5C1F35F2C4CC8475A69EAE8F03535F4D025F3C8A6A4874ABD1BB17308BDD4C3CAB635BB59867731CDA78014AE13EFFCB148F96B25252D51B62C6D45C198C88A565D3EEE434E3E6B278ED03A4B850B5FD3ED6AA775CBD15A872F3975135A72B002819FBEF00F845420626C69D4E14DC60D9943010D12968C789DBF50A2B144AA6ACF177ACF6F0FD4F824555FF0341649663E5046C96371383162B862B9F353AD6CB52BA212AA194F09DA5EE793C68E1408FEF0308018A086854DC87DD78B03FE6ED5F79D16AC922CA023E59C91521F94DF179473C3B3C1C17105200078BD13521DA83ECD001FC8
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\47BEABC922EAE80E78783462A79F45C254FDE68B
Blob
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
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\47BEABC922EAE80E78783462A79F45C254FDE68B
Blob
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
3628
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
API.Time
1549857994
3628
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
API
api1.mql5.com=35;api13.mql5.com=37;api4.mql5.com=62;api3.mql5.com=121;api11.mql5.com=151;api14.mql5.com=182;api2.mql5.com=247;api8.mql5.com=252;api6.mql5.com=280;api12.mql5.com=315;api5.mql5.com=334;api10.mql5.com=341;api9.mql5.com=1026
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
DisplayName
OANDA - MetaTrader
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
InstallLocation
C:\Program Files\OANDA - MetaTrader
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
DisplayIcon
C:\Program Files\OANDA - MetaTrader\terminal.ico
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
Publisher
MetaQuotes Software Corp.
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
HelpLink
https://www.metaquotes.net
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
UrlInfoAbout
https://www.metaquotes.net
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
UninstallString
C:\Program Files\OANDA - MetaTrader\uninstall.exe
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
DisplayVersion
4.00
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
MajorVersion
4
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OANDA - MetaTrader
MinorVersion
0
3628
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software\MetaTrader 4
PackagePath
C:\Users\admin\AppData\Local\Temp\oanda4setup.exe
3628
oanda4setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
54
3628
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3628
oanda4setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
CompatibilityFlags
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
1
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{73CC75E1-2DB2-11E9-BAD8-5254004A04AF}
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Type
4
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Count
3
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Time
E307020001000B000400060031006102
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Type
4
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Count
3
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Time
E307020001000B000400060031006102
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
FullScreen
no
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
2C0000000000000001000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF20000000200000004003000078020000
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\Links
Order
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
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0
Path
C:\Users\admin\Favorites\Links\Suggested Sites.url
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0
Handler
{B0FA7D7C-7195-4F03-B03E-9DC1C9EBC394}
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0
FeedUrl
https://ieonline.microsoft.com/#ieslice
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0
DisplayName
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0
ErrorState
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0
DisplayMask
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1
Path
C:\Users\admin\Favorites\Links\Web Slice Gallery.url
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1
Handler
{B0FA7D7C-7195-4F03-B03E-9DC1C9EBC394}
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1
FeedUrl
http://go.microsoft.com/fwlink/?LinkId=121315
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1
DisplayName
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1
ErrorState
0
3108
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1
DisplayMask
0
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
3
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
3
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
E307020001000B000400060031006B03
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTime
15
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Type
3
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Count
3
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Time
E307020001000B000400060031009903
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
LoadTime
46
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
3
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
3
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
E307020001000B000400060032002E00
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTime
33
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3800
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
3800
iexplore.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
CompatibilityFlags
0
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
1
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{7BC2F077-2DB2-11E9-BAD8-5254004A04AF}
0
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Type
4
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Count
4
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Time
E307020001000B000400070002006B03
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Type
4
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Count
4
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Time
E307020001000B000400070002006B03
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
FullScreen
no
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
2C0000000000000001000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF20000000200000004003000078020000
3816
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\Links
Order
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
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
3
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
4
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
E307020001000B000400070003001F00
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTime
20
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Type
3
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Count
4
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Time
E307020001000B000400070003005D00
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
LoadTime
49
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
3
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
4
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
E307020001000B000400070003007D00
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTime
27
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
684
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
684
iexplore.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
3480
explorer.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3480
explorer.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1

