General Info

File name

trade124setup.exe

Full analysis
https://app.any.run/tasks/a99a92da-4719-4034-a0b0-e22c43c8f7f2
Verdict
Malicious activity
Analysis date
3/14/2019, 09:54:17
OS:
Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:

MIME:
application/x-dosexec
File info:
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5

aa7c7b3c580f5d97ff29bff13d87cec5

SHA1

e0b6a73a550adfd8267bae7f85b0efd465fe693b

SHA256

893068f0cc6e2c1b2aa51aeb50d5f3bec80bc9beff1a48d87c75ad1f3f78ad52

SSDEEP

24576:3IdzsDtRe+IjHIjPYOtAuGskOOxhbI9/nQnC+iLIIv7Lgu/g9s8b:32zwtk+gHI8OtPGskOSbI9/QnC+iLZvO

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distored by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Software environment set and analysis options

Launch configuration

Task duration
300 seconds
Additional time used
240 seconds
Fakenet option
off
Heavy Evaision option
on
MITM proxy
off
Route via Tor
off
Network geolocation
off
Privacy
Public submission
Autoconfirmation of UAC
on

Software preset

  • Internet Explorer 8.0.7601.17514
  • Adobe Acrobat Reader DC MUI (15.023.20070)
  • Adobe Flash Player 26 ActiveX (26.0.0.131)
  • Adobe Flash Player 26 NPAPI (26.0.0.131)
  • Adobe Flash Player 26 PPAPI (26.0.0.131)
  • Adobe Refresh Manager (1.8.0)
  • CCleaner (5.35)
  • FileZilla Client 3.36.0 (3.36.0)
  • Google Chrome (68.0.3440.106)
  • Google Update Helper (1.3.33.17)
  • Java 8 Update 92 (8.0.920.14)
  • Java Auto Updater (2.8.92.14)
  • Microsoft .NET Framework 4.6.1 (4.6.01055)
  • Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Professional 2010 (14.0.6029.1000)
  • Microsoft Office Proof (English) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (French) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
  • Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
  • Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Single Image 2010 (14.0.6029.1000)
  • Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
  • Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
  • Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
  • Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (14.15.26706.0)
  • Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 (14.15.26706)
  • Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 (14.15.26706)
  • Mozilla Firefox 61.0.2 (x86 en-US) (61.0.2)
  • Notepad++ (32-bit x86) (7.5.1)
  • Opera 12.15 (12.15.1748)
  • Skype version 8.29 (8.29)
  • VLC media player (2.2.6)
  • WinRAR 5.60 (32-bit) (5.60.0)

Hotfixes

  • Client LanguagePack Package
  • Client Refresh LanguagePack Package
  • CodecPack Basic Package
  • Foundation Package
  • IE Troubleshooters Package
  • InternetExplorer Optional Package
  • KB2534111
  • KB2999226
  • KB976902
  • LocalPack AU Package
  • LocalPack CA Package
  • LocalPack GB Package
  • LocalPack US Package
  • LocalPack ZA Package
  • ProfessionalEdition
  • UltimateEdition