Files activity

Executable files
4
Suspicious files
391
Text files
234
Unknown types
33

Dropped files

PID
Process
Filename
Type
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\DLL\Libraries\DLLSample.dll
executable
MD5: 4846bb1b33bfbbceabdc045d3020749e
SHA256: a73966e9582b51cf9c32bafe1fa857ff527057399a4f7cdedded182f0428b6f0
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\terminal.exe
executable
MD5: fa7afd9637634b8b1e0e33b065d07847
SHA256: 33faac9614f1c1b2aaa1e32f864e6808a6c1539e74cdc50b26473fff8e65db59
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\metaeditor.exe
executable
MD5: 7e368f9aaa7084cbea5d093e85854c73
SHA256: c5b989e3eaa4e693863d1c90133a725bad61143be1bad5c99b1898ea259d011b
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\uninstall.exe
executable
MD5: 0db00a483673daa7e3355a9837db4090
SHA256: 7790740c1975a6903bda8cc5db687d6e4af7ce2aff46ea101074631efbe63f2f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998417.russian
binary
MD5: 704607223d1014305e6c095245ef446f
SHA256: 4b53b57c9fa26574ba30ebe6ffc30b8cb84da3338207a436373590a953cfe323
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\Community\mql4.community.dat
binary
MD5: b7d198bf30995cc6ba1e02cbde325b1e
SHA256: 673828da374d9e66d278a9af68bc8b76d115907e6c9af0716467e0359d245c82
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1549858037.English
binary
MD5: 5835a9609c45858c45c65ba5724521be
SHA256: 6859a327388d5ce1d61937656cd4798ac5a53c683f1c9571a584027fe2370a18
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1549858036.English
binary
MD5: a567eb1ff4c1ec47acf8e55cc2e318f4
SHA256: 43742db6614ba3a0b7eb603c6ba6736155705a28ddcaa7bed95b40402d9fd3cb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1549858035.English
binary
MD5: 379d199f9d08b2f933e19b33cb90b826
SHA256: 8c8c1b4246ce18eac53b1c72ebd02c91f4030611f568edaa9914681188d8f5c8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1549858034.English
binary
MD5: fd7efe94eb825ce62efed3c09d723602
SHA256: 4b7bf34735d747b65488900b7beab5928f0253d7f536e13917d80ace03f2bda8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1549858033.English
binary
MD5: 87dee7226e684d0669fca73b81a49fdd
SHA256: d761768f513c0c42cfe6c0031459dbcdbd14eabd1c96271165baca62fa8d2aae
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1549858032.English
binary
MD5: 9b6297ddb579db5427efac5dafa004ab
SHA256: fa6f4c5455b2b6821a537df6c379b6f8ed5a9e6276beeda958ffc905e2ad1eae
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\community.ini
binary
MD5: 99c5de59d6e7325d3a0fac0c5c76d056
SHA256: d502d44cdef6114d0fe4acd72d28caef861f6a5550a3c032d8d8d9a0cbb4f5ff
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\terminal.ini
text
MD5: 917b7364a038176f53cfc10f87525bde
SHA256: 79a49aee62b5768ecafae11148993e982631d1ac7e3aa13c2d3987519d86cfcc
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Stochastic.mq4
text
MD5: e395d7e54b2860b93881e958e1c8ada6
SHA256: f47b8cc934b86ca7e67bb3a1b2874653192c71b438c62e06b718e54997437df9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\DLL\DLLSample.vcxproj
xml
MD5: d017251750bc375bffcbc0e0c748ae26
SHA256: ca4db1aa0ec7c57dd98516de98ea1c4bacffc206e5a13d3b99edc7951b66e5a0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\PeriodConverter.mq4
text
MD5: 618d1e087db8489f59629f11ed0ec93c
SHA256: 4a54ff994618cc2abfc68cb9c5c3852b11335946e0cd985468e83bce8b531f75
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\DLL\DLLSampleTester.mq4
text
MD5: 3b811c530968243b6870f912623c1115
SHA256: fcf325b8372e25cfe6d2cd8c7643dcf9d2675053d861ceffbf66b532c6ff18d3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\Pipes\PipeClientPure.mq4
text
MD5: d9280bf1ed94471c10b13e9813381770
SHA256: d386450fb726a1109c46fcc9eb9df24d62dc72cfce7874108e814e9a64b23b66
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\RSI.mq4
text
MD5: 0fd5e720bbe314604d62898a11319cbc
SHA256: 2f1a6fe6f92f80ed1f1fddda5012663b7be439afedcec1e7c3255a3f116278bf
3220
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\lastprofile.ini
text
MD5: 6ed31c5fd5171d4861e07e797fe42375
SHA256: e97e0f176d36639fd89a6f64264f0ba4cbaa9a49bb968d5d75b914e94402f3c7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\DLL\DLLSample.def
text
MD5: d5c76e29c1642e2688fd583df1ae3785
SHA256: 1d9a8ed7973f082bc93d5476fe695a28fd19fcd2143aadfaafa9c2b770e82481
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Libraries\stdlib.mq4
text
MD5: ca55bf9c5f1d24ebb2b8d3d2fb2decd8
SHA256: 1e89457aec7fd2a37ee3753caea0cfa81d11e96503e595ee6899e0ca085cdae2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\DLL\DLLSample.cpp
text
MD5: 858550acf4743eea3b68067aee04e773
SHA256: 497534b73ac6b44da6b1cf5ef0e47a9e09c4317942efd618c8f0cdce6a06a3a8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Parabolic.mq4
text
MD5: 27ef829de97ecff75cad32f1a66e94c7
SHA256: 488c0bebbb1613d052395d68dbe4844560df1e4b058311ce56f57cd3b73fd9cc
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Scripts\Examples\Pipes\PipeClient.mq4
text
MD5: 89b090956129f9a9adefa057539214b7
SHA256: 958d2efaca96bbb0a19b5782573055d9858ae94fae0ecfe268f0a78abca77a91
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\ZigZag.mq4
text
MD5: c2f8dc2d3303f2a1fc5251c6b24d87e5
SHA256: d359d074584e01f20cc1e68a51dff11b40a06f433a25689f87febf0d465fde77
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\origin.txt
text
MD5: 0ed1484f3f2971cf75349eb0114a846e
SHA256: 832d9e9d19e476691469189e0485dceae94c434df988496786530886df8d7071
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Heiken Ashi.mq4
text
MD5: a276e0830e36898bb69a5a55b508c9dd
SHA256: f59dee9a918d99f9d6c3d15aa05236d833479fe38f5c1aeec2d58f3f31011859
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Custom Moving Averages.mq4
text
MD5: da935d269bb353ede2f3dfa59623beae
SHA256: 8fc6d5d8c41c576219fdcd1459dd628e51e01f9baf7156daa6d7fb624859aa6f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Ichimoku.mq4
text
MD5: 638172cf0da5953c957e4c0486a78ae5
SHA256: 2bb7487c2255fa711e91652c43507521f280699061536ad7e9d3f3a86dfeb1b4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Alligator.mq4
text
MD5: e16b7ffe5d116154f8356a67d871e1ff
SHA256: 87a399546883b0b0bbfb4b538d1454730e77c3f3603452a82d5229ed8e672a1a
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Accelerator.mq4
text
MD5: b1f3c055d1d658678f6ea23927171c78
SHA256: 18c71bb87627996bad14e261c589f37c325a7f24f4f46c3aa8fe3b6ba82c2b33
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\OsMA.mq4
text
MD5: c7a0bb2839f81984ebc130401136cd0c
SHA256: 76d344069f06f153fec5773d7d5b166203babb6e6b52c9085c1832c560518c98
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Bands.mq4
text
MD5: b454f9207122eb7975202791b60e2d2c
SHA256: 4240f4944761e5b0076b0987ea90e77364bd0696d2befdff466ec328861274f9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Bears.mq4
text
MD5: 1b84372890df630bb4fed68d70d9bf64
SHA256: 04d0f2db0a952ca9eac60a4f05bde5d51d17134fb9d7a274c40ed5c1bf695d71
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Momentum.mq4
text
MD5: ef3124063e6ef71ebe8a7ee51647e72c
SHA256: cc8613a181b0fc648cb0bb7124faf4a54e731e9b0657a7024c64eec395993d36
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\iExposure.mq4
text
MD5: 269ee3e4c5bfc26c08f64d5f61946a87
SHA256: 531db761c389935bb33bf8dcfa7a9ff35d978215398c22fc38c8cea42b2d5b59
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Accumulation.mq4
text
MD5: efcf74e82c88d7d2313314f67d6f2f47
SHA256: a585f9731b26351b90e5d33eef116418e72d851f0061c2f833639b133770a9fa
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Bulls.mq4
text
MD5: 8139e5cf3f6cdecc937457fc5748b893
SHA256: 1741d66a028b0a000eae530a5aedfc688a4edc63de0b276b6b78ccae7bd812b1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\CCI.mq4
text
MD5: 048d69ff29dc9b183a4f5b8438b1aaca
SHA256: 7a376ee9e9a9d132036deafd213c02ca06461c28bbf45c2232ee2faf37d7006c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Examples\SimplePanel\SimplePanel.mq4
text
MD5: fe755859981ef321664cb78d347f7f99
SHA256: 3e6cec3887b29e6aaffdc77c56d759dd4c59ed65c2a8483f45dd58d14536c9fe
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Awesome.mq4
text
MD5: bc221a95535cf8cba91108f717be61c0
SHA256: 794187f4cd98715187b407918a4156d56d9f67f575bd96fb3c073495d7378e67
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\Examples\SimplePanel\PanelDialog.mqh
text
MD5: a6fd181f42160dbe74f287f28bd13b37
SHA256: 76117bf72cea2807973c3afd53c7230cab30c446eca8417c8b6974cfef119849
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\ATR.mq4
text
MD5: 8f3540989b5fd64b46eeb7a5342fe310
SHA256: daa1a57769804e536a61c58718f4ce3b78790cdf034314f6f43bf5beb8cf72bd
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Indicators\MACD.mq4
text
MD5: 6608417d7f1506ceb4c18f422f68276d
SHA256: 4e3ce63aed9774537cc4034493ffa9a18aad94efdeaa5ae218a4731adb201e8f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\BillWilliams.mqh
text
MD5: 3c90b96f578bbf4730dd6c7a6b2ecfa8
SHA256: 9eb8f4cb5c43b4fd7032202674dbe4ad0268a616d6c0033336e7fae4a200ce4d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\TimeSeries.mqh
text
MD5: 1eab5c47d2658b9f36ecee4b95c979f5
SHA256: a6b3bcc526bcd3944448022fe41c6f1c5face3117101ea7f9f66f811ffc68c74
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Object.mqh
text
MD5: 7b0d4b8cae69c636a0fbb93e67c9527d
SHA256: 48073f1fe3d2b03e613e26d0fe7e8561cd1154052482082dce3fba8e8f992620
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Files\FileTxt.mqh
text
MD5: 4e2601ff7d2fe5fcdb15a5065b570f50
SHA256: 6dbba3cad2892302f9f946cd2e45cd499108a10f039bbb85c28a3ff21305342d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Trend.mqh
text
MD5: f0e9a1bb44920f3f4b9de5057cc20a78
SHA256: 918f3d47183a55b405012e04052998078a004bd50fa9732c105ef44c58a4334d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\stderror.mqh
text
MD5: d77fa3b400f300368134b130706c3adc
SHA256: e3c84dce8d33f9fff6b76f52f90a46528b57c24df46142087df95c9785f200b6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\WinUser32.mqh
text
MD5: 48dc25ae2730cfd50fb5021df0f5fbc3
SHA256: 1f5a3c515b011e683620837d1b1f1b94c5e6f4d879fdff8e10a7bf3e12deff18
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Indicators.mqh
text
MD5: a349747c3a237d6319189a9bfee660d1
SHA256: 489bc69500cc6d4847425c3ad85706cf5fe5ec3e2637f80686e78b49cd24d5b4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\MovingAverages.mqh
text
MD5: fc688c9edf5c0743c3314fc3c07e6f72
SHA256: 93bebed1c5595c6d742a45e4960b5170a249a742d529adf0ecc82606ebcd87a8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Strings\String.mqh
text
MD5: 72884b5e616884d6e2678cd8ace2a7fb
SHA256: 160b4eb060fd0599e0d8961f6a50f0968a165cd3cd68e36f109b3b93b607dcc1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Indicator.mqh
text
MD5: ef0add3d25bd9a11e80b878bbbc30b34
SHA256: ca577335af2aaab80f316607350268f0f350352c13756e6d27e3cfa762c9afea
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\StdLibErr.mqh
text
MD5: 2a14fc8a81121ba3e0b7b7c0925ee0e5
SHA256: 84c4f1d49e6510c9abff6132f592b275cb6e1431f8ce3ce7b28772ac43062ce5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Tools\DateTime.mqh
text
MD5: 2ac228cede756d32ec93d7e2f83c9279
SHA256: 0cc82eecf19eb7402241579996d9103eeecc9ffb6cbe89a4a2c2d060e130cf15
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Series.mqh
text
MD5: 86235be2492c84c7f66367505ac57a8c
SHA256: 7ca3df75187a9d0efcb1916790498e73dc2a8a336d5f90e0b8ec96c74a03e3d7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Volumes.mqh
text
MD5: 21924e483ee3e858d0e1a6d436b3b21f
SHA256: 89d9fba0bb9c2b3f639005ca4617ce4912877f40e94ef05e8c0d2089ddbefbd9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Oscilators.mqh
text
MD5: 6eb39a603741eee5e3c2975e27f65a27
SHA256: bbd31d625a98663f325b9dad1fe3b12026b67cc46b2224c7647629a2e0ecb2f2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\stdlib.mqh
text
MD5: 809e934bfdd4ac34f97d9b141f70e098
SHA256: 8ec480af7088842916ccd3a16f692e0575f4f6fa9122205f19a171ae4aecc9f1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Indicators\Custom.mqh
text
MD5: 45989fb46627f02cfa044d1888202a88
SHA256: 2d93dc0fc1954f3b505c322ebe404a5e3be253d02bc8c002ba406cbb28654a4b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ThumbVertDisable.bmp
image
MD5: 7f39fe650f59f6f0520d1568508acce2
SHA256: e4bd4624a94a5cced4172602204f10486b08b2d1ae793ebcb5742bc95b033286
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\up_smoll.bmp
image
MD5: be82c36ebb19f0c41d41d6e190c1fbc1
SHA256: 8f783b97ad6c3d7cb01d6e485e9f0ccb11eb75992329ff8cc467b01e0f7e4c6d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Files\File.mqh
text
MD5: e7a205dd5e83e98408085e7ef92081db
SHA256: 95cce53288908f3724730a63b970d0f2a8a0d85dea77359ebf72a05a397a42ef
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\UpTransp.bmp
image
MD5: b14cdde423729c7b5aaa817ee77ae012
SHA256: 094a229fea23466a4082d85e8560be6587931530d78d3d4b71c8bd9d50bcadf2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\WndContainer.mqh
text
MD5: eb1a16a94dfad76462e74fb92ef24091
SHA256: 3200228bccfdb45e2537ce65c4e039319a71bcc4adc25b17665673f94d57693f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\UpDisable.bmp
image
MD5: b9c859ada6c5b7b1953def98e5c8fa58
SHA256: 1312df4c53e4e08d401e8d60b165e3830ce7d7e6b3c86ae283e9a5a4fb9ef010
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\WndObj.mqh
text
MD5: d2be71ede1e63c02b3b3b2ee7d23a4ef
SHA256: cda4437dda8afc73e7c24c0447f839d636a5fb295b92a7c43790e340898c2cc3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Turn.bmp
image
MD5: d5943c75e08f7cf2dc815e9093d58158
SHA256: 9160e58f61b9d53af6fe1b70253f168a5cd5c9d77e5cdc3a8140d3d93d2711c9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Wnd.mqh
text
MD5: 8737b445f68536be23ada984636af8af
SHA256: 2757aebe13e733b1ff9f0b3e96c7ceebf2778fde797b2f7c49be72699a2949d0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\TurnOn.bmp
image
MD5: 446a47bc09c7421afd92f0445e643e78
SHA256: f99bb8d3847457bae467851731577dbb5969a9b9c20747290c1d67f22c31e8db
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Scrolls.mqh
text
MD5: 004d77b2445925b004ad3da133a7def6
SHA256: 86fefc8b1b446598e8a2db1ac029f29b8d99c56436016c26786b3e75c35b4c8d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\TimePicker.mqh
text
MD5: aab55cd6040897d2d7e02e97d3970abe
SHA256: cc9ec9f7b5ef20861a29f51df263fd7105765fcc81b84568eca22f9f404a6967
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Up.bmp
image
MD5: 7a4423c336862339c9aa594b3b9c1702
SHA256: 8bc47733e26818b3f00639c05476328fe1d1091ea466ad63f88faf638c2d75fb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Files\FileBin.mqh
text
MD5: 33d246b844fa581facbb08e8467435a8
SHA256: db0e13d7ddabe576e0896d67855a5c3821f71990654a21cefe4273cecc579938
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\SpinEdit.mqh
text
MD5: b545190e8a1c1b6ae3dbf467ade17bcc
SHA256: b533f860b715ed67baf422469e8a334d95dc31160f913a6574f6e973e2eaade2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\UpSmall.bmp
image
MD5: be82c36ebb19f0c41d41d6e190c1fbc1
SHA256: 8f783b97ad6c3d7cb01d6e485e9f0ccb11eb75992329ff8cc467b01e0f7e4c6d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\WndClient.mqh
text
MD5: 95513f334b549578ab9b1e89c63064e9
SHA256: 7c40a8270290e191234b159dbe14da25d8b2860dff620b9745f0f3019d60da76
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\TurnOff.bmp
image
MD5: 4078b744ec4aacc05706da60658be5b8
SHA256: d773221ef3c8e5cb72be8712ac80cb89bc68ddbd749f6d94c0adbb7cd8dba2ed
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Files\FilePipe.mqh
text
MD5: 99c35a6ac176ce10ae689382bd1d92bf
SHA256: e5eacf15134ceb7b60ebad58760ac3f00cfcc05295d9a00e304a9072ae8d8c2f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\SpinDec.bmp
image
MD5: a18aabe128633df6eed9e7b00f168699
SHA256: fd6f0eb884b3d7d7e58cf43e77ef7582001f2b556451211e128b6606b84111e9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Right.bmp
image
MD5: 92aefc909d318fe697054d2f71d3f3ff
SHA256: 6a34150238b6ae6b47d41d101e231a1bed64912e008f35cd85fc40263c538b01
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ThumbVert.bmp
image
MD5: bac22303f0436aa58cefb67189e17cbc
SHA256: 95cfdb7dcbe29e5dc3a96be329d5f0c550e64ac71918c4fe4ac5b6d2a5f0e6b6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\SpinInc.bmp
image
MD5: 13d28eec8e1f0764c72ecb0a1dd1d7ea
SHA256: 45b7e2554e10c99cf744ed5257f4e30be5d6f766f7b293f66a59338a41e39690
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ThumbHor.bmp
image
MD5: 682e747fc69e385c9bb408e39a1df41e
SHA256: 9a2b3d347fa1d2d5f1657c77c560e29b62caf8e6dd1f5210d7be049685195653
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\LeftTransp.bmp
image
MD5: d9c18f1ee9be649c4f5de670edfd7081
SHA256: 99272e707d33f20756f68d2c2edf9071ee6b8e81d77668f03f4aad0921b59956
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\HelpOff.bmp
image
MD5: 7e281a9ce676975dcab7f32383a1d38e
SHA256: 4a2467be237e723f0365eda8e325adb3f5965f972bf7139a22af01e7f3520ddb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ThumbHorDisable.bmp
image
MD5: 6e67db6dd2f6b1bbf4d84720fa7ee4a4
SHA256: 196ca140b567b024cfb41f2d16b4b9ccec389cbfada539292e80949a20b21b77
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RestoreDisable.bmp
image
MD5: 2982f52993888dc86f7d6e640c023e1b
SHA256: 5b41e9a68ab5610df501d88f3ae299d54aede456182d62d8ed26f13c40ff47a6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\HelpOn.bmp
image
MD5: a7d8aba2f57ca924e334699ca7021999
SHA256: 82211a2620665f4fda6698392af12cd4e90f98478ba4f427184e0689ef0fc806
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\LeftDisable.bmp
image
MD5: 358660468f7e31179d49ef6aa543fb4a
SHA256: a40029c345d44fa818e9671bff81c8be63bf35318f2871a2afe535823a8b6e71
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RightTransp.bmp
image
MD5: f57ee1b72dfcb29c193e1bf2504aadd5
SHA256: fe2ec3b5b8a2bdf0a91068021e0a45f94a789c636712023aa197ba503a740af4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Restore.bmp
image
MD5: febd7ae0f7010d549c367e8bab2550e2
SHA256: a877849271623fa10b9132c251239c28e8a755779ba9f6f31d42485186f4996d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RadioButtonOn.bmp
image
MD5: 68e3c1c502c40fd012e6f89109268e90
SHA256: 009841ca8e69b0c8a30cc075cf277925a70f62882988fe4555a65c1ce61d3fcf
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Left.bmp
image
MD5: c34c84bda85e10ccd6d7b6fab02087e5
SHA256: 3b8d2fcd6e18f269b5120496040ff64278cab5267f5656ed33ce37c8e51af371
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RestoreOff.bmp
image
MD5: eff937b33f71aac9a31ea8097e2c4363
SHA256: 3ad40ff8e35464ac01c87bc74202a76d292a638ef97098f092f3b0e643dee6d9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RadioButtonOff.bmp
image
MD5: 3c2f63169316824d8eb5c29f69e286b6
SHA256: 6cc6772ef3dad5ad18856888b93b9956f8fb718c7e5e4ee9ac14b92d46045f92
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RightDisable.bmp
image
MD5: a00fb4dd839cef230ce56899ad9d1464
SHA256: 765663d59f213cc4a5d3a8cbf6fecab4e41da7f88d9a3cf953e4810c90170e52
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\RestoreOn.bmp
image
MD5: fcce1f24487abfe92406180c2c0b786b
SHA256: 8691062f29793819e552660600e11c81690871711b4c12e032b2990b1308943b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\down_smoll.bmp
image
MD5: 91c80ba0694482860929b0e28d344ba5
SHA256: 7a5d40045a21e5b529881fc03eb5ff29889cbc653b12bb50934c2c6d4f0f1cde
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\RadioGroup.mqh
text
MD5: 46e423a42a4e19b660702d7d51581f82
SHA256: c5d9e60467949957aeab34a9a7c83394fb5e26e221f48046b6c509d232c914d3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DateDropOff.bmp
image
MD5: 5af1c0a931291d0efc98398f7ca0b987
SHA256: bab183847f750292dc1b87192c1d15581751d0e907386d7c399fa6f4f017a4b5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Rect.mqh
text
MD5: 5556ec3d0edc530b8c82d43a7c798fa5
SHA256: d275201e3270c3158d0aa48f0d256e8d7ff6e87ce20c8d6162766eccc1df92b1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\CloseOff.bmp
image
MD5: 8a6eb3ddcac7cf5d4a89f13c46a6dd08
SHA256: 94b02e4a79c613140a28fa66c3da3212a705cffbd95270e4e0c4d47aaf3f5cb2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DownSmall.bmp
image
MD5: 91c80ba0694482860929b0e28d344ba5
SHA256: 7a5d40045a21e5b529881fc03eb5ff29889cbc653b12bb50934c2c6d4f0f1cde
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DropOn.bmp
image
MD5: b14cdde423729c7b5aaa817ee77ae012
SHA256: 094a229fea23466a4082d85e8560be6587931530d78d3d4b71c8bd9d50bcadf2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ExpandDisable.bmp
image
MD5: 1f654455e5784f705534a8518fef5640
SHA256: 67f4ca5bf28b670e7b5ccaac63b8c5dc72e4047b1b10488ed35f141554222746
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\CheckBoxOn.bmp
image
MD5: 78de731a1b144055ea131b72ce887f90
SHA256: 0e18229efc821139baef5a1d0877853b65385768362c92ebc89ac56caebf94c4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\RadioButton.mqh
text
MD5: f2662adf73c75ac5b3dfff965b849762
SHA256: 96d1b193682e9fc6934ffdf0e69e804bce425642b91b9e3e7cd32f663e02d5b3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Down.bmp
image
MD5: 5549b11b15f1079f21dfbd7bc382fd86
SHA256: 58073fcc8c5c9e6f519c2e204cb64efd2bb88d6d1251d2eb38fdeba184f8bb9b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\Close.bmp
image
MD5: b80f48dc9225044c9814ff0afaca3d9c
SHA256: 30cf53c4fb14809535bbae76681442ba60ecf924a99344af5e59653f7dbbce91
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\CheckBoxOff.bmp
image
MD5: f5038628cb45cff4951f987da2efa250
SHA256: ec006ccbfc0709c5676f92b6d7a98c9494b345e6effcb8acf2e578bdef19cdf3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DownTransp.bmp
image
MD5: b8562f083b4f9432539cf5ce20ff56a4
SHA256: a118242c3a439df88d3b76a3fafd346397a0d253117e1809c11187fbafbcea0b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ExpandOn.bmp
image
MD5: 545034155439e4cf7357f1c24b647a1c
SHA256: ae5ed30ebf0e58ae4e06f2ec19d2931baa47d5272b6d45b4a2f3caff3abca95d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DropOff.bmp
image
MD5: b8562f083b4f9432539cf5ce20ff56a4
SHA256: a118242c3a439df88d3b76a3fafd346397a0d253117e1809c11187fbafbcea0b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DownDisable.bmp
image
MD5: 4119d042a71d4e00690db5da1969a128
SHA256: e736507d006b8fb0736121a82743261fdf8c57bdc1cc09dfada4ee0a151ae97e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\HelpDisable.bmp
image
MD5: 92c4f6935b1a130b750d978030c858a7
SHA256: 3e3f4bd3043a36a4fc3c25e2194ba865762b361804f62ebf523cf773375d8496
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\DateDropOn.bmp
image
MD5: 4e745d1cf8b71f2f4188dc19d24a251f
SHA256: 6eb4dc480cd579d0e18bb6364d4cf5fc1b373091a274ba1872e56f95bf1e6b53
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\ExpandOff.bmp
image
MD5: 8b7c18d274ff8b0e041280c21b6af964
SHA256: 1e53f75f2e45bd11f86520ca3b3dc913b0e78446d23b93305ce07589b9c6f2e1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\CloseDisable.bmp
image
MD5: 1e959a4b80d3cd7db149fefa3276eb04
SHA256: 8ede3ca9f3d3f6f0416b5b52d01f2f9320b1e29650372d7ae5240ae01cfb0777
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\res\CloseOn.bmp
image
MD5: 81d2358666ae5369406ef640d53697bf
SHA256: b9b837781e3cf966e1fc9dcddeb451b32b3322270ab41086143742ee17360a07
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Edit.mqh
text
MD5: 954a84ac2751cb4631628dfe0812f278
SHA256: f45875092aea57eb5cf3daa277d7612d2b71d7b7baa20babbd1e77ed310e94c9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Picture.mqh
text
MD5: 690d75c744a78d8f4084eb62d263f9e9
SHA256: 2ebe350175fab7085ba747cda8dbd9a43d1408cc123f7b28aa7fe304e95f630a
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Defines.mqh
text
MD5: cb61698396fae3010fc42c710caf96b3
SHA256: d6530e0a5d0bdb46c1760443ea7a4e1b96ebd75a6e5a79aa26ebdf5e90f545e4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\ListView.mqh
text
MD5: 78079f491478b1cd4125682493168614
SHA256: 7b323218354d5ed9b321dea9b8fa48225d50e9d3bab9af110ce7eb5d6af4c8db
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Button.mqh
text
MD5: 4dc7d4c0ef6209caa7de7fb7341f54b2
SHA256: 7aebe75c966bad1fd95b0c9fd40167c5256ce8570d6c22993cb01777b3c542ff
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\CheckBox.mqh
text
MD5: 988a99373bddcb97d181c8ca2e638395
SHA256: e79fce1411e087d2e2e5ae0ff69271bf7c2f960ee89d9f26e41bb73b619cbc32
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Label.mqh
text
MD5: 1e837ea67a5d3886b62302f6256ab331
SHA256: c1457b7d24d20d92b1bce86c3e6df47d2932624bf80e723b72996c10bd84903b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Dialog.mqh
text
MD5: 884b11d6b942abe710dabff59680760d
SHA256: 647c2ee7aa891395789c8c7afcba55bf75fe356719431c5b45a1c87865bb90ae
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\DateDropList.mqh
text
MD5: 524fe04ca60e7af214eadbd5b409038c
SHA256: c644e993a7991b444d809243936c496128308cb7338715b84ff99019a2b66099
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\BmpButton.mqh
text
MD5: ec3628a33445543151936b66524bd299
SHA256: d5ba48b9b31293b96642eb0fb75a44f85fdb63954f7f08d47810110682188146
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\Panel.mqh
text
MD5: 54e1360b0676380650218943a1118c92
SHA256: 5cd81d3f77a49a59bbf9ff1b39aea1c212aa0f2418a7d0776eb515c52ab15a61
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\CheckGroup.mqh
text
MD5: 062471fd408fa9cb5a330b5e39a3e3ab
SHA256: bcf212b1c523e3af2341d5ff5a503360abcdf8e6bb662e4ddebd2e9dada3192c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\ComboBox.mqh
text
MD5: 6fb221e47bc5e89d4680c1fbfd9dd14f
SHA256: d0ac4e366cd85096950f41a7f3ebd8b15c9bdb5acd742c8fee5be2f99173e765
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Controls\DatePicker.mqh
text
MD5: a81c49f93239841f420d2cab3ad62173
SHA256: e459fa05c67bae9df99eb30dc269dcababb94e53115ba9c855de91dae57e586c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsBmpControls.mqh
text
MD5: f90887d3759f33a7574e2b75c4dc68c4
SHA256: 563992888ccc0442209cb982b08598b0a289550cc7826142691ff4c59b1082bb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Canvas\Canvas.mqh
text
MD5: 284f92700619dd0530971d7b42d63c12
SHA256: 64d5be479970fa194408c369414dfd4e76fe38f256294aecd7c7399139b01ef2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Charts\Chart.mqh
text
MD5: 4ee53c009d840d69e81e1e13650d6304
SHA256: b915ee102dc232194f43e14f4404c601172d938468aa8c99560dd6a87997eff0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayString.mqh
text
MD5: 50b760340db5ed51cb72b3bfb29af6ed
SHA256: 1917d788ab1208c17f1fb49ae3a4b1989bbae3035893648c950c0570e3b7c04b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsTxtControls.mqh
text
MD5: a39e018a14e5de6b829c893ef1cd9b35
SHA256: b878bf13c8dcf713e0190824569a373d3ac51dc56819989423f61cb368ff5715
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsShapes.mqh
text
MD5: 05c3189cd49e0a71752bd89bfa53feea
SHA256: b9c41a7826622a9c0bdb88f3bfd8c50a13a92e05a1a2f008bdcba1658c5bf559
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObject.mqh
text
MD5: 83c5a72e993a4efdc4a8d9f0d6d03493
SHA256: 6cd760e13840c6cbfef3313c0c7db674808078dcf789e58938c04f9ea797aef5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsChannels.mqh
text
MD5: 586308b2b50455a023539677d2746051
SHA256: f67ecb1900c8b5e5dcb6b1792b26e382c97c1a0fb1642cbbec1375ed3cf85761
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\TreeNode.mqh
text
MD5: 648fc969b496e280b0bb86f007f902f0
SHA256: 67d7b2ccb7e9283cca9deb3603a24795d47f1396ea8734ab82d902b9c135dcdc
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\List.mqh
text
MD5: 6800539e6d92b736127fe5d94996924f
SHA256: f7334c9e21ff241b1d1154b06d431cce49c0e296b6c7fb46b59f7657d2991f8b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsArrows.mqh
text
MD5: ef39d3fd157e7c765870195dda04afc9
SHA256: 93a187f7bc128b7d99ab2351d400992ec5a251910af23294085549958669ddad
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\Tree.mqh
text
MD5: 76cb57572f055249a78af710d0b2abee
SHA256: 4d4dd2007fa4d4577c9e40c28cf8544f8b154c15861b096bd1a840924d495500
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectPanel.mqh
text
MD5: 45a2073b089ccba7df2d10454319afd5
SHA256: 36c38fb800a794461433d3615c079691d3ed0799b1a9d62acdab5d3272c2224c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsLines.mqh
text
MD5: 63f193d0015923412c2edfe320969c36
SHA256: 1f78ecde58761acd7c0f79d4706ab7f6f854b117cf304697d3c2c017b711cda8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsFibo.mqh
text
MD5: 7db117ad62ea17b682e88a7c5886690a
SHA256: b89c6f9b7f14b22d6a192c5f0f625a759a6bdb0b4182c54906dea938cd45f3e3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\ChartObjects\ChartObjectsGann.mqh
text
MD5: 4e91cd016ef3427a6350555eca66f6fe
SHA256: 440a61fcdd549cdb07509bb06561bfc743055fdddc790daa9680c48bf76f0375
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayFloat.mqh
text
MD5: 82efd278d622abf0ac3afb98c1900d4b
SHA256: 331e4b985bdfc45674f67a6eeadba3848913359132dbcce986052c7ef6a04f0d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayLong.mqh
text
MD5: 7fd0d8764bfd83e848593977b3f3acc6
SHA256: ad4f1f2315b49e1196209e1ab7ee6e47a952ab3cde60e21c574acf1d0fd75ed6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Experts\Moving Average.mq4
text
MD5: faf509a2d59302077b71f494ae8ed42e
SHA256: 94b8a95ba1e8f5de250938e09cabe433d8cb16037796f7b9a24ad261a6a6dacb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayChar.mqh
text
MD5: a6d32cedc7fd7e24d82f36039a1220ac
SHA256: 595c4cb02c29ce99495abb37e1bc93cb9384b05ce1a089a3ade7e90090c27af5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayShort.mqh
text
MD5: 4c0d4722fdab68c5a6d6f6c3d659c427
SHA256: 62897c427ba7824b3958be1a50fd5cf9f7e48403050d4be0b9f343e998a0b8b8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayObj.mqh
text
MD5: f8d64b176f2d22607ba4b0f86702eb66
SHA256: a56cf708caefbb655a3275daeac312121aed8ea1c21811b079458433c70cce28
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Experts\MACD Sample.mq4
text
MD5: 76336ff9b38fbebbfbaeff0b2de320fc
SHA256: 4b9b0837be9a580444a15513e02dbbfc4e3fba7321133aefe5cfb1cc7c34fd5f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayDouble.mqh
text
MD5: 1ca1a9d3122d67ac8fb7644c3016c554
SHA256: c4f2c50fbb3baf347c2c0c41e6f9729c4709273e0b46295f6a490b2e7becb0f5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\Array.mqh
text
MD5: d8cd709d6263676aed5398d602ebeb19
SHA256: e0a9c33c7f48e8f3568493a6a5c0f73cfc0ca67f244c98db537197e33ef353f4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Include\Arrays\ArrayInt.mqh
text
MD5: b9a328a4e38a5152b93fe25c64c1dfbc
SHA256: 7bb3a442630411746d43d4ec0df18b1b2b3d56965cf29876228375e391997dea
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\mql4.zip
––
MD5:  ––
SHA256:  ––
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\Layers.tpl
text
MD5: ab09fe90952e30f625cea1a8ee37c03d
SHA256: bcd45609070340aeb991e2e144eb8f223b9f552cfbff510400a9e194fd2e4827
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\BollingerBands.tpl
text
MD5: ffb7ac27b5b6271afb5dfb3435a05a4c
SHA256: 3cc9e457716dc3116e0c5e94b0a08d52bc04781936ee6b42085325e157c812bc
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\Popular.tpl
text
MD5: 8c2fb164cfe9ea09bd4657f05c9a9777
SHA256: ef2b0177a970b6d6df52a9d03a004eca68b6f410f91047050023024d6cb4f8bb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\Momentum.tpl
text
MD5: 255b513a661f9808a09ebc1b03660653
SHA256: c7f8dacc1aefba1c965b6fea94a029d80a5161a011f81edbd5e4f5d15e554b28
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\statement.htm
html
MD5: 2d2466b92a18e19823b379db53d4e114
SHA256: 8d1078534622984d2773fcd2584d41e2faa76d453ae4868c594490b7501069cb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\Williams.tpl
text
MD5: 4d1db2b7c191d170c7d606d7653a8514
SHA256: da71cd87ffbd0a92179b23fa28c7adbbe9f7f79960d4e41affeeaa8c0ed99293
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\StatementDetailed.htm
html
MD5: 0bac3dcd86d44db76d11a19b2fc5e841
SHA256: 4627125607c896c951cbf80189a22a3ff497f752f0f76972b00ffe62c5159be6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\ADX.tpl
text
MD5: 05ca4c0a3568e2f0352f5c28e33f54f7
SHA256: f57b9c2a2b58469fb54c27af8a934e5c45e6245f71f495f6e7a8998be85ea7f1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\OptimizationReport.htm
html
MD5: 784ea6b9ba9353a9edca33a7ff879593
SHA256: dc1d98f43c06e1a1fb7a6be186503a6eab61e59a83390fbaf217a13a99038c53
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\strategytester.htm
html
MD5: 26b2d851bc754ce6f01893df04c64090
SHA256: e68af34ba74f7aefd077fe6147c6e2f40f91b90188e000656cab533ffb419a04
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\templates\Volume.tpl
text
MD5: 71e7d43363787423f997d2911f841733
SHA256: 1e1cb0866dbc2091a39a98219395f6bf50e19633050ad63e40bf538def9e3ee8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Swiss Franc\chart03.CHR
text
MD5: 34b5854ae81208a46b56978b83ce2b0a
SHA256: e133902f73140796efad41aca3da903d1e158dc41cd546363a66e1ae3294ba6f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Market Overview\chart04.CHR
text
MD5: 629309fa1359f8b047914e827f91a485
SHA256: 57739a03ec7fb3b1737c48a9677ca3fa657054acdc43bd160c1e23e4e448f00e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Market Overview\chart02.CHR
text
MD5: 3acd68a93129afd81d39c16fc8b66a43
SHA256: ec73fee2e63cce7054201f90058d54930ef9bcc0bc740a702b090168536944c5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Market Overview\order.wnd
text
MD5: 374d1a4c11ef82ab86cc86bc9fc3234b
SHA256: 5edd2401e423bf7f340357e99bfdb9e6737469085410aec2414bdfb16910e6ec
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Market Overview\chart03.CHR
text
MD5: a4d44a4fabceba241a0781d6ef9bcd92
SHA256: ffd5afc9eabcd6280d6c71d3e4e8e432efac3a2a82de3fc628adb16c55269419
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Swiss Franc\chart01.CHR
text
MD5: a1dcfe0165a0ec56c2a7add71cf64720
SHA256: acb49e3a852696d9c00b8a18d4200664098b5eb824b2018b9f502caccc643e87
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\lastprofile.ini
text
MD5: 6ed31c5fd5171d4861e07e797fe42375
SHA256: e97e0f176d36639fd89a6f64264f0ba4cbaa9a49bb968d5d75b914e94402f3c7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Market Overview\chart01.CHR
text
MD5: 5aa16c6a9edd5076de7583ffb0939bf4
SHA256: a0f1b43b9da086973b29fe73f61ebc2cdc70aaf23ba39667c8478599d18cbdd0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Swiss Franc\chart02.CHR
text
MD5: 2842e45a276daeb26f153de925222959
SHA256: 4a54928032f2efa381da20f147e9bc80e8644d0d01d0a48b2b4c103af026541d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Swiss Franc\order.wnd
text
MD5: 160ce6235904b9dd0c0bc5debd46c2a9
SHA256: 8716dae9d97cde6377e17ba9355fc88fb7c730863182186154803f71ab9bf04d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Euro\order.wnd
text
MD5: dd404d8b3aa934cb8476cfa1c5762c0c
SHA256: 39c8278327a573c90bd58827a65a942775641f4d4cfd4646a4405bc5b0789be3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\default\chart02.CHR
text
MD5: a8413bde8cf6c9b8a815bd38981b5c4e
SHA256: d6a0fb8366a2724a0edf9d99b10451e06d7a7832594d78620cf3aefe11c88b5e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Euro\chart03.CHR
text
MD5: 536bbeade46922fd39946ba84832fd91
SHA256: b8d172cbab65f0cd16b68b1a233734b4c71715bd0386676787640be38ab9b6fc
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\default\order.wnd
text
MD5: bec51eabd4a915e9bf5c33d98e202f1b
SHA256: c5467fd664935820918fbde7bdd79fbaf423ee043c38fbfa83788ef1ec1f75ee
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\default\chart04.CHR
text
MD5: 36e98c7362a0d27d2a596d939a144743
SHA256: d288cd11900a881ecaf7a48bf58b0b701fdd59865f771eb7743d1591387da3f4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\default\chart01.CHR
text
MD5: e40994752a145890e922b500b9efcef7
SHA256: ec5ae1a4126438fd3595953ca9407aa3140e8ea1dbb8041a3e8a8ab474bf3cc0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\British Pound\chart03.CHR
text
MD5: e70e75a48fcde1bdccbf60eefdf7e1de
SHA256: ce6f24a8b1ba06f703aff1ee5e7be53b36d9a5b2fdafd6c595f014e8321f4936
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\default\chart03.CHR
text
MD5: 3b738b2f0543172a85239248938c81e1
SHA256: 2417e8b00b4479870a57df6f1ff082d33f2cbb6f879611e263064b480b8470a1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Euro\chart01.CHR
text
MD5: b2f9a27089ca86ff32d61c553c0c5399
SHA256: 774aa085a942d24153c25dd06ddb802c4b5e68d12110c3c4a8e43a76ca504411
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\Euro\chart02.CHR
text
MD5: 7f285bb4ce156040e3b537516047cc8e
SHA256: 3c5824b89b60e6157e5332de0ffec20682ce4ebc57f2d8d976edc3f2e051cbd8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\British Pound\order.wnd
text
MD5: 2547e671f549e0c3b143ee8032fde665
SHA256: a0a2d5f1521ecc527f378a2d5201d85f4213c05dadc5f06fe3b53cceb19df2a6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\British Pound\chart01.CHR
text
MD5: fb039b7b6818aa0b1b93dad2edffe9bb
SHA256: 67daa9da824098d6215fdc5dc9ca9d09ad94651ae604eacba5bd61269af15bbd
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\profiles\British Pound\chart02.CHR
text
MD5: 91ca3cb8e3fff0e65c6a344cbbd7dec3
SHA256: 78bfdc6664f61f77c139a27fc47f0bc1fb2bb3a5d62085f6a319a4c22ca77b38
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998549.vietnamese
binary
MD5: 24e74959c0d0b7d5755bd49c149dcd2f
SHA256: 0d6b0412021f06dd12e33b6335d8e806c20cbda66ea14c297ff0a840a10c4903
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998548.uzbek
binary
MD5: 079e173ba22372f4fe60d390cdfd4347
SHA256: 9ff016e6a7e0e3b10023e07f885612d340dcce8f771cee0ecaf7d4fcd71464af
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998547.vietnamese
binary
MD5: cd1300217d354736631fcd05cd49bc7b
SHA256: 417803400aea067224549318ac1f0611206656e94f95ff4cf7611b52664eb79e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998544.thai
binary
MD5: 74372627410408d7deeec1519bebe1d7
SHA256: 7070ab672dfbfeca7c6a26d625aee68400235dfead39910886874b248fe43f35
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998543.tajik
binary
MD5: c164a13c6c9d21208b6096ef06b9984a
SHA256: 7bcb1fa210d9572dd384b764cfb61a8184da94bd521112891b960000bec6f5d6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998541.slovenian
binary
MD5: 11c39adfcac3fb27ff2efb8e42b0715c
SHA256: 11989a7e424b4b6a90657ca413dcd289ed69bc8ecafa8080858c0c31836e9f52
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998542.spanish
binary
MD5: 7faf7a3bc132d7c6dd9d58664a63ac1e
SHA256: 7ab916f195ecce5e961ed5c31e6c651eb4c1aca39a21b6f827bfcc6381cab10b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998547.turkish
binary
MD5: 893e1a24ed3f216bc17631f9f43e2916
SHA256: 5fec49bf99f0af929c3623dbac719103c85179d7fdb08ef2cbb43e6ab4ebddda
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998545.turkish
binary
MD5: 881a8d2f6a4bff354286982dff436201
SHA256: fbcc6e557dd3059851fd5ed3f72515f39b9028395c445b1f4eea7822de006ef9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998545.tajik
binary
MD5: da3e845568369b615316ba3116e54ea4
SHA256: 3cfd1d0b508aa817c40e58269ba24e5423e6316527d949066fb86f689c6bd5ca
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998544.spanish
binary
MD5: 992d57a6809027e9a011d840ebc3a1e1
SHA256: 4333c19de5de0faf5dfb86d7c31387da2b8896adfd43466fd7fb9f76d811b0ad
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998543.slovenian
binary
MD5: 90b6920de23fdab7c733f444952249d1
SHA256: cff3c9540375ff2523583ea3c6a223b4c660fc68ce2ffd95d945916b6478c8a1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998546.uzbek
binary
MD5: 945c2c65977b79ffff6ad256f00f7b48
SHA256: 5d90f3da88f66833b820718449f2425b0324953fca54816e7604aee5272c85ff
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998542.russian
binary
MD5: 0d00c4f829b96865adb4504c55d82e4a
SHA256: 0b2eb4549557805349cfed2a6805f5c9721543b0e98b1847dd4c0634bb95164e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998546.thai
binary
MD5: 4679c98326fa2a23329ec3755dd13573
SHA256: 95abdefc54c1aedd56568b935c818d2d536d6134275a015c0c939cf0ffd1bd53
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998540.russian
binary
MD5: 4bbb79cca74a0a3fd7686002ab891489
SHA256: d388ab9b830dad5c92f1fa0350b2c401f4a110eced74fdfb7fdc7de96fb536b3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998539.malay
binary
MD5: cd3f67142fa9f964e3b11a1d168f3928
SHA256: cb6ed08aa92b39c199ec3a9c9e7d4580f6680ac53e884ab8c884838394210299
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998541.portuguese
binary
MD5: 20387cbf4eebd413afb3657322acf2ec
SHA256: fdd1f49c2bd5f46b931975ab5baabf21b929f196ea1dbe7daeacf27ceace5800
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998537.italian
binary
MD5: bb8d8df50be29a1de25abed6d4b85dc3
SHA256: e1cccdc1620a87ca2e4b61565b15506b228ab12ad6deeb4a91a89eee31f9fc85
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998537.malay
binary
MD5: 685909cfc42fda4266f008d35840fe6a
SHA256: 6731d45b947238e89d54bb1a963b2c566f059cab66094d398ec2fb9d4959cc4c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998538.polish
binary
MD5: 70bcfd32243614ff7bca396e3500251f
SHA256: 6782afb9907f9f01bdf30e428b15cd73554f6b2b9314ee9a5c82aa6ad9bd5c0c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998539.portuguese
binary
MD5: bb3a404af6b228c9c6596e36b465042e
SHA256: e2785e969d15c989d5d4d3970f5d1b21acfc7c6a5f8c1214ed589e79d1eec3ce