Behavior activities

MALICIOUS SUSPICIOUS INFO
Application was dropped or rewritten from another process
  • metaeditor.exe (PID: 2692)
  • terminal.exe (PID: 1348)
  • terminal.exe (PID: 4044)
  • metaeditor.exe (PID: 2448)
  • metaeditor.exe (PID: 2748)
  • metaeditor.exe (PID: 3148)
  • terminal.exe (PID: 2452)
  • metaeditor.exe (PID: 1620)
  • terminal.exe (PID: 864)
Changes settings of System certificates
  • trade124setup.exe (PID: 2340)
Reads the cookies of Google Chrome
  • terminal.exe (PID: 2452)
Creates files in the user directory
  • metaeditor.exe (PID: 3148)
  • metaeditor.exe (PID: 2748)
  • terminal.exe (PID: 1348)
  • metaeditor.exe (PID: 2692)
  • metaeditor.exe (PID: 1620)
  • metaeditor.exe (PID: 2448)
  • trade124setup.exe (PID: 3152)
  • trade124setup.exe (PID: 2340)
  • terminal.exe (PID: 2452)
Reads internet explorer settings
  • terminal.exe (PID: 2452)
  • terminal.exe (PID: 1348)
  • trade124setup.exe (PID: 2340)
Reads Internet Cache Settings
  • terminal.exe (PID: 1348)
  • terminal.exe (PID: 2452)
Changes IE settings (feature browser emulation)
  • metaeditor.exe (PID: 2692)
  • terminal.exe (PID: 864)
Reads the cookies of Mozilla Firefox
  • terminal.exe (PID: 2452)
Modifies the open verb of a shell class
  • terminal.exe (PID: 864)
Creates a software uninstall entry
  • trade124setup.exe (PID: 2340)
Starts Internet Explorer
  • trade124setup.exe (PID: 2340)
Executable content was dropped or overwritten
  • trade124setup.exe (PID: 2340)
  • terminal.exe (PID: 2452)
Low-level read access rights to disk partition
  • terminal.exe (PID: 864)
  • trade124setup.exe (PID: 2340)
Adds / modifies Windows certificates
  • trade124setup.exe (PID: 2340)
Application launched itself
  • trade124setup.exe (PID: 3152)
Creates files in the program directory
  • trade124setup.exe (PID: 2340)
Reads settings of System Certificates
  • terminal.exe (PID: 1348)
  • terminal.exe (PID: 2452)
  • metaeditor.exe (PID: 2692)
  • trade124setup.exe (PID: 2340)
Reads Internet Cache Settings
  • iexplore.exe (PID: 3952)
  • iexplore.exe (PID: 3980)
Changes internet zones settings
  • iexplore.exe (PID: 3980)
Application launched itself
  • iexplore.exe (PID: 3980)
Creates files in the user directory
  • iexplore.exe (PID: 3952)
Reads internet explorer settings
  • iexplore.exe (PID: 3952)

Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report

Static information

TRiD
.exe
|   Win32 Executable (generic) (52.9%)
.exe
|   Generic Win/DOS Executable (23.5%)
.exe
|   DOS Executable Generic (23.5%)
EXIF
EXE
MachineType:
Intel 386 or later, and compatibles
TimeStamp:
1970:01:14 10:16:48+01:00
PEType:
PE32
LinkerVersion:
14.16
CodeSize:
999424
InitializedDataSize:
159744
UninitializedDataSize:
2224128
EntryPoint:
0x312e10
OSVersion:
6
ImageVersion:
null
SubsystemVersion:
6
Subsystem:
Windows GUI
FileVersionNumber:
5.0.0.1985
ProductVersionNumber:
5.0.0.1985
FileFlagsMask:
0x003f
FileFlags:
(none)
FileOS:
Win32
ObjectFileType:
Dynamic link library
FileSubtype:
null
LanguageCode:
Neutral
CharacterSet:
Unicode
Comments:
https://www.metaquotes.net
CompanyName:
MetaQuotes Software Corp.
FileDescription:
Setup
FileVersion:
5.0.0.1985
InternalName:
Setup
LegalCopyright:
© 2000-2019, MetaQuotes Software Corp.
LegalTrademarks:
MetaTrader
OriginalFileName:
Setup
ProductName:
Setup
ProductVersion:
5.0.0.1985

Screenshots

Processes

Total processes
51
Monitored processes
15
Malicious processes
7
Suspicious processes
2

Behavior graph

+
start drop and start trade124setup.exe no specs trade124setup.exe terminal.exe no specs iexplore.exe iexplore.exe explorer.exe no specs explorer.exe no specs terminal.exe metaeditor.exe no specs metaeditor.exe no specs metaeditor.exe no specs terminal.exe no specs metaeditor.exe no specs metaeditor.exe terminal.exe
Specs description
Program did not start
Integrity level elevation
Task сontains an error or was rebooted
Process has crashed
Task contains several apps running
Executable file was dropped
Debug information is available
Process was injected
Network attacks were detected
Application downloaded the executable file
Actions similar to stealing personal data
Behavior similar to exploiting the vulnerability
Inspected object has sucpicious PE structure
File is detected by antivirus software
CPU overrun
RAM overrun
Process starts the services
Process was added to the startup
Behavior similar to spam
Low-level access to the HDD
Probably Tor was used
System was rebooted
Connects to the network
Known threat

Process information

Click at the process to see the details.

PID
3152
CMD
"C:\Users\admin\Desktop\trade124setup.exe"
Path
C:\Users\admin\Desktop\trade124setup.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
Setup
Version
5.0.0.1985
Modules
Image
c:\users\admin\desktop\trade124setup.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\dbghelp.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\shell32.dll
c:\windows\system32\version.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\propsys.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wininet.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\mpr.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\devrtl.dll

PID
2340
CMD
"C:\Users\admin\Desktop\trade124setup.exe"
Path
C:\Users\admin\Desktop\trade124setup.exe
Indicators
Parent process
trade124setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
Setup
Version
5.0.0.1985
Modules
Image
c:\users\admin\desktop\trade124setup.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\user32.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\dbghelp.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\shell32.dll
c:\windows\system32\version.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\credssp.dll
c:\windows\system32\schannel.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptnet.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\cabinet.dll
c:\windows\system32\devrtl.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\system32\dhcpcsvc6.dll
c:\windows\system32\dhcpcsvc.dll
c:\windows\system32\windowscodecs.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\propsys.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\linkinfo.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\srvcli.dll
c:\windows\system32\cscapi.dll
c:\windows\system32\slc.dll
c:\program files\turbo trading mt4 terminal\terminal.exe
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\program files\turbo trading mt4 terminal\uninstall.exe
c:\windows\system32\apphelp.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\program files\internet explorer\iexplore.exe
c:\windows\system32\netutils.dll

PID
864
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe" /install
Path
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe
Indicators
No indicators
Parent process
trade124setup.exe
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\turbo trading mt4 terminal\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\msctf.dll
c:\windows\system32\imm32.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\cryptbase.dll

PID
3980
CMD
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
Path
C:\Program Files\Internet Explorer\iexplore.exe
Indicators
Parent process
trade124setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
Microsoft Corporation
Description
Internet Explorer
Version
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\cryptbase.dll
c:\program files\internet explorer\sqmapi.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\ieui.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\clbcatq.dll
c:\program files\internet explorer\ieproxy.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\url.dll
c:\windows\system32\version.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\propsys.dll
c:\windows\system32\xmllite.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\msfeeds.dll
c:\windows\system32\sxs.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\mlang.dll
c:\windows\system32\userenv.dll
c:\windows\system32\linkinfo.dll

PID
3952
CMD
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3980 CREDAT:79873
Path
C:\Program Files\Internet Explorer\iexplore.exe
Indicators
Parent process
iexplore.exe
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
Microsoft Corporation
Description
Internet Explorer
Version
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\oleacc.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\comdlg32.dll
c:\program files\internet explorer\ieshims.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\rpcrtremote.dll
c:\program files\internet explorer\sqmapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\propsys.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\rsaenh.dll
c:\program files\internet explorer\ieproxy.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\mlang.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\apphelp.dll
c:\program files\java\jre1.8.0_92\bin\ssv.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
c:\windows\system32\version.dll
c:\progra~1\micros~1\office14\urlredir.dll
c:\windows\system32\secur32.dll
c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll
c:\progra~1\micros~1\office14\msohev.dll
c:\program files\java\jre1.8.0_92\bin\jp2ssv.dll
c:\program files\java\jre1.8.0_92\bin\msvcr100.dll
c:\program files\java\jre1.8.0_92\bin\deploy.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\sxs.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\userenv.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\schannel.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\credssp.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\iepeers.dll
c:\windows\system32\winspool.drv
c:\windows\system32\msimtf.dll
c:\windows\system32\jscript.dll
c:\windows\system32\imgutil.dll
c:\windows\system32\pngfilt.dll
c:\windows\system32\xmllite.dll
c:\windows\system32\msxml3.dll
c:\windows\system32\msimg32.dll