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998538.japanese
binary
MD5: 662b5dbb6f8a0b2362c3f40bedc76c2e
SHA256: b819529298c04327d7a2846c083d61ece987a5412f151a71573976a859da8232
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998536.japanese
binary
MD5: 15de05a64455f48c4ff02b9813316ff2
SHA256: 0c723fae56f3b3784ff51fbe4ae098cc8f58306f80e7018c4da756dc41a71cc0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998540.polish
binary
MD5: d4f2ade2b6cb8156f21bb13d7ffbe3a6
SHA256: 8c8174fbdba4a59b7d7aef74c62666cc18e362fa6d95aa83a3e7a8d839282e9e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998534.hungarian
binary
MD5: e1bf81904aa7a79264d8a2049fc8192a
SHA256: b456138ea71299de3509d670c42129a1978ac36194cfa05bccb6a2c5d9bf31b0
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998535.hungarian
binary
MD5: 19fb3012d4b8bce26dcfbff0e1c6bc87
SHA256: 08fb26701dc3388b1ddee8bb990520f1f176f1f7c994c696c9675d481eb1361d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998536.indonesian
binary
MD5: e14b38e90baa07d9aa05e9e2e3e40a98
SHA256: de13e1229483371b5a1aa3d69ede6a7812f2c03379778f7e22345985b883faf1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998535.italian
binary
MD5: e3a5dcad902efaf0a7728b44d85b48d9
SHA256: cc90de30e2d20b6e97b919b9e0b32f515f68de6240cb46793f844d6f4aff9676
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998524.vietnamese
binary
MD5: 4a7657694e8212bebc80d6b2fc993ff5
SHA256: a129eab448f80c779834e69b0c90f8dd457bf38a21382906065e8d6a21d3da4c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998530.english
binary
MD5: 524c78f479ef20def002e73d5b9011b9
SHA256: 08fb7ac219ec6f21c39e6c7b3f38f61b0d8a3f2929a78354bc014944400e0d03
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998533.greek
binary
MD5: 51694dc48797d468ab5e5a117a824aad
SHA256: 2d64411b1f1d856eb7e41ff9b3b8d4c643aa8f0a6580f73561dc900d9e91345e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998529.czech
binary
MD5: 12ea6c1c10430db3f6ad6b30eef2f0ea
SHA256: dcf458c298d84b698525e90400f9fa7a0e86e9f6bc2c3da6d1e71dbae68ff752
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998528.chinese (traditional)
binary
MD5: 0fc3bec4b170e9058b217a660a9fdb43
SHA256: aacf761ab07517b8308a90d50a506799a2e8d91b9001307f1ed48d3ee5fd92c7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998526.bulgarian
binary
MD5: 181948d3d5d2ac343aa42cef2de85f1a
SHA256: 51ed1f6b5b9aaf2a867df2fa8fcc7e7d2e7f64d609cf09786cde71fecc6a68ba
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998522.turkish
binary
MD5: d29ec787382c445d3d394a6536786f03
SHA256: b9ec23a4f139286f963d1691417ee6b9632d1d94db4e4286f45041872da1837e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998534.hebrew
binary
MD5: 9bc3ca53efc0f7d2dff95a0ee6c05922
SHA256: 97d426b23ee7e2cbd399f0fd19bd782aef143b8b21b5a6d45c695bf2ad1f0481
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998523.uzbek
binary
MD5: 74bea72b940e59a01a06d96013610c7d
SHA256: 6e9a062e9b9edcec71e3236858500229d2446a93479e68b485760fe1da16ee04
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998531.french
binary
MD5: c0d2f95aa593d502db3f4d648a132797
SHA256: f12697b3a734bdbc780dfe1ef70275c9a6c9d8cafedcf71669b13e6e2001409a
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998532.german
binary
MD5: 807d063a0d328ad4874d7a4023b649c4
SHA256: 170418282f44b045fb7e5592ce71e5ba001838f2d2079a503b91988822fa53b7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998527.chinese (simplified)
binary
MD5: 073c01002d2f786cb61e7a3abb60e29f
SHA256: 48e78b4dcac754fa90bb6f1220724adb3cf1b65811d5b9ee8764d1bcec6629b9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998525.arabic
binary
MD5: 65ad6b93c3fceaca39c4036e978c9a8c
SHA256: 2823f69549c985cebbd652b28ec387bab2f13250a06cfad46d37f8f5f0f7e0b5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998520.tajik
binary
MD5: 321d760202f36d8d85bbe48c537307c4
SHA256: 26107e11343bb43cc931ef4f00c15f806fe5377b999502c53dc67119696f2974
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998514.malay
binary
MD5: c033dc470d1fb64443398f69f1000ff3
SHA256: 0edc4129cb2739f8934f86046a3e7595b36660be3f6a6054aaac25e46a596d70
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998521.thai
binary
MD5: 7c6b80b1c7b91213ee79cf158c7e6c18
SHA256: 4d5eb3d1c42ff0dc6c0a523cb5ff44a95934d89ec6b252df589575b97516ca1a
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998519.spanish
binary
MD5: d3f684851648d9846f64dad71a8b60f1
SHA256: 4bc032a8a5deee51935a2c309d417b60ceb029f40335e9ac7074c75ac04f5099
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998516.portuguese
binary
MD5: 4d7c74cc2fc9083de842b57337947a57
SHA256: 6e41dd72fb822cb1daddfaad3d583ca8cd67f6796b304a6c4e248d5615e62d6f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998513.japanese
binary
MD5: 4c767a502ec4c24094552ebc855f34e6
SHA256: 5fdb1b3152025a3f608580666c8b79d871a8e87ef706e8dc519d80b92ca0482f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998518.slovenian
binary
MD5: d47b36a6971e222d1de1ec96a4662b51
SHA256: 5246364335d3a64dbd3b9b438145e8ba98589a3fe02933ec5dcb3c98cab8a22f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998517.russian
binary
MD5: 57dc121fba7311c6aacc189f609c03bf
SHA256: b7c027c88144fc3a996f8c3f6c0d3d2ea163ed331ac821d9e4fe777834d4fdaf
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998515.polish
binary
MD5: f520e894a235cc409b1645e8f02417dc
SHA256: 9482c866a5931ca8b02b86c317bd66b3fd2107579e744c7f726b13fbe462499c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998512.italian
binary
MD5: ec4aca9059fb987b176535d8a3531954
SHA256: 7b0923eee7abdde6aba4ce924e54721addb2f6de80e4af6de6b7b17a155180e9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998510.hungarian
binary
MD5: 830b9ea4666045338bb1e5a11b906b03
SHA256: 028edc7d34e063a6cb670a7954aac5f35d37a2725a8493a0191cd41adbf74799
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998511.indonesian
binary
MD5: a86f2422fdfcf246a27161dea1836975
SHA256: c2264c449b82cfd923cd842f55491c6c4a7a331dc76a2e96b7d58f2e1c21d809
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998507.german
binary
MD5: f4cc6248af51308fbfdd2ea82ca0820f
SHA256: b6133c51b992e09449956d3d30b558affa125e95b89e843aa57d6f14995f8fbd
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998508.greek
binary
MD5: 374ee17a1e37102e8216f139d68c2b60
SHA256: e81263f5b00917dfef04941a2c55efd8edcb6df8f0b545ec4de980207157afa2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998504.czech
binary
MD5: 66c8d97752ed739d9ca778c24cae6639
SHA256: ed140f38ce2cf558da8cf997cb9dbc3f08ab3948ee963ba6ab47b2244b2e2920
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998509.hebrew
binary
MD5: b07eb8024575e79d462ac76332ee4154
SHA256: 15ce8089845d3cb3d6ca6eea237986af34f96e1beb0c9c30908211e8ea87ff3c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998506.french
binary
MD5: 0933f64914d5f6c063416d15b575a760
SHA256: 28ba9d3e1007b721fd6bcace906a01a7d341499e8f95479d636812bc89f67db2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998505.english
binary
MD5: f043ad43d927596b14595c13925a43d1
SHA256: a919d2de88ac09b5d173a3a5ad2624b4a829bee5ee4839d3e8f6db95911ba479
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998503.chinese (traditional)
binary
MD5: 26f442bb2256241ed0da5e9e7f4ad3e8
SHA256: a7f3e23023838f7adb948dee3cff1c0347a1f3f2ff7a24305eca5d50b22c892e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998498.uzbek
binary
MD5: 14a6c59c638a4eae3968a8009679c43b
SHA256: b3718e52049fd62d851eaf0216d503d427c12694135f7aad95b459d9f02e4f56
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998492.russian
binary
MD5: 3f9fa19c238141c66b978f3191db591c
SHA256: cc3c41e828f0e09ab0efc24b8811f439706e2094d76c70a47c672d981b124bdc
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998502.chinese (simplified)
binary
MD5: 6896873991fa79f52db0d249dc23016b
SHA256: d4af277062bd1e12589ce46eed6bcdfb0c058e33f49646e32131dd104b3ea8e9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998494.spanish
binary
MD5: 82647d78d037af28259a34f35b0e3d76
SHA256: b154f5a9553a2a020c5c381367642534bf12dd8e2923ff4a141f49951bde64cb
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998496.thai
binary
MD5: 11e68ea172e5ef574e2dc250759d3a58
SHA256: 9cb36fd8b3f675eebaf32c261d54b35a98db96645bded6ca17f0359a7171f559
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998495.tajik
binary
MD5: e538e0dfc7abc22bdad0297af7b05dde
SHA256: 4fc680cc2c7c0180b76265817feffb150026218346856311c33a1c21e28440b6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998501.bulgarian
binary
MD5: a75567124b33adf47d55bafade32f538
SHA256: c50396675d9155d26dde9b12862ae122ebc11d943231895435cdc694a698f66a
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998499.vietnamese
binary
MD5: d15ad4bd602da8178c7e817221cf0d51
SHA256: b400758cf861120ccf6dab9871a93f69d32d955f14e2a7f4b0b58353cd55d4d4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998500.arabic
binary
MD5: d497d887c4b2283b7269f0ee6730144c
SHA256: c0fefe50c2253ab50129b137e842ad10e7ec9d9dac33c4f1a92a8887c55f4667
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998493.slovenian
binary
MD5: bbbda8152a51badd0803b1b38c971d17
SHA256: df8cccffd34adce80800e22a91a0e70aceaa4c3bc00a963bfaba1ef28b117c1b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998491.portuguese
ini
MD5: b2900ea74767b8b3d5aaf26fea7cafa9
SHA256: 8fe79a3a6cf179ff7815ba29693e80ed0942453d8855d353639428fd90cfcae5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998497.turkish
binary
MD5: 4afb2e77c581b6180aca614645541779
SHA256: 2fb63cae131eee6565d977bdbe027d903709491c3f20b0767d210042188b1554
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998490.polish
binary
MD5: 9ddbfa21962a3a56bcc9e063505ab890
SHA256: d306b69eef0d2fa48743c12e4f20d25b1e90ba88472e3d8b9d6a1762cb50a186
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998484.hebrew
binary
MD5: a61bbb4ba96eb975aeb4a1c535008bff
SHA256: 5d89ec2125605dadb627245a21939e06cc5cd3d0b74795cd10546ee4c3f767a4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998489.malay
binary
MD5: 6a0e926f2ff1eb9738b5c66520a1d9e4
SHA256: 03a427e04c3285ac305f4b2aa75a363eeeb5c45186424236de907a437093ea7e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998488.japanese
binary
MD5: 6f8f3296d43fd229a527281f9b4e7962
SHA256: 79db35e0d534d9dc21558c901a54298783057888439748e41166b737cfc792fe
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998480.english
binary
MD5: d32ff72f9a6ab20bebbba20662d2745c
SHA256: 5bfb02a4fe0f88c69e2235bdd8a1faaa8a0449ecca6831e5c28a9c66deddbdaf
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998485.hungarian
binary
MD5: 02ade2daeecaa508a33fb10f22cfdc9b
SHA256: 43dfd561ac9c25c8fc3520495bb2e9c54695b5aa8db07e550e5e622cf4324605
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998482.german
binary
MD5: 2877b731771343923b13c651b1449340
SHA256: 1e8e38b8d0c2544c247d0433250337802ac6b1bfaf0f1c4e68894eb6ff022f7b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998481.french
binary
MD5: b8c8e62daad0e3a5cd68d9f7eda2b5d7
SHA256: ddf8f8f49dfeac41da3b1c2baeafefd86801dd94d79cdbf29bd365e8879f9bc9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998486.indonesian
binary
MD5: d7a7a9381a21340ad6b74b73af07275a
SHA256: 37ab8a44e07329ecba38855d31d4d9875882da3c4ef0ef93077f323a829bd758
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998483.greek
binary
MD5: ce05b1fc790f6dae8778822bfdd8e5d5
SHA256: b0e99660540fbe6cf6cceaacb0d22d34ed6766380271a7848f7784b4ddee9e19
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998487.italian
binary
MD5: 4aa55e01f430a13ac1ab8d5b34ba21f1
SHA256: 11cf2f7e8eb03ad00ed337a937289e7ce2dfdc9456b2f28ae4853d6ef3d4c8a1
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998479.czech
binary
MD5: 685504196a8943d1223bb1b13127ee7a
SHA256: b25c6216ac379d4a279ae049379298208df1004296452708964771ca2c606a5d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998470.tajik
binary
MD5: 0aebe91d1e053be64eb206eee72b741c
SHA256: a09be482e367dbf2ffc2872b989812fc144595561bf60664d4cad53139933bc4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998475.arabic
binary
MD5: 796b354f554b1d634dabcc33f7126003
SHA256: 0022a1414e3ac22ecf34f51d2e7df0d19c44e2c2ad6c912ea622c5317495d65d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998478.chinese (traditional)
binary
MD5: c8ad5474a5c41884a809dea6996338d4
SHA256: e933d9316d65f1c2301d30b59c65c5505bc19d3d05c7d97ebd569113aef7956c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998477.chinese (simplified)
binary
MD5: 2d9bc421d28ab8e23d22ac725af95063
SHA256: c9a03b070708a71ff5b62e39fb32682c5a0110dcb7e226f4a083c3a73e064f83
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998471.thai
bs
MD5: 5cc6c69ac646acfc1b3c21b17c633561
SHA256: 1c57e660456b7a3d9a0b3ac601b1416bbb92a53bc961ac9713b0027695a02e02
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998472.turkish
binary
MD5: ec93800c759366080b0e2ff3dc9b0f70
SHA256: 9bcf5f6bf58b9e7e5e1ea35c29d4d12a0354f5632e1ac7b72c7413252a6b0825
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998473.uzbek
binary
MD5: 0c426d1a37aa3ab6717da805f90cc4c9
SHA256: f906bdfaedee01026b436f9a459671e3e5966c09ac45a0009dd287bd6782ea07
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998469.spanish
binary
MD5: d8cbb6fefe127bb411683e9360e44a0e
SHA256: beba8bc4d16c4bc9c4e576301f86d4d93b98fbfc351b83315b12c09b943ebcda
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998474.vietnamese
binary
MD5: d8f3239f6c71a532ec6e324d99e436e7
SHA256: d4696101938c0d36e53af173c9054b999a70bc3a75493cbd11630995a78ab883
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998467.russian
binary
MD5: 0954f371ae72fe6771cac4c1028d89e6
SHA256: 08fab349dacf27ba40251d7ffb708f075f0f763f2b8cae81be3fb0d84642e37b
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998468.slovenian
binary
MD5: 3e0fb74b95d646d5fd073bb83b9e62e1
SHA256: f6a4b20328de8c5178d5c06f14dbb9b55b44527f88bf4546824f593e160e7e40
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998476.bulgarian
binary
MD5: 0bd9dc5bd3f3059b3e73fa9e7f7fec06
SHA256: 45e3dbeb5febc304affbe6fbc3275969a555b07aad48e6cc4ffdb125443a17a2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998455.english
binary
MD5: 15b6b32ad24f97e673672bf13aa537f2
SHA256: e49ca07e23751177b8d67374b3d1739eec94d8f49164eb85524f042b498230cf
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998466.portuguese
binary
MD5: d490b3f026c8c51a863ba74330c112b2
SHA256: 091935568e5e6dc7f854a9177af10879396c84c83e68f4ea50ee0eccbc47d3d2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998462.italian
vc
MD5: a82e3a13b482c5283ac4d3f4fd235ba2
SHA256: 294ecddd083134308dc9d657a6ebeec5c3443e41e606a3222033ea1a3179514e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998458.greek
binary
MD5: fa75cfb37608f4dcf16a9d5785a526a5
SHA256: 39c4a6fb0679176a628d4390b9831aff861672593c2b3f567500300c9a62e106
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998459.hebrew
binary
MD5: ab08d299f74cdf6c6b4a5376d9b2f960
SHA256: 1b7171693a0200e778ce5e8004aec6fb5053a97b130ed8bdaf321cec277afa96
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998460.hungarian
html
MD5: 17f072c1b0dc7211fb478b9c3e2a9177
SHA256: 735c1b8051f8b7b00459f7b27b9d186abfaa1ab6d47ab230e2f8f6ececd9a023
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998463.japanese
binary
MD5: b59147ad58c17221b19a37000d0695db
SHA256: 83e6281f98feb994e4116a32ed5107ac5fa5c5b71fa03e7788d4d90d2323e63f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998457.german
binary
MD5: 1ec3ab2ced6d5649cce37cdc3c164bac
SHA256: 5ffce936e0e2f95e58468196f309fd6af6da7983a3bae8a70bdf49c619fea251
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998456.french
binary
MD5: 2ba594a12b613664642e36274b08228e
SHA256: e7b2f0ea463b7e4882535fe46f781a5f015401ff5c3d09b95e79fd383f86a72c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998465.polish
binary
MD5: 755fb481796a6f84e1cf7780da8fb352
SHA256: 1958aa085eea7f587a8110908120941a29d0c2ebed4604fa910a80cb57e9d5f8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998461.indonesian
binary
MD5: de3e36c07c5220a2b77f8b4bf407bdd6
SHA256: 927bf724a8ca04ad6ef280dc5c7c121717eba1d14f788c704a82654e048d1f6c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998464.malay
binary
MD5: 7a27bceefe1272dfafa676d9acac0824
SHA256: e84761f44e6b60b9e497ffc10965732d5bfdb9b4fa8de5f49a81206b2a29ef05
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998443.slovenian
binary
MD5: dce60fcd77555dd1256c28cbcfb955ce
SHA256: adf912bbe0eb4dcf1337b7c839640022da62d079a3540f051e3c629e5330072d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998445.tajik
binary
MD5: 1e2c3a427c8c18fc240600969fea8b0d
SHA256: 141f2ec2a8455daff6928950ed63338723d6d0354ac9cbf705636f514e3d7484
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998451.bulgarian
binary
MD5: b073c7aa15e3220384d9db634d6e675b
SHA256: 47e2b0793d6a5780fd0b8d1f51fa20a2f3f171c8e5b22f7e2cc18c70138acda6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998447.turkish
binary
MD5: 918bab3059b943e4394bb301f794c117
SHA256: 0a6a49647ea9f4e5499ff6925a7a002d085b51aefece8ed91907490fe18a7f78
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998449.vietnamese
binary
MD5: e08d5380854f04138d0eaa45bf77f62a
SHA256: 6dd2d70c1b0e23e36b1336d8265f1480bca257ee6c14567db744d99fb5ebb1b4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998448.uzbek
binary
MD5: 4db4c9267f2610f964c00594b8786afd
SHA256: 0ad0cc862071622d5242f24fb68d1a2c3092c55f32d03c261821387297a0fb4f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998444.spanish
binary
MD5: 2f5f527df3211acb32f992eb1907cf1b
SHA256: df95ed7b731ba0257a8b9b70498ea6c30ebd45e76ff645095461e83803485a4f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998450.arabic
binary
MD5: 1dfd055c1f2ac9d21e0c64c971a4b452
SHA256: 40863ae5d4b55f9332e281098d9754c4818713d04b9c1c5ae37ec49ea40d7dab
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998446.thai
binary
MD5: 7c49b093e559262ea16593377ad0c9e2
SHA256: 425d7998d21391f552bc1a192c2c7a38e37a597e6907263a5c5824ff94c57a00
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998454.czech
binary
MD5: b3d26b2c3fd159df014bb695c47c05c8
SHA256: 60550f465473c61d9901647a9aff7e1d5d6942d5d0269960c6bf00fd1d212824
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998453.chinese (traditional)
binary
MD5: 0a6f0f02e1757b1574bd14da1e9b73bd
SHA256: 2361ed08f3de05e85f5f31febcdf1356bd6352e5a5b7a7649461b1e547dfdcf9
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998452.chinese (simplified)
binary
MD5: 70a7a197aa361bcf388fdda772b467b7
SHA256: 1ab437cd2a984f32f503577100f2d458339e7b1949e3f3e858a73f68e4e18547
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998435.hungarian
binary
MD5: 9776f5c7b1c4bc758879b0fc72d7713e
SHA256: 91b30fb13e2257bff1161599be2bacbf8ff1a85dd1fc5b49526d66feea7e45cd
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998438.japanese
binary
MD5: 008aa08466cfc6f2e2e0e628d149c1a8
SHA256: 4b0bcb22f7466cc029cb9bd07e5c482c77a407cfa8d36b12d789b5cfa1570cf2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998437.italian
binary
MD5: 91d39d738ec0f5395d4f2d86a13ff19c
SHA256: 643f8394eaa33cc1997263c5ee418eba8552e65e5bb094de0a8ace3a9b564cca
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998432.german
binary
MD5: 2f617e6beb5b53282f72c68415cfcb69
SHA256: 9304e0e8775a10a00a88055d72e07a43bfe13c165c379c3b9d76f1e4d9a45219
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998433.greek
binary
MD5: 1c375156c2d44a89529f18568a9aa33a
SHA256: 4dc1dd439ad59ce18f2c8aaa7d5f42cbed7d3c2aea57553b3b224f1eea46ef29
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998441.portuguese
binary
MD5: fc04bb96377bdceb0356e6c39c34818a
SHA256: 85f028c981923035e77e9a5b8f6fcaa8c076ed5288a832b9828a9c863aa1838e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998439.malay
binary
MD5: de8b3f41889692c4bd6f3c9d1cdeb6a8
SHA256: 0c9c033a2e90e9157684cf8f0ae9f73bab6fd414f8330704fd1390971cba79d2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998430.english
binary
MD5: 1cad9159202ed3c8da6e10fb4f84c16f
SHA256: 65d8541cf73d57c029d3e4036b8c09145d3cbadf5b0bed6253510a9244e1da71
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998431.french
binary
MD5: b7df50d5998f88a33c95f4f6203da215
SHA256: e8586ab3c64dc17198a135c033924d1b8022cd9d2545db42953dc5aa6c042f6c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998436.indonesian
binary
MD5: 2984a875e0dcc7e095a8bfbaa75ba9fa
SHA256: 9edab05c61d7bc345c32b5c489d9bb0e9e8847e48d240e8ed65d99c6bf4ad7ad
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998440.polish
binary
MD5: f9a4700acf3f1199c2f495e08d16da80
SHA256: 993858c8f05710302a0872af56d9731b059d6731c8acccbf1e68003270691a46
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998442.russian
binary
MD5: 2812ce832c8ff83ef96cfe7a41007053
SHA256: 7cbf60db52780628ab698a78085da15d72ae60b794b24829230a410ed5edcd92
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998429.czech
binary
MD5: 33a8e8fa96ff8974765a5b33584e7d9a
SHA256: 2a7f4d48737e0854822876ba74e7180f86dff1fd855eb38209c56fe8914297e7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998434.hebrew
binary
MD5: 441f55ac05b7c47cd7c1d076b48fd5c8
SHA256: 4ba1c3811f2864fdcb8bf241d01fde792fcd57e1d8688250e4ad50e5ff1583a8
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998425.arabic
binary
MD5: 61643ddae28cd1267fa364d0616170c3
SHA256: 5f07571f925d8d4e146bc7dcaafd675c8cb6aa6daa3e9cfe628d984fb81f3200
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998427.chinese (simplified)
binary
MD5: 42c66c25f334a098c7b79b4e11f2d5d3
SHA256: 8b19cd72367e31c4ef6aa1dc3ebe5896caf6b3e04465b6ae6410a3521bb1c733
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998416.portuguese
binary
MD5: 82c41eee332eafb83e6fb0c2c8f674a4
SHA256: e1d403becf4e6f9921a103d72685eec10bca2b9b9186ff6421756f04fb1a15d5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998426.bulgarian
binary
MD5: f3b3b39d31605892b52d1cc654d59985
SHA256: 7cdeb1cc2941cdca00a6e42b76499dce42f6df72e80bf75551a1c5c4881330e2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998423.uzbek
binary
MD5: b59fc776200856b3f5a925296ac04d5b
SHA256: 16435483789984085b7e2a768407e7f9144146343f36f30307c4e5f982a82275
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998420.tajik
binary
MD5: 62e06e4c23985f562ed112c6d129cdb4
SHA256: e6a8ece38be6471053432ae9379432dbe4894158c5f0bfa0db491aa20cb6aac7
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998424.vietnamese
binary
MD5: 2faa74558431091ec0f3163a10bef074
SHA256: f7e606f18f8d0befafc821caa83374f2e3fc95ead33c03bc1e411301443c9281
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998418.slovenian
binary
MD5: 6b4febc6877cef5526a374780a607b13
SHA256: 5412aa69b1ee7b6012984de83737c68e03562054c2646c15d961d2d90daeb24c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998428.chinese (traditional)
binary
MD5: c77eafc99c885a322c482971352ca9ed
SHA256: 5652eb2eb035cd03654a1b7bb6ea4f6d2073f6920e26123d17fe7c4fb6393766
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998419.spanish
binary
MD5: db4a58133fe2a47af3ede31225a2f732
SHA256: 809c0252b376ef7aad6bc3a90fbe141cc6a7c81c4143cdd7e2150fb6c22fa818
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9A90.tmp
––
MD5:  ––
SHA256:  ––
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998422.turkish
binary
MD5: 668534ebbcd4005c9862cb82ea84c168
SHA256: 69762b22ccdbb21d757b8e217e4491eb54b5f9280132cc3cb28b07bdda950c93
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998421.thai
binary
MD5: 547c427764f36ace4e5d15d2e2eaed9d
SHA256: 859b2a4eb2af7052f01cda5f817064d4e14036484eaaa326a34d10f627387530
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998405.english
pgc
MD5: 4c69e7c1cd1fc20dd5f68b01e887aefb
SHA256: ea2c2cca809955e97799105d98fcde5656a26ea47f83bedbf9fcb726c4365746
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998408.greek
binary
MD5: 7fd658751eee738b8ff3a1a2038f44f4
SHA256: 7c7e8d8300334459ddcc4eb85b4e365f37ac789dee93823b2db498a6f246bb53
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998414.malay
binary
MD5: 5f6811812587fab3996e487ed7aaabb9
SHA256: 26e1d6749e777b30dddc9f0d612ab245b6afd660d11c184b443e3789bd15446f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998410.hungarian
pcx
MD5: 5cd315427035674098464128ae5b7b33
SHA256: 5887c32fc8eef1bd2b8cb0601144ddcaa33d10b1135c5578ee398f0149b7e690
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998415.polish
binary
MD5: ae8de958b9417c1799519318f1ddd485
SHA256: 499fb3f8ef7c2761ce2c1ac5e87c9b06252058c25897b5ae97814d43c3bf616e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998411.indonesian
binary
MD5: 9d92b80a7eddb57c875314de903cea90
SHA256: 69ae363cbf8e2c63613622dca3802bc0b45715327c53738acf06b3e165c0a55f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998407.german
binary
MD5: c8d389b12545ed7cb181bfe601b2c117
SHA256: 4355a5978d2e64b992e1740b11c43ed2c4dd308bbc88db6a461e805f4630c3dd
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998409.hebrew
binary
MD5: 216b044501f170e58ec5cb6b30cd938e
SHA256: d5de051cd44903b1bc85cbc8440f3e16994f577a3b2457fe31d1f34b9de5ef27
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998412.italian
binary
MD5: d00b7073a2084c6c3433115d292bb85a
SHA256: 14cf9b6a4891defa6f4110c44838e8cb1cc82b84789d3b33a5c94fdff78a1d6c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998406.french
binary
MD5: 963b85929973aecb4e96700363e54014
SHA256: c3092ec57d51f8485de10ead7f72800fb9afa712d6a180fd4e313a8de72f3dc5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998413.japanese
binary
MD5: c53035942e66cc96c524da8ac9679678
SHA256: 8c2ff9b72e09519a7c734b7fba03a44adb2bf5ebe7b4ac343cb7b7ce9cf79297
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998404.czech
binary
MD5: 2a4a15f387dd31f20019540f2523b082
SHA256: f0c4b73596f2f0882da6c8978e925b3707e83fe80c23abfd809723160969e2b2
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\symbolsets\forex.set
text
MD5: 624342a0882c87fadd1447519017c519
SHA256: 8128778587634b4d8fd45b17029a8b600de6f9b1cf0fba9d03d8f69e0c337806
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998401.bulgarian
binary
MD5: 71ef4e8b97e6b7924e7d79bbdf85c375
SHA256: b9ad7b79371fc7b2521315910fe7222c5149264e0226be6526d24244f964138d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\USDCHF240.hst
binary
MD5: 9dfc8aa8992c0cfb3c0814d0ab6aef2b
SHA256: b4f3a09bc1e4246c87dd3bb53a942d7ba87e60955562872191b135eea4f52c27
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\symbols.sel
binary
MD5: 8818fb2ad0e9c5ddb4ab74dfc5039ba3
SHA256: 1ca4f03ad4615fb17f90550f2f949fcca999aea6764e69c132efb905da712873
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998400.arabic
binary
MD5: 3cdccad7dae6ba83604c2c1b9de68fca
SHA256: 848cd1e91fb14a990695e3fd8a9873b1c33666f55c32aa907b26908e71143f9f
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\USDJPY240.hst
binary
MD5: 636aaea02f7c0dc5f118006b513b8eb2
SHA256: f8cc9dc0ab2f8b54a0f95ada3f0bacda522522c8ee8288abb8dd64c9a7c5990e
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\symbols.raw
binary
MD5: 8b2de85da02b0ee60d205e83d851c12f
SHA256: 4920f40d8dd8b70e99559505807ba50073cf6d5fe36e402bae527d20695c0537
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\GBPUSD240.hst
binary
MD5: 1883c6a300205c1bf53035f7bf419bc0
SHA256: b293a98e2bbf3746e87870c57f0f5bfea2aba52bcc70270ed6ddb22a448f618a
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\symgroups.raw
bs
MD5: a5990e6ade142fb9bba63fc88f79691d
SHA256: 2d361c5d684109e2afc128317ac1a80d769e8bcb0c5d15d98c5ad572427ae1ec
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998402.chinese (simplified)
binary
MD5: 942079e1ce0afe08ae49d33fe746ff7e
SHA256: 1a14b08ec232e11ad3aa0a45ad9fa34543a52bb96ebeaf57494877e7d9dccbe4
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\mailbox\1356998403.chinese (traditional)
dbf
MD5: 57bbad93e51893016c3a904eb443c219
SHA256: 32c231d7d83e113650b8b202be8ccb8c6bc4288b559a9e3055f9e15f66bc8cc3
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\symbolsets\forexall.set
text
MD5: ac067b7421b35e9844e0136e872fd201
SHA256: be33e4f4450d384c2378a36b86d38a8189c44b4ce55f3bf518fecbd19e8863a5
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\history\default\EURUSD240.hst
binary
MD5: 0e99c7c88062c0c789b32114f53dd8f3
SHA256: 7fa181a16da476de554a4f61a30a3fa8a1128151082cffe958327ca525943fc6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-v20 Practice-2.srv
binary
MD5: 482bb4cebd1ea481d58b33926e7e7131
SHA256: e47a3ab2f8b0c8eb06deeacc36bf088e9313feee1f307938625c303bbbcdf67c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-Japan FX Live.srv
binary
MD5: 6e9ae940368bb09490d16fcac8dc328d
SHA256: cb74f5e9ad2664ef98d8e6dde277d361d1a9a96d96beed111c1ae2a7e09f106d
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-Japan Live.srv
binary
MD5: 39f07f202db15f64f4c5c238fe8d5638
SHA256: f8036d066cf82bce968b562009070ff1d4e284ea652561a11c195a7b794e8baf
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-Japan Practice.srv
binary
MD5: 1fb8ea263631cf776056de681fcb281b
SHA256: 9183bd956f5fb8401fcc95b8f70ee2d28a9d613225d0e64b380a3ccdf4336717
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-v20 Practice-1.srv
binary
MD5: 7ade6f7048961b8c02d80456bc0f62ad
SHA256: a216794f8dd35b2cd2e92bdde21e61f10a252884afc70470c0d56af846681363
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-v20 Live-3.srv
binary
MD5: ac8cbb5ecfdbadd7272e43f36b36a2e4
SHA256: 6ac070d749bb5576001c089b923eedb7154dd74b72f607e0203f7fbc5d6f2081
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-v20 Live-1.srv
binary
MD5: e886d3c63ac11afcc2eb0b5ebf5a33bc
SHA256: 92079c55b5288ca741dfa1209237ef3ab01a9b0dfa40da10abd540ec6a73a4fa
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-v20 Live-2.srv
binary
MD5: 938f750b802fffbe3785ca18e45a5846
SHA256: 37f20d29618e939c0631aa75f633f1c3dafd2e7826c2056635a712b35f4a119c
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-v20 Practice-3.srv
binary
MD5: 3d4fe06b006e1ef9fde8f2d33e57048f
SHA256: c2a2a625d7e5012be711b066ba1f329c56778836cec18f54316ec5879b241f78
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\OANDA-GMT+2 Live.srv
binary
MD5: 1c374d6363d6b98d010a3fbdef740e90
SHA256: c672583fea34d8b16e3c80e43462f261a2dcf714d77104ae363f9601151b8fb6
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\config\terminal.ini
text
MD5: da3fdc4ac3a86b9e2b577d20b4671da1
SHA256: 1416cd862425a3d11eed28bae3950b3cdca9983511a85b2b2a588dc8ff82afa0
3816
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7BC2F077-2DB2-11E9-BAD8-5254004A04AF}.dat
––
MD5:  ––
SHA256:  ––
3816
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF247CA9FB68F773B9.TMP
––
MD5:  ––
SHA256:  ––
684
iexplore.exe
C:\Users\admin\AppData\Local\Temp\JavaDeployReg.log
text
MD5: dce7b02a519ae5f05dafdc0029deb6e5
SHA256: 7b33db78fa82b8bf26eead845b87ef11d85c600af4e8a81bbf77798bb1a67494
3816
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7BC2F078-2DB2-11E9-BAD8-5254004A04AF}.dat
––
MD5:  ––
SHA256:  ––
3816
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DFF12A010FEB6A5D3F.TMP
––
MD5:  ––
SHA256:  ––
3816
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{7AF383DE-2DB2-11E9-BAD8-5254004A04AF}.dat
binary
MD5: df3ce64535b5b2c29d0dd98cbbdc3b14
SHA256: 70f320a474e15275d820756eba5b319f58134f09fd8b9905f8067efcec1a2d45
3816
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\{7BC2F079-2DB2-11E9-BAD8-5254004A04AF}.dat
binary
MD5: 185d866cd4e44d1d0319a1c00eaac3f6
SHA256: 9e41e367319a60d1727e31d26355acd11baf49308c8c7e1c11b8ad4b16315c80
3816
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF91EB63C4BF6CA1A4.TMP
––
MD5:  ––
SHA256:  ––
3816
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF6057D17D18E9E67D.TMP
––
MD5:  ––
SHA256:  ––
3816
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\favicon[2].png
image
MD5: 9fb559a691078558e77d6848202f6541
SHA256: 6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914
3816
iexplore.exe
C:\Users\admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
––
MD5:  ––
SHA256:  ––
3816
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\favicon[1].ico
––
MD5:  ––
SHA256:  ––
3108
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{73CC75E1-2DB2-11E9-BAD8-5254004A04AF}.dat
––
MD5:  ––
SHA256:  ––
3108
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF07D62C76855ED756.TMP
––
MD5:  ––
SHA256:  ––
3800
iexplore.exe
C:\Users\admin\AppData\Local\Temp\JavaDeployReg.log
text
MD5: 61b84b6b5238a1a6e313d65759bba8c1
SHA256: e7902cd68d1a9fb32ffe26a39813f7ae7d1737ceac03d1ab4874e7e6af7cd41b
3108
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DFB22B0463E3ED6994.TMP
––
MD5:  ––
SHA256:  ––
3108
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{73CC75E2-2DB2-11E9-BAD8-5254004A04AF}.dat
––
MD5:  ––
SHA256:  ––
3108
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{7AF383DE-2DB2-11E9-BAD8-5254004A04AF}.dat
binary
MD5: f7ae773a4ba9335d89b868f2533c3d30
SHA256: 59313ac121a8a151a0f07c15e8cc2d6b36b2c202334b5e043d72a7c5565bffbc
3108
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\{7AF383DF-2DB2-11E9-BAD8-5254004A04AF}.dat
binary
MD5: 198f6bb441738b69559b34f83cddcad0
SHA256: 14fb5c5b3c6b2b6a6abd16bc0f861171f27d63cb2df4c243e5090328d4fb03fc
3108
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF481D5ACA25FCC4B5.TMP
––
MD5:  ––
SHA256:  ––
3108
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF638471C5D28B5B6C.TMP
––
MD5:  ––
SHA256:  ––
3800
iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt
text
MD5: 8096f8a2e150da4995093b665e44db5d
SHA256: 767900b358c133c56f9048d2bcba04f2efd55e7b86bc63fdc3ff4d1a1c47c49c
3108
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\favicon[3].png
image
MD5: 9fb559a691078558e77d6848202f6541
SHA256: 6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914
3108
iexplore.exe
C:\Users\admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
––
MD5:  ––
SHA256:  ––
3108
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\favicon[1].ico
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OANDA - MetaTrader\Uninstall.lnk
lnk
MD5: f42dc864ba0b8f2898e4253048b0e41a
SHA256: eda10c989c997f2bb68c99862b7b88c3804b9bacc2539a03fea4315b51ad9071
2316
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\logs\metaeditor.log
text
MD5: f3b25701fe362ec84616a93a45ce9998
SHA256: b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
3628
oanda4setup.exe
C:\Users\Public\Desktop\MetaEditor 4.lnk
lnk
MD5: d66a40c4e635506ab83384716e235260
SHA256: 4ec4f2526494efd1b618eb5dd8b8a39f340e39d307bb49503e85883e6f04fbb5
3628
oanda4setup.exe
C:\Users\Public\Desktop\OANDA - MetaTrader.lnk
lnk
MD5: 2d84074f03af81bd2c2d78aac5b5d76c
SHA256: 5a6644f0eb6680d10f10c4d33260da7fe81ee596fad583b5d833fb1921ce1478
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\symgroups.raw
bs
MD5: a5990e6ade142fb9bba63fc88f79691d
SHA256: 2d361c5d684109e2afc128317ac1a80d769e8bcb0c5d15d98c5ad572427ae1ec
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\symbols.sel
binary
MD5: 8818fb2ad0e9c5ddb4ab74dfc5039ba3
SHA256: 1ca4f03ad4615fb17f90550f2f949fcca999aea6764e69c132efb905da712873
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-v20 Live-3.srv
binary
MD5: ac8cbb5ecfdbadd7272e43f36b36a2e4
SHA256: 6ac070d749bb5576001c089b923eedb7154dd74b72f607e0203f7fbc5d6f2081
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-v20 Practice-2.srv
binary
MD5: 482bb4cebd1ea481d58b33926e7e7131
SHA256: e47a3ab2f8b0c8eb06deeacc36bf088e9313feee1f307938625c303bbbcdf67c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\terminal.lic
binary
MD5: 3a530f5ceb4c986bbe739c9ee10db92c
SHA256: d2648428f7b259e8b1dd6fa16e39ea5d58873ec1e57ec9806cebf5e8b24e6b54
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\symbols.raw
binary
MD5: 8b2de85da02b0ee60d205e83d851c12f
SHA256: 4920f40d8dd8b70e99559505807ba50073cf6d5fe36e402bae527d20695c0537
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-v20 Practice-3.srv
binary
MD5: 3d4fe06b006e1ef9fde8f2d33e57048f
SHA256: c2a2a625d7e5012be711b066ba1f329c56778836cec18f54316ec5879b241f78
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-v20 Practice-1.srv
binary
MD5: 7ade6f7048961b8c02d80456bc0f62ad
SHA256: a216794f8dd35b2cd2e92bdde21e61f10a252884afc70470c0d56af846681363
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-Japan Live.srv
binary
MD5: 39f07f202db15f64f4c5c238fe8d5638
SHA256: f8036d066cf82bce968b562009070ff1d4e284ea652561a11c195a7b794e8baf
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-v20 Live-1.srv
binary
MD5: e886d3c63ac11afcc2eb0b5ebf5a33bc
SHA256: 92079c55b5288ca741dfa1209237ef3ab01a9b0dfa40da10abd540ec6a73a4fa
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\terminal.ico
image
MD5: db81fb26473e724028aee1c61fe8c15f
SHA256: 408bbe6516822c234e73ab2e75b4769555788557b4445d409e1fe14a45560d2c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-GMT+2 Live.srv
binary
MD5: 1c374d6363d6b98d010a3fbdef740e90
SHA256: c672583fea34d8b16e3c80e43462f261a2dcf714d77104ae363f9601151b8fb6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-v20 Live-2.srv
binary
MD5: 938f750b802fffbe3785ca18e45a5846
SHA256: 37f20d29618e939c0631aa75f633f1c3dafd2e7826c2056635a712b35f4a119c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-Japan Practice.srv
binary
MD5: 1fb8ea263631cf776056de681fcb281b
SHA256: 9183bd956f5fb8401fcc95b8f70ee2d28a9d613225d0e64b380a3ccdf4336717
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\OANDA-Japan FX Live.srv
binary
MD5: 6e9ae940368bb09490d16fcac8dc328d
SHA256: cb74f5e9ad2664ef98d8e6dde277d361d1a9a96d96beed111c1ae2a7e09f106d
3628
oanda4setup.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OANDA - MetaTrader\MetaEditor.lnk
lnk
MD5: 5595c3111ef7b55832f9139b857b8511
SHA256: fe4c688797c2aac8775be93da22e400de5f047f36f54ee4cebf6362d6d86115f
3628
oanda4setup.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OANDA - MetaTrader\OANDA - MT4.lnk
lnk
MD5: 9a5b227650d9fd39d3f1bdc201fefa73
SHA256: 1ceaebcf8c28c836a23e935a142b0b679adedca95e877c09779e94194e58fa09
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Config\terminal.lic
binary
MD5: 3a530f5ceb4c986bbe739c9ee10db92c
SHA256: d2648428f7b259e8b1dd6fa16e39ea5d58873ec1e57ec9806cebf5e8b24e6b54
2316
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Experts\Moving Average.ex4
binary
MD5: 9d2c4fa3e61cabdc66a538b22a45b094
SHA256: 61ab9e13d524233b052e2ec308d5dbf942d177ba0d299a903d6b3d7aa0a598ff
2316
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Experts\MACD Sample.ex4
binary
MD5: 25cc000dc3f1b4b8f8e447ce23839bf6
SHA256: 01889e522fbbd62fa95a884b7d045083c517b9eab3c94960db3f55782478743b
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\Williams.tpl
text
MD5: 4d1db2b7c191d170c7d606d7653a8514
SHA256: da71cd87ffbd0a92179b23fa28c7adbbe9f7f79960d4e41affeeaa8c0ed99293
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\tick.wav
wav
MD5: 3f9fec91309b1d419ebe018e1d9f2c48
SHA256: 0e2c13671a29f810b09e38f607d2f2d05f2c51b953bd71c8cc70bbe3919a734a
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\wait.wav
wav
MD5: dd1a8be4ddf91f51bb49d7360eef532d
SHA256: f8c318c38cf2ffcbdbd632da0db3abc88a52a70efdde38b8255d28f4c2f0f8bc
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\Volume.tpl
text
MD5: 71e7d43363787423f997d2911f841733
SHA256: 1e1cb0866dbc2091a39a98219395f6bf50e19633050ad63e40bf538def9e3ee8
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\BollingerBands.tpl
text
MD5: ffb7ac27b5b6271afb5dfb3435a05a4c
SHA256: 3cc9e457716dc3116e0c5e94b0a08d52bc04781936ee6b42085325e157c812bc
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\Layers.tpl
text
MD5: ab09fe90952e30f625cea1a8ee37c03d
SHA256: bcd45609070340aeb991e2e144eb8f223b9f552cfbff510400a9e194fd2e4827
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\StatementDetailed.htm
html
MD5: 0bac3dcd86d44db76d11a19b2fc5e841
SHA256: 4627125607c896c951cbf80189a22a3ff497f752f0f76972b00ffe62c5159be6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\Popular.tpl
text
MD5: 8c2fb164cfe9ea09bd4657f05c9a9777
SHA256: ef2b0177a970b6d6df52a9d03a004eca68b6f410f91047050023024d6cb4f8bb
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\strategytester.htm
html
MD5: 26b2d851bc754ce6f01893df04c64090
SHA256: e68af34ba74f7aefd077fe6147c6e2f40f91b90188e000656cab533ffb419a04
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\stops.wav
wav
MD5: dd1a8be4ddf91f51bb49d7360eef532d
SHA256: f8c318c38cf2ffcbdbd632da0db3abc88a52a70efdde38b8255d28f4c2f0f8bc
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\OptimizationReport.htm
html
MD5: 784ea6b9ba9353a9edca33a7ff879593
SHA256: dc1d98f43c06e1a1fb7a6be186503a6eab61e59a83390fbaf217a13a99038c53
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\timeout.wav
wav
MD5: 7e57ab05d47a75785832defccb24b4c6
SHA256: 49998ec981bb7c20d2b299cfc99af3f43113d3464d6b9245091bee3b69528d4e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\Momentum.tpl
text
MD5: 255b513a661f9808a09ebc1b03660653
SHA256: c7f8dacc1aefba1c965b6fea94a029d80a5161a011f81edbd5e4f5d15e554b28
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\ADX.tpl
text
MD5: 05ca4c0a3568e2f0352f5c28e33f54f7
SHA256: f57b9c2a2b58469fb54c27af8a934e5c45e6245f71f495f6e7a8998be85ea7f1
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\templates\statement.htm
html
MD5: 2d2466b92a18e19823b379db53d4e114
SHA256: 8d1078534622984d2773fcd2584d41e2faa76d453ae4868c594490b7501069cb