PID
3360
CMD
"C:\Windows\explorer.exe" "C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe"
Path
C:\Windows\explorer.exe
Indicators
No indicators
Parent process
trade124setup.exe
User
admin
Integrity Level
HIGH
Exit code
1
Version:
Company
Microsoft Corporation
Description
Windows Explorer
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\explorer.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\slc.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\propsys.dll
c:\windows\system32\cryptbase.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\actxprxy.dll

PID
2764
CMD
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
Path
C:\Windows\explorer.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
1
Version:
Company
Microsoft Corporation
Description
Windows Explorer
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\explorer.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\explorerframe.dll
c:\windows\system32\duser.dll
c:\windows\system32\dui70.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\slc.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\propsys.dll
c:\windows\system32\cryptbase.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\actxprxy.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\devrtl.dll
c:\program files\turbo trading mt4 terminal\terminal.exe
c:\windows\system32\mpr.dll

PID
2452
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe"
Path
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe
Indicators
Parent process
explorer.exe
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\turbo trading mt4 terminal\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\user32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\napinsp.dll
c:\windows\system32\pnrpnsp.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\fwpuclnt.dll
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\windows\system32\apphelp.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\sxs.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\credssp.dll
c:\windows\system32\schannel.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\msimtf.dll
c:\windows\system32\mlang.dll
c:\windows\system32\dhcpcsvc.dll

PID
1620
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe" /packed:2 /compile:"1785453_23496" /inc:"C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4" /flg:2
Path
C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe
Indicators
No indicators
Parent process
terminal.exe
User
admin
Integrity Level
MEDIUM
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\ole32.dll
c:\windows\system32\usp10.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll

PID
2448
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe" /packed:21 /compile:"1791937_5556" /inc:"C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4" /flg:2
Path
C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe
Indicators
No indicators
Parent process
terminal.exe
User
admin
Integrity Level
MEDIUM
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll

PID
2748
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe" /packed:4 /compile:"1804609_22774" /inc:"C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4" /flg:2
Path
C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe
Indicators
No indicators
Parent process
terminal.exe
User
admin
Integrity Level
MEDIUM
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll

PID
4044
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe"
Path
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\turbo trading mt4 terminal\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wininet.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\cryptbase.dll

PID
3148
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe" /packed:1 /compile:"1811578_3472" /inc:"C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4" /flg:2
Path
C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe
Indicators
No indicators
Parent process
terminal.exe
User
admin
Integrity Level
MEDIUM
Exit code
1
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll

PID
2692
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe"
Path
C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe
Indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
MetaQuotes Software Corp.
Description
MetaEditor
Version
5.0.0.1966
Modules
Image
c:\program files\turbo trading mt4 terminal\metaeditor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\winmm.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\credssp.dll
c:\windows\system32\schannel.dll
c:\windows\system32\wship6.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll

PID
1348
CMD
"C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe"
Path
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe
Indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Version:
Company
MetaQuotes Software Corp.
Description
MetaTrader
Version
4.0.0.1170
Modules
Image
c:\program files\turbo trading mt4 terminal\terminal.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\dbghelp.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\ole32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\winspool.drv
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\oledlg.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\version.dll
c:\windows\system32\secur32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\oleacc.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\napinsp.dll
c:\windows\system32\pnrpnsp.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\psapi.dll
c:\windows\system32\sxs.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\credssp.dll
c:\windows\system32\schannel.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\msimtf.dll
c:\windows\system32\mlang.dll
c:\windows\system32\gpapi.dll