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\ok.wav
wav
MD5: e3ac97becd57de4ed4681aaab9b08878
SHA256: 2a8d3c5d29d6fb002bf3cd0496fa03317c5250c1484d8dd9d9c78ff1cf194d63
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\disconnect.wav
wav
MD5: a9aaefa64aeed2be1742e5b1c4c4b4bc
SHA256: fc0ca6bee9e0c10432cefd87c673cc8dc1cf9ef520a275ce7c7b11fee45cb0e6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\email.wav
wav
MD5: 1728ba34dad2d8df5b47970d59333aaf
SHA256: ee23c6900afd5b36c9dea79cc3f1e085350dcce5c60b04f6d5213a5bdf9cc27d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\expert.wav
wav
MD5: 7c21a62cdb76c242afa2baa82af776ae
SHA256: eb079562389036cf5c21773ed4bf17e6cef3320ee2080615fb8173c639ed90aa
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\news.wav
wav
MD5: f0cb7bd16723b149ffeb72e2f28f9ff3
SHA256: a9de4dbd509cad6adcf6f2d7ce6d6f03b6423cef58c67d1ad9addb2f41f96bcf
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\connect.wav
wav
MD5: 4684880c4469518420c40e06a62c5b85
SHA256: bab56092b2e2931f6cf440ca5aedcacc86c86e33abca100e5bb4361d33939624
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Swiss Franc\chart03.CHR
text
MD5: 34b5854ae81208a46b56978b83ce2b0a
SHA256: e133902f73140796efad41aca3da903d1e158dc41cd546363a66e1ae3294ba6f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Swiss Franc\order.wnd
text
MD5: 160ce6235904b9dd0c0bc5debd46c2a9
SHA256: 8716dae9d97cde6377e17ba9355fc88fb7c730863182186154803f71ab9bf04d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\alert.wav
wav
MD5: 31dc3771e6b630121086d050ba0ee48e
SHA256: 0bc8316444298a865c06bd54881d25ba2ee54930f0a15b92a38fc6bfe206ecdf
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Swiss Franc\chart02.CHR
text
MD5: 2842e45a276daeb26f153de925222959
SHA256: 4a54928032f2efa381da20f147e9bc80e8644d0d01d0a48b2b4c103af026541d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Swiss Franc\chart01.CHR
text
MD5: a1dcfe0165a0ec56c2a7add71cf64720
SHA256: acb49e3a852696d9c00b8a18d4200664098b5eb824b2018b9f502caccc643e87
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\Sounds\alert2.wav
wav
MD5: 5c1c648fed57ce120bdea574200e5ada
SHA256: 6e4691136095119b52a9b5d821e4306a6ab333acdc38a9d26bbd2de40699fecb
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\default\chart04.CHR
text
MD5: 36e98c7362a0d27d2a596d939a144743
SHA256: d288cd11900a881ecaf7a48bf58b0b701fdd59865f771eb7743d1591387da3f4
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Euro\chart01.CHR
text
MD5: b2f9a27089ca86ff32d61c553c0c5399
SHA256: 774aa085a942d24153c25dd06ddb802c4b5e68d12110c3c4a8e43a76ca504411
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\lastprofile.ini
text
MD5: 6ed31c5fd5171d4861e07e797fe42375
SHA256: e97e0f176d36639fd89a6f64264f0ba4cbaa9a49bb968d5d75b914e94402f3c7
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Market Overview\chart03.CHR
text
MD5: a4d44a4fabceba241a0781d6ef9bcd92
SHA256: ffd5afc9eabcd6280d6c71d3e4e8e432efac3a2a82de3fc628adb16c55269419
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Euro\order.wnd
text
MD5: dd404d8b3aa934cb8476cfa1c5762c0c
SHA256: 39c8278327a573c90bd58827a65a942775641f4d4cfd4646a4405bc5b0789be3
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Market Overview\chart04.CHR
text
MD5: 629309fa1359f8b047914e827f91a485
SHA256: 57739a03ec7fb3b1737c48a9677ca3fa657054acdc43bd160c1e23e4e448f00e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Market Overview\order.wnd
text
MD5: 374d1a4c11ef82ab86cc86bc9fc3234b
SHA256: 5edd2401e423bf7f340357e99bfdb9e6737469085410aec2414bdfb16910e6ec
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\default\order.wnd
text
MD5: bec51eabd4a915e9bf5c33d98e202f1b
SHA256: c5467fd664935820918fbde7bdd79fbaf423ee043c38fbfa83788ef1ec1f75ee
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Euro\chart02.CHR
text
MD5: 7f285bb4ce156040e3b537516047cc8e
SHA256: 3c5824b89b60e6157e5332de0ffec20682ce4ebc57f2d8d976edc3f2e051cbd8
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Euro\chart03.CHR
text
MD5: 536bbeade46922fd39946ba84832fd91
SHA256: b8d172cbab65f0cd16b68b1a233734b4c71715bd0386676787640be38ab9b6fc
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Market Overview\chart02.CHR
text
MD5: 3acd68a93129afd81d39c16fc8b66a43
SHA256: ec73fee2e63cce7054201f90058d54930ef9bcc0bc740a702b090168536944c5
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\Market Overview\chart01.CHR
text
MD5: 5aa16c6a9edd5076de7583ffb0939bf4
SHA256: a0f1b43b9da086973b29fe73f61ebc2cdc70aaf23ba39667c8478599d18cbdd0
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\default\chart03.CHR
text
MD5: 3b738b2f0543172a85239248938c81e1
SHA256: 2417e8b00b4479870a57df6f1ff082d33f2cbb6f879611e263064b480b8470a1
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\British Pound\chart03.CHR
text
MD5: e70e75a48fcde1bdccbf60eefdf7e1de
SHA256: ce6f24a8b1ba06f703aff1ee5e7be53b36d9a5b2fdafd6c595f014e8321f4936
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\default\chart02.CHR
text
MD5: a8413bde8cf6c9b8a815bd38981b5c4e
SHA256: d6a0fb8366a2724a0edf9d99b10451e06d7a7832594d78620cf3aefe11c88b5e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\British Pound\chart01.CHR
text
MD5: fb039b7b6818aa0b1b93dad2edffe9bb
SHA256: 67daa9da824098d6215fdc5dc9ca9d09ad94651ae604eacba5bd61269af15bbd
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\British Pound\chart02.CHR
text
MD5: 91ca3cb8e3fff0e65c6a344cbbd7dec3
SHA256: 78bfdc6664f61f77c139a27fc47f0bc1fb2bb3a5d62085f6a319a4c22ca77b38
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\British Pound\order.wnd
text
MD5: 2547e671f549e0c3b143ee8032fde665
SHA256: a0a2d5f1521ecc527f378a2d5201d85f4213c05dadc5f06fe3b53cceb19df2a6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\profiles\default\chart01.CHR
text
MD5: e40994752a145890e922b500b9efcef7
SHA256: ec5ae1a4126438fd3595953ca9407aa3140e8ea1dbb8041a3e8a8ab474bf3cc0
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\symbolsets\forexall.set
text
MD5: ac067b7421b35e9844e0136e872fd201
SHA256: be33e4f4450d384c2378a36b86d38a8189c44b4ce55f3bf518fecbd19e8863a5
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\symbolsets\forex.set
text
MD5: 624342a0882c87fadd1447519017c519
SHA256: 8128778587634b4d8fd45b17029a8b600de6f9b1cf0fba9d03d8f69e0c337806
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998549.vietnamese
binary
MD5: 24e74959c0d0b7d5755bd49c149dcd2f
SHA256: 0d6b0412021f06dd12e33b6335d8e806c20cbda66ea14c297ff0a840a10c4903
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998542.spanish
binary
MD5: 7faf7a3bc132d7c6dd9d58664a63ac1e
SHA256: 7ab916f195ecce5e961ed5c31e6c651eb4c1aca39a21b6f827bfcc6381cab10b
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998544.thai
binary
MD5: 74372627410408d7deeec1519bebe1d7
SHA256: 7070ab672dfbfeca7c6a26d625aee68400235dfead39910886874b248fe43f35
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998546.uzbek
binary
MD5: 945c2c65977b79ffff6ad256f00f7b48
SHA256: 5d90f3da88f66833b820718449f2425b0324953fca54816e7604aee5272c85ff
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998545.turkish
binary
MD5: 881a8d2f6a4bff354286982dff436201
SHA256: fbcc6e557dd3059851fd5ed3f72515f39b9028395c445b1f4eea7822de006ef9
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998542.russian
binary
MD5: 0d00c4f829b96865adb4504c55d82e4a
SHA256: 0b2eb4549557805349cfed2a6805f5c9721543b0e98b1847dd4c0634bb95164e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998546.thai
binary
MD5: 4679c98326fa2a23329ec3755dd13573
SHA256: 95abdefc54c1aedd56568b935c818d2d536d6134275a015c0c939cf0ffd1bd53
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998547.turkish
binary
MD5: 893e1a24ed3f216bc17631f9f43e2916
SHA256: 5fec49bf99f0af929c3623dbac719103c85179d7fdb08ef2cbb43e6ab4ebddda
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998547.vietnamese
binary
MD5: cd1300217d354736631fcd05cd49bc7b
SHA256: 417803400aea067224549318ac1f0611206656e94f95ff4cf7611b52664eb79e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998548.uzbek
binary
MD5: 079e173ba22372f4fe60d390cdfd4347
SHA256: 9ff016e6a7e0e3b10023e07f885612d340dcce8f771cee0ecaf7d4fcd71464af
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998543.slovenian
binary
MD5: 90b6920de23fdab7c733f444952249d1
SHA256: cff3c9540375ff2523583ea3c6a223b4c660fc68ce2ffd95d945916b6478c8a1
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998541.slovenian
binary
MD5: 11c39adfcac3fb27ff2efb8e42b0715c
SHA256: 11989a7e424b4b6a90657ca413dcd289ed69bc8ecafa8080858c0c31836e9f52
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998545.tajik
binary
MD5: da3e845568369b615316ba3116e54ea4
SHA256: 3cfd1d0b508aa817c40e58269ba24e5423e6316527d949066fb86f689c6bd5ca
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998541.portuguese
binary
MD5: 20387cbf4eebd413afb3657322acf2ec
SHA256: fdd1f49c2bd5f46b931975ab5baabf21b929f196ea1dbe7daeacf27ceace5800
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998543.tajik
binary
MD5: c164a13c6c9d21208b6096ef06b9984a
SHA256: 7bcb1fa210d9572dd384b764cfb61a8184da94bd521112891b960000bec6f5d6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998544.spanish
binary
MD5: 992d57a6809027e9a011d840ebc3a1e1
SHA256: 4333c19de5de0faf5dfb86d7c31387da2b8896adfd43466fd7fb9f76d811b0ad
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998537.italian
binary
MD5: bb8d8df50be29a1de25abed6d4b85dc3
SHA256: e1cccdc1620a87ca2e4b61565b15506b228ab12ad6deeb4a91a89eee31f9fc85
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998531.french
binary
MD5: c0d2f95aa593d502db3f4d648a132797
SHA256: f12697b3a734bdbc780dfe1ef70275c9a6c9d8cafedcf71669b13e6e2001409a
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998537.malay
binary
MD5: 685909cfc42fda4266f008d35840fe6a
SHA256: 6731d45b947238e89d54bb1a963b2c566f059cab66094d398ec2fb9d4959cc4c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998538.japanese
binary
MD5: 662b5dbb6f8a0b2362c3f40bedc76c2e
SHA256: b819529298c04327d7a2846c083d61ece987a5412f151a71573976a859da8232
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998538.polish
binary
MD5: 70bcfd32243614ff7bca396e3500251f
SHA256: 6782afb9907f9f01bdf30e428b15cd73554f6b2b9314ee9a5c82aa6ad9bd5c0c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998533.greek
binary
MD5: 51694dc48797d468ab5e5a117a824aad
SHA256: 2d64411b1f1d856eb7e41ff9b3b8d4c643aa8f0a6580f73561dc900d9e91345e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998534.hungarian
binary
MD5: e1bf81904aa7a79264d8a2049fc8192a
SHA256: b456138ea71299de3509d670c42129a1978ac36194cfa05bccb6a2c5d9bf31b0
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998534.hebrew
binary
MD5: 9bc3ca53efc0f7d2dff95a0ee6c05922
SHA256: 97d426b23ee7e2cbd399f0fd19bd782aef143b8b21b5a6d45c695bf2ad1f0481
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998532.german
binary
MD5: 807d063a0d328ad4874d7a4023b649c4
SHA256: 170418282f44b045fb7e5592ce71e5ba001838f2d2079a503b91988822fa53b7
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998536.japanese
binary
MD5: 15de05a64455f48c4ff02b9813316ff2
SHA256: 0c723fae56f3b3784ff51fbe4ae098cc8f58306f80e7018c4da756dc41a71cc0
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998536.indonesian
binary
MD5: e14b38e90baa07d9aa05e9e2e3e40a98
SHA256: de13e1229483371b5a1aa3d69ede6a7812f2c03379778f7e22345985b883faf1
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998539.portuguese
binary
MD5: bb3a404af6b228c9c6596e36b465042e
SHA256: e2785e969d15c989d5d4d3970f5d1b21acfc7c6a5f8c1214ed589e79d1eec3ce
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998535.hungarian
binary
MD5: 19fb3012d4b8bce26dcfbff0e1c6bc87
SHA256: 08fb26701dc3388b1ddee8bb990520f1f176f1f7c994c696c9675d481eb1361d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998540.polish
binary
MD5: d4f2ade2b6cb8156f21bb13d7ffbe3a6
SHA256: 8c8174fbdba4a59b7d7aef74c62666cc18e362fa6d95aa83a3e7a8d839282e9e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998540.russian
binary
MD5: 4bbb79cca74a0a3fd7686002ab891489
SHA256: d388ab9b830dad5c92f1fa0350b2c401f4a110eced74fdfb7fdc7de96fb536b3
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998535.italian
binary
MD5: e3a5dcad902efaf0a7728b44d85b48d9
SHA256: cc90de30e2d20b6e97b919b9e0b32f515f68de6240cb46793f844d6f4aff9676
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998539.malay
binary
MD5: cd3f67142fa9f964e3b11a1d168f3928
SHA256: cb6ed08aa92b39c199ec3a9c9e7d4580f6680ac53e884ab8c884838394210299
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998529.czech
binary
MD5: 12ea6c1c10430db3f6ad6b30eef2f0ea
SHA256: dcf458c298d84b698525e90400f9fa7a0e86e9f6bc2c3da6d1e71dbae68ff752
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998519.spanish
binary
MD5: d3f684851648d9846f64dad71a8b60f1
SHA256: 4bc032a8a5deee51935a2c309d417b60ceb029f40335e9ac7074c75ac04f5099
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998528.chinese (traditional)
binary
MD5: 0fc3bec4b170e9058b217a660a9fdb43
SHA256: aacf761ab07517b8308a90d50a506799a2e8d91b9001307f1ed48d3ee5fd92c7
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998522.turkish
binary
MD5: d29ec787382c445d3d394a6536786f03
SHA256: b9ec23a4f139286f963d1691417ee6b9632d1d94db4e4286f45041872da1837e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998521.thai
binary
MD5: 7c6b80b1c7b91213ee79cf158c7e6c18
SHA256: 4d5eb3d1c42ff0dc6c0a523cb5ff44a95934d89ec6b252df589575b97516ca1a
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998524.vietnamese
binary
MD5: 4a7657694e8212bebc80d6b2fc993ff5
SHA256: a129eab448f80c779834e69b0c90f8dd457bf38a21382906065e8d6a21d3da4c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998525.arabic
binary
MD5: 65ad6b93c3fceaca39c4036e978c9a8c
SHA256: 2823f69549c985cebbd652b28ec387bab2f13250a06cfad46d37f8f5f0f7e0b5
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998527.chinese (simplified)
binary
MD5: 073c01002d2f786cb61e7a3abb60e29f
SHA256: 48e78b4dcac754fa90bb6f1220724adb3cf1b65811d5b9ee8764d1bcec6629b9
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998523.uzbek
binary
MD5: 74bea72b940e59a01a06d96013610c7d
SHA256: 6e9a062e9b9edcec71e3236858500229d2446a93479e68b485760fe1da16ee04
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998526.bulgarian
binary
MD5: 181948d3d5d2ac343aa42cef2de85f1a
SHA256: 51ed1f6b5b9aaf2a867df2fa8fcc7e7d2e7f64d609cf09786cde71fecc6a68ba
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998530.english
binary
MD5: 524c78f479ef20def002e73d5b9011b9
SHA256: 08fb7ac219ec6f21c39e6c7b3f38f61b0d8a3f2929a78354bc014944400e0d03
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998520.tajik
binary
MD5: 321d760202f36d8d85bbe48c537307c4
SHA256: 26107e11343bb43cc931ef4f00c15f806fe5377b999502c53dc67119696f2974
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998510.hungarian
binary
MD5: 830b9ea4666045338bb1e5a11b906b03
SHA256: 028edc7d34e063a6cb670a7954aac5f35d37a2725a8493a0191cd41adbf74799
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998507.german
binary
MD5: f4cc6248af51308fbfdd2ea82ca0820f
SHA256: b6133c51b992e09449956d3d30b558affa125e95b89e843aa57d6f14995f8fbd
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998508.greek
binary
MD5: 374ee17a1e37102e8216f139d68c2b60
SHA256: e81263f5b00917dfef04941a2c55efd8edcb6df8f0b545ec4de980207157afa2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998514.malay
binary
MD5: c033dc470d1fb64443398f69f1000ff3
SHA256: 0edc4129cb2739f8934f86046a3e7595b36660be3f6a6054aaac25e46a596d70
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998512.italian
binary
MD5: ec4aca9059fb987b176535d8a3531954
SHA256: 7b0923eee7abdde6aba4ce924e54721addb2f6de80e4af6de6b7b17a155180e9
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998518.slovenian
binary
MD5: d47b36a6971e222d1de1ec96a4662b51
SHA256: 5246364335d3a64dbd3b9b438145e8ba98589a3fe02933ec5dcb3c98cab8a22f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998511.indonesian
binary
MD5: a86f2422fdfcf246a27161dea1836975
SHA256: c2264c449b82cfd923cd842f55491c6c4a7a331dc76a2e96b7d58f2e1c21d809
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998509.hebrew
binary
MD5: b07eb8024575e79d462ac76332ee4154
SHA256: 15ce8089845d3cb3d6ca6eea237986af34f96e1beb0c9c30908211e8ea87ff3c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998516.portuguese
binary
MD5: 4d7c74cc2fc9083de842b57337947a57
SHA256: 6e41dd72fb822cb1daddfaad3d583ca8cd67f6796b304a6c4e248d5615e62d6f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998506.french
binary
MD5: 0933f64914d5f6c063416d15b575a760
SHA256: 28ba9d3e1007b721fd6bcace906a01a7d341499e8f95479d636812bc89f67db2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998517.russian
binary
MD5: 57dc121fba7311c6aacc189f609c03bf
SHA256: b7c027c88144fc3a996f8c3f6c0d3d2ea163ed331ac821d9e4fe777834d4fdaf
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998515.polish
binary
MD5: f520e894a235cc409b1645e8f02417dc
SHA256: 9482c866a5931ca8b02b86c317bd66b3fd2107579e744c7f726b13fbe462499c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998513.japanese
binary
MD5: 4c767a502ec4c24094552ebc855f34e6
SHA256: 5fdb1b3152025a3f608580666c8b79d871a8e87ef706e8dc519d80b92ca0482f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998502.chinese (simplified)
binary
MD5: 6896873991fa79f52db0d249dc23016b
SHA256: d4af277062bd1e12589ce46eed6bcdfb0c058e33f49646e32131dd104b3ea8e9
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998503.chinese (traditional)
binary
MD5: 26f442bb2256241ed0da5e9e7f4ad3e8
SHA256: a7f3e23023838f7adb948dee3cff1c0347a1f3f2ff7a24305eca5d50b22c892e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998504.czech
binary
MD5: 66c8d97752ed739d9ca778c24cae6639
SHA256: ed140f38ce2cf558da8cf997cb9dbc3f08ab3948ee963ba6ab47b2244b2e2920
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998497.turkish
binary
MD5: 4afb2e77c581b6180aca614645541779
SHA256: 2fb63cae131eee6565d977bdbe027d903709491c3f20b0767d210042188b1554
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998498.uzbek
binary
MD5: 14a6c59c638a4eae3968a8009679c43b
SHA256: b3718e52049fd62d851eaf0216d503d427c12694135f7aad95b459d9f02e4f56
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998499.vietnamese
binary
MD5: d15ad4bd602da8178c7e817221cf0d51
SHA256: b400758cf861120ccf6dab9871a93f69d32d955f14e2a7f4b0b58353cd55d4d4
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998500.arabic
binary
MD5: d497d887c4b2283b7269f0ee6730144c
SHA256: c0fefe50c2253ab50129b137e842ad10e7ec9d9dac33c4f1a92a8887c55f4667
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998505.english
binary
MD5: f043ad43d927596b14595c13925a43d1
SHA256: a919d2de88ac09b5d173a3a5ad2624b4a829bee5ee4839d3e8f6db95911ba479
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998501.bulgarian
binary
MD5: a75567124b33adf47d55bafade32f538
SHA256: c50396675d9155d26dde9b12862ae122ebc11d943231895435cdc694a698f66a
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998489.malay
binary
MD5: 6a0e926f2ff1eb9738b5c66520a1d9e4
SHA256: 03a427e04c3285ac305f4b2aa75a363eeeb5c45186424236de907a437093ea7e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998491.portuguese
ini
MD5: b2900ea74767b8b3d5aaf26fea7cafa9
SHA256: 8fe79a3a6cf179ff7815ba29693e80ed0942453d8855d353639428fd90cfcae5
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998495.tajik
binary
MD5: e538e0dfc7abc22bdad0297af7b05dde
SHA256: 4fc680cc2c7c0180b76265817feffb150026218346856311c33a1c21e28440b6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998487.italian
binary
MD5: 4aa55e01f430a13ac1ab8d5b34ba21f1
SHA256: 11cf2f7e8eb03ad00ed337a937289e7ce2dfdc9456b2f28ae4853d6ef3d4c8a1
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998482.german
binary
MD5: 2877b731771343923b13c651b1449340
SHA256: 1e8e38b8d0c2544c247d0433250337802ac6b1bfaf0f1c4e68894eb6ff022f7b
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998493.slovenian
binary
MD5: bbbda8152a51badd0803b1b38c971d17
SHA256: df8cccffd34adce80800e22a91a0e70aceaa4c3bc00a963bfaba1ef28b117c1b
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998485.hungarian
binary
MD5: 02ade2daeecaa508a33fb10f22cfdc9b
SHA256: 43dfd561ac9c25c8fc3520495bb2e9c54695b5aa8db07e550e5e622cf4324605
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998490.polish
binary
MD5: 9ddbfa21962a3a56bcc9e063505ab890
SHA256: d306b69eef0d2fa48743c12e4f20d25b1e90ba88472e3d8b9d6a1762cb50a186
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998492.russian
binary
MD5: 3f9fa19c238141c66b978f3191db591c
SHA256: cc3c41e828f0e09ab0efc24b8811f439706e2094d76c70a47c672d981b124bdc
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998496.thai
binary