Registry activity

Total events
1381
Read events
1202
Write events
178
Delete events
1

Modification events

PID
Process
Operation
Key
Name
Value
3152
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
ID
C50B83EB-41C8-T-190314
3152
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
Install.Time
1552553684
3152
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
ID
6BCD5AA1-D277-P-190226
3152
trade124setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3152
trade124setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
2340
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
ID
6BCD5AA1-D277-P-190226
2340
trade124setup.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Blob
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
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\47BEABC922EAE80E78783462A79F45C254FDE68B
Blob
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
2340
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
API.Time
1552553761
2340
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
API
api4.mql5.com=61;api1.mql5.com=62;api13.mql5.com=62;api11.mql5.com=183;api14.mql5.com=188;api8.mql5.com=254;api9.mql5.com=254;api12.mql5.com=302;api15.mql5.com=316;api2.mql5.com=452;api6.mql5.com=568;api7.mql5.com=1196;api10.mql5.com=2770;api5.mql5.com=4120;api3.mql5.com=19776
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
DisplayName
Turbo Trading MT4 Terminal
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
InstallLocation
C:\Program Files\Turbo Trading MT4 Terminal
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
DisplayIcon
C:\Program Files\Turbo Trading MT4 Terminal\terminal.ico
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
Publisher
MetaQuotes Software Corp.
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
HelpLink
https://www.metaquotes.net
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
UrlInfoAbout
https://www.metaquotes.net
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
UninstallString
C:\Program Files\Turbo Trading MT4 Terminal\uninstall.exe
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
DisplayVersion
4.00
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
MajorVersion
4
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Turbo Trading MT4 Terminal
MinorVersion
0
2340
trade124setup.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software\MetaTrader 4
PackagePath
C:\Users\admin\Desktop\trade124setup.exe
2340
trade124setup.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
54
2340
trade124setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
2340
trade124setup.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy
URL:MQL4 Buy Protocol
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy\DefaultIcon
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe,1
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy\shell\open\command
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe "%1"
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
52
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mql4buy
URL Protocol
864
terminal.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION
terminal.exe
8000
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File
MQL4 Source File
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File\DefaultIcon
C:\Program Files\Turbo Trading MT4 Terminal\MetaEditor.exe,3
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File\shell\open\command
C:\Program Files\Turbo Trading MT4 Terminal\MetaEditor.exe "%1"
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MQL4.File\ShellNew
NullFile
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mq4
MQL4.File
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mq4\ShellNew
NullFile
864
terminal.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
53
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
CompatibilityFlags
0
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
1
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{0D23A05B-4637-11E9-BAD8-5254004A04AF}
0
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Type
4
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Count
3
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Time
E307030004000E00080038001C009901
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Type
4
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Count
3
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\iexplore
Time
E307030004000E00080038001C00A901
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
FullScreen
no
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
2C0000000000000001000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF20000000200000004003000078020000
3980
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\Links
Order
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
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
3
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
3
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
E307030004000E00080038001C009302
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTime
16
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Type
3
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Count
3
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
Time
E307030004000E00080038001C00C202
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\iexplore
LoadTime
49
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
3
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
3
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
E307030004000E00080038001C003F03
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTime
46
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
460000006A000000010000000000000000000000000000000000000000000000C0E333BBEAB1D301000000000000000000000000020000001700000000000000FE800000000000007D6CB050D9C573F70B000000000000006D00330032005C004D00530049004D004700330032002E0064006C000100000004AA400014AA4000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000C0A8016400000000000000000000000000000000000000000800000000000000805D3F00983740000008000002000000000000600000002060040000B8A94000020000008802000060040000B8A9400004000000F8010000B284000088B64000B84B400043003A000000000000000000000000000000000000000000
3952
iexplore.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
CachePath
%USERPROFILE%\AppData\Local\Microsoft\Internet Explorer\DOMStore
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
CachePrefix
DOMStore
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
CacheLimit
1000
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
CacheOptions
8
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
CacheRepair
0
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
27
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\mql5.com
27
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
0
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\mql5.com
0
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
26
3952
iexplore.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\mql5.com
26
2764
explorer.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
2764
explorer.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
2452
terminal.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
LastUpdate.Time
1552553852
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software\Settings
Time
1552553881
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
IDD
8880880657844574249
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software\Settings
IP
85.206.166.82
2452
terminal.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software\Settings
Country
Lithuania
2692
metaeditor.exe
delete key
HKEY_CURRENT_USER\Software\MetaQuotes Software\MetaEditor\Recent File List
2692
metaeditor.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION
metaeditor.exe
8000
2692
metaeditor.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US
2692
metaeditor.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
API
api4.mql5.com=61;api13.mql5.com=62;api1.mql5.com=62;api11.mql5.com=183;api14.mql5.com=188;api9.mql5.com=254;api8.mql5.com=254;api12.mql5.com=302;api15.mql5.com=316;api2.mql5.com=452;api6.mql5.com=568;api7.mql5.com=1196;api10.mql5.com=2770;api5.mql5.com=4120
2692
metaeditor.exe
write
HKEY_CURRENT_USER\Software\MetaQuotes Software
API.Time
1552553899
1348
terminal.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
1348
terminal.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
1348
terminal.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\5F\52C64B7E
LanguageList
en-US

Files activity

Executable files
4
Suspicious files
430
Text files
454
Unknown types
35

Dropped files

PID
Process
Filename
Type
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\DLL\Libraries\DLLSample.dll
executable
MD5: 4846bb1b33bfbbceabdc045d3020749e
SHA256: a73966e9582b51cf9c32bafe1fa857ff527057399a4f7cdedded182f0428b6f0
2340
trade124setup.exe
C:\Program Files\Turbo Trading MT4 Terminal\terminal.exe
executable
MD5: 25bced5cd44321f40dbdc4a5f51acf3e
SHA256: ac5cc902dffd7f29ee4f0751c87736567b9e71d459061df3c6b83644bdd45e8b
2340
trade124setup.exe
C:\Program Files\Turbo Trading MT4 Terminal\metaeditor.exe
executable
MD5: 202b5098c0f4b364bb9592ab02b88778
SHA256: fe9792e89c2e229d2a1a653c0ea360f9808a2bdea09e042fcab507444efb2855
2340
trade124setup.exe
C:\Program Files\Turbo Trading MT4 Terminal\uninstall.exe
executable
MD5: aa7c7b3c580f5d97ff29bff13d87cec5
SHA256: 893068f0cc6e2c1b2aa51aeb50d5f3bec80bc9beff1a48d87c75ad1f3f78ad52
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998444.spanish
binary
MD5: 2f5f527df3211acb32f992eb1907cf1b
SHA256: df95ed7b731ba0257a8b9b70498ea6c30ebd45e76ff645095461e83803485a4f
2692
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\metaeditor.ini
text
MD5: dc51f5a77b8f40e279cb1ac93ba026ee
SHA256: d8706816ceb4f4ae5f81c98dd8c6b6e8c374784a1c024a82949f3227ebc0ae48
2692
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\Community\mql4.codebase.en.dat
––
MD5:  ––
SHA256:  ––
2692
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\Community\mql4.articles.en.dat
binary
MD5: 4fbf0ba7258c9a5a0d86c6314cd3972b
SHA256: 15530ef957e76d41b4565686c6d2889485958e99d715b23062cfa44b6897f272
2692
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\common.ini
text
MD5: 75c296e6e22c1fff2fcfe94db4129bc1
SHA256: 36cd4c425a941410e4117c29b0bf4198d0e2979bf3b2631b692f85b5c0a65ac0
2692
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\metaeditor.ini
text
MD5: c8f39f181410253e7d2e07a715295a97
SHA256: b49152bb9ef07a28a4cdfd5b21e55cf21c55ddd894f418f20b635938d950c24b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\logs\20190314.log
text
MD5: 05792c09c7222a9d26150c01e8d24acc
SHA256: 761a0c683a2304c13cefc77b4d619fa9e0956f140f0b36d7868ee25c2a2220bb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\logs\20190314.log
text
MD5: 563ed4192cc9aab280aab1d30258dc41
SHA256: aa41aa4ce230ff3796819ac83f36d4ea8efb57ecd62fa70b61a7baba777b759e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\accounts.ini
binary
MD5: cfcc04443e91cfd29d4e60de9f751bbd
SHA256: 2353465c9e8eb610542493c8613f6145c8b2afc0c461c2a985c69b827106ea2c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\symbols.sel
binary
MD5: 3b226516381f251f64bf00f9889e7ff3