MD5: 11e68ea172e5ef574e2dc250759d3a58
SHA256: 9cb36fd8b3f675eebaf32c261d54b35a98db96645bded6ca17f0359a7171f559
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998494.spanish
binary
MD5: 82647d78d037af28259a34f35b0e3d76
SHA256: b154f5a9553a2a020c5c381367642534bf12dd8e2923ff4a141f49951bde64cb
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998488.japanese
binary
MD5: 6f8f3296d43fd229a527281f9b4e7962
SHA256: 79db35e0d534d9dc21558c901a54298783057888439748e41166b737cfc792fe
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998483.greek
binary
MD5: ce05b1fc790f6dae8778822bfdd8e5d5
SHA256: b0e99660540fbe6cf6cceaacb0d22d34ed6766380271a7848f7784b4ddee9e19
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998484.hebrew
binary
MD5: a61bbb4ba96eb975aeb4a1c535008bff
SHA256: 5d89ec2125605dadb627245a21939e06cc5cd3d0b74795cd10546ee4c3f767a4
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998486.indonesian
binary
MD5: d7a7a9381a21340ad6b74b73af07275a
SHA256: 37ab8a44e07329ecba38855d31d4d9875882da3c4ef0ef93077f323a829bd758
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998477.chinese (simplified)
binary
MD5: 2d9bc421d28ab8e23d22ac725af95063
SHA256: c9a03b070708a71ff5b62e39fb32682c5a0110dcb7e226f4a083c3a73e064f83
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998470.tajik
binary
MD5: 0aebe91d1e053be64eb206eee72b741c
SHA256: a09be482e367dbf2ffc2872b989812fc144595561bf60664d4cad53139933bc4
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998471.thai
bs
MD5: 5cc6c69ac646acfc1b3c21b17c633561
SHA256: 1c57e660456b7a3d9a0b3ac601b1416bbb92a53bc961ac9713b0027695a02e02
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998473.uzbek
binary
MD5: 0c426d1a37aa3ab6717da805f90cc4c9
SHA256: f906bdfaedee01026b436f9a459671e3e5966c09ac45a0009dd287bd6782ea07
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998479.czech
binary
MD5: 685504196a8943d1223bb1b13127ee7a
SHA256: b25c6216ac379d4a279ae049379298208df1004296452708964771ca2c606a5d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998478.chinese (traditional)
binary
MD5: c8ad5474a5c41884a809dea6996338d4
SHA256: e933d9316d65f1c2301d30b59c65c5505bc19d3d05c7d97ebd569113aef7956c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998480.english
binary
MD5: d32ff72f9a6ab20bebbba20662d2745c
SHA256: 5bfb02a4fe0f88c69e2235bdd8a1faaa8a0449ecca6831e5c28a9c66deddbdaf
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998474.vietnamese
binary
MD5: d8f3239f6c71a532ec6e324d99e436e7
SHA256: d4696101938c0d36e53af173c9054b999a70bc3a75493cbd11630995a78ab883
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998466.portuguese
binary
MD5: d490b3f026c8c51a863ba74330c112b2
SHA256: 091935568e5e6dc7f854a9177af10879396c84c83e68f4ea50ee0eccbc47d3d2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998476.bulgarian
binary
MD5: 0bd9dc5bd3f3059b3e73fa9e7f7fec06
SHA256: 45e3dbeb5febc304affbe6fbc3275969a555b07aad48e6cc4ffdb125443a17a2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998475.arabic
binary
MD5: 796b354f554b1d634dabcc33f7126003
SHA256: 0022a1414e3ac22ecf34f51d2e7df0d19c44e2c2ad6c912ea622c5317495d65d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998481.french
binary
MD5: b8c8e62daad0e3a5cd68d9f7eda2b5d7
SHA256: ddf8f8f49dfeac41da3b1c2baeafefd86801dd94d79cdbf29bd365e8879f9bc9
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998472.turkish
binary
MD5: ec93800c759366080b0e2ff3dc9b0f70
SHA256: 9bcf5f6bf58b9e7e5e1ea35c29d4d12a0354f5632e1ac7b72c7413252a6b0825
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998468.slovenian
binary
MD5: 3e0fb74b95d646d5fd073bb83b9e62e1
SHA256: f6a4b20328de8c5178d5c06f14dbb9b55b44527f88bf4546824f593e160e7e40
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998469.spanish
binary
MD5: d8cbb6fefe127bb411683e9360e44a0e
SHA256: beba8bc4d16c4bc9c4e576301f86d4d93b98fbfc351b83315b12c09b943ebcda
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998467.russian
binary
MD5: 0954f371ae72fe6771cac4c1028d89e6
SHA256: 08fab349dacf27ba40251d7ffb708f075f0f763f2b8cae81be3fb0d84642e37b
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998459.hebrew
binary
MD5: ab08d299f74cdf6c6b4a5376d9b2f960
SHA256: 1b7171693a0200e778ce5e8004aec6fb5053a97b130ed8bdaf321cec277afa96
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998455.english
binary
MD5: 15b6b32ad24f97e673672bf13aa537f2
SHA256: e49ca07e23751177b8d67374b3d1739eec94d8f49164eb85524f042b498230cf
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998465.polish
binary
MD5: 755fb481796a6f84e1cf7780da8fb352
SHA256: 1958aa085eea7f587a8110908120941a29d0c2ebed4604fa910a80cb57e9d5f8
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998458.greek
binary
MD5: fa75cfb37608f4dcf16a9d5785a526a5
SHA256: 39c4a6fb0679176a628d4390b9831aff861672593c2b3f567500300c9a62e106
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998456.french
binary
MD5: 2ba594a12b613664642e36274b08228e
SHA256: e7b2f0ea463b7e4882535fe46f781a5f015401ff5c3d09b95e79fd383f86a72c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998451.bulgarian
binary
MD5: b073c7aa15e3220384d9db634d6e675b
SHA256: 47e2b0793d6a5780fd0b8d1f51fa20a2f3f171c8e5b22f7e2cc18c70138acda6
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998457.german
binary
MD5: 1ec3ab2ced6d5649cce37cdc3c164bac
SHA256: 5ffce936e0e2f95e58468196f309fd6af6da7983a3bae8a70bdf49c619fea251
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998463.japanese
binary
MD5: b59147ad58c17221b19a37000d0695db
SHA256: 83e6281f98feb994e4116a32ed5107ac5fa5c5b71fa03e7788d4d90d2323e63f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998450.arabic
binary
MD5: 1dfd055c1f2ac9d21e0c64c971a4b452
SHA256: 40863ae5d4b55f9332e281098d9754c4818713d04b9c1c5ae37ec49ea40d7dab
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998452.chinese (simplified)
binary
MD5: 70a7a197aa361bcf388fdda772b467b7
SHA256: 1ab437cd2a984f32f503577100f2d458339e7b1949e3f3e858a73f68e4e18547
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998460.hungarian
html
MD5: 17f072c1b0dc7211fb478b9c3e2a9177
SHA256: 735c1b8051f8b7b00459f7b27b9d186abfaa1ab6d47ab230e2f8f6ececd9a023
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998461.indonesian
binary
MD5: de3e36c07c5220a2b77f8b4bf407bdd6
SHA256: 927bf724a8ca04ad6ef280dc5c7c121717eba1d14f788c704a82654e048d1f6c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998453.chinese (traditional)
binary
MD5: 0a6f0f02e1757b1574bd14da1e9b73bd
SHA256: 2361ed08f3de05e85f5f31febcdf1356bd6352e5a5b7a7649461b1e547dfdcf9
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998454.czech
binary
MD5: b3d26b2c3fd159df014bb695c47c05c8
SHA256: 60550f465473c61d9901647a9aff7e1d5d6942d5d0269960c6bf00fd1d212824
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998449.vietnamese
binary
MD5: e08d5380854f04138d0eaa45bf77f62a
SHA256: 6dd2d70c1b0e23e36b1336d8265f1480bca257ee6c14567db744d99fb5ebb1b4
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998462.italian
vc
MD5: a82e3a13b482c5283ac4d3f4fd235ba2
SHA256: 294ecddd083134308dc9d657a6ebeec5c3443e41e606a3222033ea1a3179514e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998464.malay
binary
MD5: 7a27bceefe1272dfafa676d9acac0824
SHA256: e84761f44e6b60b9e497ffc10965732d5bfdb9b4fa8de5f49a81206b2a29ef05
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998441.portuguese
binary
MD5: fc04bb96377bdceb0356e6c39c34818a
SHA256: 85f028c981923035e77e9a5b8f6fcaa8c076ed5288a832b9828a9c863aa1838e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998439.malay
binary
MD5: de8b3f41889692c4bd6f3c9d1cdeb6a8
SHA256: 0c9c033a2e90e9157684cf8f0ae9f73bab6fd414f8330704fd1390971cba79d2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998444.spanish
binary
MD5: 2f5f527df3211acb32f992eb1907cf1b
SHA256: df95ed7b731ba0257a8b9b70498ea6c30ebd45e76ff645095461e83803485a4f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998447.turkish
binary
MD5: 918bab3059b943e4394bb301f794c117
SHA256: 0a6a49647ea9f4e5499ff6925a7a002d085b51aefece8ed91907490fe18a7f78
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998446.thai
binary
MD5: 7c49b093e559262ea16593377ad0c9e2
SHA256: 425d7998d21391f552bc1a192c2c7a38e37a597e6907263a5c5824ff94c57a00
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998435.hungarian
binary
MD5: 9776f5c7b1c4bc758879b0fc72d7713e
SHA256: 91b30fb13e2257bff1161599be2bacbf8ff1a85dd1fc5b49526d66feea7e45cd
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998442.russian
binary
MD5: 2812ce832c8ff83ef96cfe7a41007053
SHA256: 7cbf60db52780628ab698a78085da15d72ae60b794b24829230a410ed5edcd92
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998448.uzbek
binary
MD5: 4db4c9267f2610f964c00594b8786afd
SHA256: 0ad0cc862071622d5242f24fb68d1a2c3092c55f32d03c261821387297a0fb4f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998438.japanese
binary
MD5: 008aa08466cfc6f2e2e0e628d149c1a8
SHA256: 4b0bcb22f7466cc029cb9bd07e5c482c77a407cfa8d36b12d789b5cfa1570cf2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998436.indonesian
binary
MD5: 2984a875e0dcc7e095a8bfbaa75ba9fa
SHA256: 9edab05c61d7bc345c32b5c489d9bb0e9e8847e48d240e8ed65d99c6bf4ad7ad
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998443.slovenian
binary
MD5: dce60fcd77555dd1256c28cbcfb955ce
SHA256: adf912bbe0eb4dcf1337b7c839640022da62d079a3540f051e3c629e5330072d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998437.italian
binary
MD5: 91d39d738ec0f5395d4f2d86a13ff19c
SHA256: 643f8394eaa33cc1997263c5ee418eba8552e65e5bb094de0a8ace3a9b564cca
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998440.polish
binary
MD5: f9a4700acf3f1199c2f495e08d16da80
SHA256: 993858c8f05710302a0872af56d9731b059d6731c8acccbf1e68003270691a46
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998445.tajik
binary
MD5: 1e2c3a427c8c18fc240600969fea8b0d
SHA256: 141f2ec2a8455daff6928950ed63338723d6d0354ac9cbf705636f514e3d7484
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998417.russian
binary
MD5: 704607223d1014305e6c095245ef446f
SHA256: 4b53b57c9fa26574ba30ebe6ffc30b8cb84da3338207a436373590a953cfe323
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998430.english
binary
MD5: 1cad9159202ed3c8da6e10fb4f84c16f
SHA256: 65d8541cf73d57c029d3e4036b8c09145d3cbadf5b0bed6253510a9244e1da71
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998416.portuguese
binary
MD5: 82c41eee332eafb83e6fb0c2c8f674a4
SHA256: e1d403becf4e6f9921a103d72685eec10bca2b9b9186ff6421756f04fb1a15d5
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998422.turkish
binary
MD5: 668534ebbcd4005c9862cb82ea84c168
SHA256: 69762b22ccdbb21d757b8e217e4491eb54b5f9280132cc3cb28b07bdda950c93
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998420.tajik
binary
MD5: 62e06e4c23985f562ed112c6d129cdb4
SHA256: e6a8ece38be6471053432ae9379432dbe4894158c5f0bfa0db491aa20cb6aac7
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998432.german
binary
MD5: 2f617e6beb5b53282f72c68415cfcb69
SHA256: 9304e0e8775a10a00a88055d72e07a43bfe13c165c379c3b9d76f1e4d9a45219
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998421.thai
binary
MD5: 547c427764f36ace4e5d15d2e2eaed9d
SHA256: 859b2a4eb2af7052f01cda5f817064d4e14036484eaaa326a34d10f627387530
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998426.bulgarian
binary
MD5: f3b3b39d31605892b52d1cc654d59985
SHA256: 7cdeb1cc2941cdca00a6e42b76499dce42f6df72e80bf75551a1c5c4881330e2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998427.chinese (simplified)
binary
MD5: 42c66c25f334a098c7b79b4e11f2d5d3
SHA256: 8b19cd72367e31c4ef6aa1dc3ebe5896caf6b3e04465b6ae6410a3521bb1c733
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998423.uzbek
binary
MD5: b59fc776200856b3f5a925296ac04d5b
SHA256: 16435483789984085b7e2a768407e7f9144146343f36f30307c4e5f982a82275
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998418.slovenian
binary
MD5: 6b4febc6877cef5526a374780a607b13
SHA256: 5412aa69b1ee7b6012984de83737c68e03562054c2646c15d961d2d90daeb24c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998424.vietnamese
binary
MD5: 2faa74558431091ec0f3163a10bef074
SHA256: f7e606f18f8d0befafc821caa83374f2e3fc95ead33c03bc1e411301443c9281
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998428.chinese (traditional)
binary
MD5: c77eafc99c885a322c482971352ca9ed
SHA256: 5652eb2eb035cd03654a1b7bb6ea4f6d2073f6920e26123d17fe7c4fb6393766
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998431.french
binary
MD5: b7df50d5998f88a33c95f4f6203da215
SHA256: e8586ab3c64dc17198a135c033924d1b8022cd9d2545db42953dc5aa6c042f6c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998425.arabic
binary
MD5: 61643ddae28cd1267fa364d0616170c3
SHA256: 5f07571f925d8d4e146bc7dcaafd675c8cb6aa6daa3e9cfe628d984fb81f3200
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998419.spanish
binary
MD5: db4a58133fe2a47af3ede31225a2f732
SHA256: 809c0252b376ef7aad6bc3a90fbe141cc6a7c81c4143cdd7e2150fb6c22fa818
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998433.greek
binary
MD5: 1c375156c2d44a89529f18568a9aa33a
SHA256: 4dc1dd439ad59ce18f2c8aaa7d5f42cbed7d3c2aea57553b3b224f1eea46ef29
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998434.hebrew
binary
MD5: 441f55ac05b7c47cd7c1d076b48fd5c8
SHA256: 4ba1c3811f2864fdcb8bf241d01fde792fcd57e1d8688250e4ad50e5ff1583a8
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998429.czech
binary
MD5: 33a8e8fa96ff8974765a5b33584e7d9a
SHA256: 2a7f4d48737e0854822876ba74e7180f86dff1fd855eb38209c56fe8914297e7
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998411.indonesian
binary
MD5: 9d92b80a7eddb57c875314de903cea90
SHA256: 69ae363cbf8e2c63613622dca3802bc0b45715327c53738acf06b3e165c0a55f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998405.english
pgc
MD5: 4c69e7c1cd1fc20dd5f68b01e887aefb
SHA256: ea2c2cca809955e97799105d98fcde5656a26ea47f83bedbf9fcb726c4365746
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998409.hebrew
binary
MD5: 216b044501f170e58ec5cb6b30cd938e
SHA256: d5de051cd44903b1bc85cbc8440f3e16994f577a3b2457fe31d1f34b9de5ef27
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998407.german
binary
MD5: c8d389b12545ed7cb181bfe601b2c117
SHA256: 4355a5978d2e64b992e1740b11c43ed2c4dd308bbc88db6a461e805f4630c3dd
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998414.malay
binary
MD5: 5f6811812587fab3996e487ed7aaabb9
SHA256: 26e1d6749e777b30dddc9f0d612ab245b6afd660d11c184b443e3789bd15446f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998415.polish
binary
MD5: ae8de958b9417c1799519318f1ddd485
SHA256: 499fb3f8ef7c2761ce2c1ac5e87c9b06252058c25897b5ae97814d43c3bf616e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998408.greek
binary
MD5: 7fd658751eee738b8ff3a1a2038f44f4
SHA256: 7c7e8d8300334459ddcc4eb85b4e365f37ac789dee93823b2db498a6f246bb53
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998412.italian
binary
MD5: d00b7073a2084c6c3433115d292bb85a
SHA256: 14cf9b6a4891defa6f4110c44838e8cb1cc82b84789d3b33a5c94fdff78a1d6c
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998413.japanese
binary
MD5: c53035942e66cc96c524da8ac9679678
SHA256: 8c2ff9b72e09519a7c734b7fba03a44adb2bf5ebe7b4ac343cb7b7ce9cf79297
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998406.french
binary
MD5: 963b85929973aecb4e96700363e54014
SHA256: c3092ec57d51f8485de10ead7f72800fb9afa712d6a180fd4e313a8de72f3dc5
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998410.hungarian
pcx
MD5: 5cd315427035674098464128ae5b7b33
SHA256: 5887c32fc8eef1bd2b8cb0601144ddcaa33d10b1135c5578ee398f0149b7e690
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998403.chinese (traditional)
dbf
MD5: 57bbad93e51893016c3a904eb443c219
SHA256: 32c231d7d83e113650b8b202be8ccb8c6bc4288b559a9e3055f9e15f66bc8cc3
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998404.czech
binary
MD5: 2a4a15f387dd31f20019540f2523b082
SHA256: f0c4b73596f2f0882da6c8978e925b3707e83fe80c23abfd809723160969e2b2
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998402.chinese (simplified)
binary
MD5: 942079e1ce0afe08ae49d33fe746ff7e
SHA256: 1a14b08ec232e11ad3aa0a45ad9fa34543a52bb96ebeaf57494877e7d9dccbe4
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998400.arabic
binary
MD5: 3cdccad7dae6ba83604c2c1b9de68fca
SHA256: 848cd1e91fb14a990695e3fd8a9873b1c33666f55c32aa907b26908e71143f9f
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\USDCHF240.hst
binary
MD5: 9dfc8aa8992c0cfb3c0814d0ab6aef2b
SHA256: b4f3a09bc1e4246c87dd3bb53a942d7ba87e60955562872191b135eea4f52c27
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\mailbox\1356998401.bulgarian
binary
MD5: 71ef4e8b97e6b7924e7d79bbdf85c375
SHA256: b9ad7b79371fc7b2521315910fe7222c5149264e0226be6526d24244f964138d
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\USDJPY240.hst
binary
MD5: 636aaea02f7c0dc5f118006b513b8eb2
SHA256: f8cc9dc0ab2f8b54a0f95ada3f0bacda522522c8ee8288abb8dd64c9a7c5990e
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\GBPUSD240.hst
binary
MD5: 1883c6a300205c1bf53035f7bf419bc0
SHA256: b293a98e2bbf3746e87870c57f0f5bfea2aba52bcc70270ed6ddb22a448f618a
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\DDE-Sample.xls
document
MD5: caf7d7f7629cc537efcd83efc78ae898
SHA256: 59ad82f6306d8ca6379d2b5e3087d1b6f20af8b57a4f9e148282e4af927d2490
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\config\terminal.ini
text
MD5: da3fdc4ac3a86b9e2b577d20b4671da1
SHA256: 1416cd862425a3d11eed28bae3950b3cdca9983511a85b2b2a588dc8ff82afa0
3628
oanda4setup.exe
C:\Program Files\OANDA - MetaTrader\history\default\EURUSD240.hst
binary
MD5: 0e99c7c88062c0c789b32114f53dd8f3
SHA256: 7fa181a16da476de554a4f61a30a3fa8a1128151082cffe958327ca525943fc6
3628
oanda4setup.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\WebInstall\mt4clw.png
compressed
MD5: 8d8db85c0f0b7690914a95e958e1bad2
SHA256: 0a81815837f9f0b452257a2e160015a5aec4beb669a0da30395151f7e8e6d68c
3628
oanda4setup.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\WebInstall\mt4clwdata.png
compressed
MD5: 995588c007d1fd358aca9270f6933a01
SHA256: 35c62a5e1d989fe4bee8f6239ebf31fbaf5d0d81dc98c29522d96c8b867b4142
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9ED7.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9ED8.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
binary
MD5: 3d86af4b66cc36ee10b26198d693e53f
SHA256: a190d8c416773e9a516c5d28ca43c886a250cb8c3f2383e7b28fab4815d7c4b7
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9D11.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9D10.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9CE0.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9CCE.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9CDF.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
compressed
MD5: bb377df27a55c05bb3793cd1e125c869
SHA256: 3c4ec495f17d21cc236bc7238bc02728bd945c07157fbf875cac340269afc207
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9CCD.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9C9D.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9C9C.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9C7C.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9C59.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9C7B.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9C6A.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9C69.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9C58.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9C46.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9C57.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9C26.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9C25.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9BF5.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9BF4.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9B86.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9B85.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9B36.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9B35.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9A95.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9A94.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9AA7.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Tar9A96.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9A93.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9A92.tmp
––
MD5:  ––
SHA256:  ––
3628
oanda4setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9A91.tmp
––
MD5:  ––
SHA256:  ––
2896
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\71808ACDDF4589A555C107AF1E5AEBA0\MQL4\Experts\mqlcache.dat
skr
MD5: 7e4724f86d24fe4dfc02db8db5d2d7b0
SHA256: 01e5850f2addbfa0a055f6681578cf39909062cbd1fb8b5eabd7e19da2243ccb

Find more information of the staic content and download it at the full report

Network activity

HTTP(S) requests
19
TCP/UDP connections
42
DNS requests
10
Threats
0

HTTP requests

PID Process Method HTTP Code IP URL CN Type Size Reputation
3628 oanda4setup.exe GET 200 2.16.186.81:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab unknown
compressed
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.81:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab unknown
compressed
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab US
compressed
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab US
compressed
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab US
compressed
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.56:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab unknown
compressed
whitelisted
3628 oanda4setup.exe GET 304 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab US
compressed
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt US
der
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt US
der
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.81:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt unknown
der
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.81:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt unknown
der
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.56:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt unknown
der
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt US
der
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt US
der
whitelisted
3628 oanda4setup.exe GET 200 93.184.221.240:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt US
der
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.81:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt unknown
der
whitelisted
3628 oanda4setup.exe GET 200 2.16.186.81:80 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/47BEABC922EAE80E78783462A79F45C254FDE68B.crt unknown
der
whitelisted
3108 iexplore.exe GET 200 204.79.197.200:80 http://www.bing.com/favicon.ico US
image
whitelisted
3816 iexplore.exe GET 200 204.79.197.200:80 http://www.bing.com/favicon.ico US
image
whitelisted

Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID Process IP ASN CN Reputation
3628 oanda4setup.exe 52.184.28.1:443 Microsoft Corporation HK unknown
3628 oanda4setup.exe 206.221.189.58:443 Choopa, LLC US unknown
3628 oanda4setup.exe 78.140.180.43:443 Webzilla B.V. NL unknown
3628 oanda4setup.exe 88.212.244.84:443 Servers.com, Inc. RU unknown
3628 oanda4setup.exe 47.52.161.165:443 Alibaba (China) Technology Co., Ltd. HK unknown
3628 oanda4setup.exe 47.95.9.170:443 Hangzhou Alibaba Advertising Co.,Ltd. CN unknown
3628 oanda4setup.exe 104.41.54.220:443 Microsoft Corporation BR whitelisted
3628 oanda4setup.exe 47.245.38.25:443 US unknown
3628 oanda4setup.exe 197.189.238.138:443 HETZNER ZA unknown
3628 oanda4setup.exe 142.0.194.252:443 Servers.com, Inc. US unknown
3628 oanda4setup.exe 139.99.68.28:443 OVH SAS SG unknown
3628 oanda4setup.exe 139.99.148.202:443 OVH SAS AU unknown
3628 oanda4setup.exe 138.201.201.91:443 Hetzner Online GmbH DE unknown
3628 oanda4setup.exe 47.100.195.238:443 Hangzhou Alibaba Advertising Co.,Ltd. CN unknown
3628 oanda4setup.exe 78.140.180.86:443 Webzilla B.V. NL unknown
3628 oanda4setup.exe 149.129.135.196:443 SG unknown
3628 oanda4setup.exe 2.16.186.81:80 Akamai International B.V. –– whitelisted
3628 oanda4setup.exe 93.184.221.240:80 MCI Communications Services, Inc. d/b/a Verizon Business US whitelisted
3628 oanda4setup.exe 2.16.186.56:80 Akamai International B.V. –– whitelisted
3800 iexplore.exe 78.140.180.86:443 Webzilla B.V. NL unknown
3108 iexplore.exe 204.79.197.200:80 Microsoft Corporation US whitelisted
3800 iexplore.exe 78.140.180.100:443 Webzilla B.V. NL unknown
684 iexplore.exe 78.140.180.100:443 Webzilla B.V. NL unknown
3816 iexplore.exe 204.79.197.200:80 Microsoft Corporation US whitelisted

DNS requests

Domain IP Reputation
content.mql5.com 78.140.180.86
unknown
api14.mql5.com 149.129.135.196
unknown
www.download.windowsupdate.com 93.184.221.240
whitelisted
api1.mql5.com 78.140.180.43
unknown
www.bing.com 204.79.197.200
13.107.21.200
whitelisted
www.mql5.com 78.140.180.100
unknown

Threats

No threats detected.

Debug output strings

No debug info.