SHA256: 98894d2300113c86b6ec03d070188af33b4e2f67a1557a0d51b9ac3ca55b879e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\terminal.ini
text
MD5: c695e759b4a243fbdca64dd431fe2ab1
SHA256: 500361d7b6beca75cc4ea6b1a9cadd0c994cb05f47d6e09f8bc11f92c701cd53
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\tester\lastparameters.ini
text
MD5: 412fe96d70997688c415546dfde3b3c9
SHA256: 2117fc57def87737935ccba11fdd5bfdababc12c1ba61785b3a855a2e2afe3bb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\books.dat
binary
MD5: 38feee1af7a0100ed5a7246d30eec7cc
SHA256: fa10169ce61b610a80b35499e46e64fe650818975bf93ee23c2a9ec11a8cf3bb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Default\chart02.chr
text
MD5: 1398aa45a326767d30ff9b02dfec35e8
SHA256: eff6600534686e79c2a875574aadb5240f3833cbaefa146ac423632cb6979e2b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Default\order.wnd
text
MD5: 2cf35f56d4b484992b1e830ba3d96136
SHA256: a16234dcd7d5b099b5b9fa3db498cf8de002d1fca92d32888b59b6b3e5b1ef6f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Default\chart01.chr
text
MD5: c48818d66d2c8ec5cf8dee1bac610f6b
SHA256: e7515372ca213af13d64d08531788ac055fe761a6e0ff25165b5c90126e5f95f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Default\chart03.chr
text
MD5: dfff56d91f72e5bc16b5fb217dcdf93f
SHA256: 11a08c346b755f46826b295f6b356436f81bee09b04bcb2e2b1b0082234e013f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Default\chart04.chr
text
MD5: b3358fae6623eda3aaf9cf55219debe4
SHA256: 8a71f1cdccfdc5fe8ad2430d742350ac839b3a4ca5938e1aa985c016ca864bcf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\Community\mql4.community.dat
binary
MD5: 8e1eb89da2f1f004e90a19a608a79c33
SHA256: 8610c4b6082adea91ad8b6f2a03e8124cc11c3cc28031cab705241dca6171850
2452
terminal.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cookies.sqlite-shm
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\terminal.ini
text
MD5: ff0ba58b8ceaa034c006a84c6e33b2fd
SHA256: 75740725ba7aaa4e901d1d462b9a9babf2ffff455bcad196b075d56471717865
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\terminal.ini
text
MD5: 261f3b79219b3f2395008fc5a545fb83
SHA256: eb1d29f150034120cba52ad0f579fd1780f64cf46e31e44100f83fac1c7f734c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\server.ini
binary
MD5: 507fad72069a48355b4ee53eb2c3bfd8
SHA256: 4c5b1dce4d089fd4d6d1cb9882799a500ddf89baf97dfbcbb0bf233fa9beaebe
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\Community\mql4.articles.en.dat
binary
MD5: 214949ecdcb05b74839d4fff15100545
SHA256: 435ba489ff3b662f9dc0cd34777989c3fa751d0c8b673c367fd81b53817cc3bf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\USDJPY240.hst
binary
MD5: 18188f0505e9158a3a5793eaf5bf3678
SHA256: e0cc1fffa92044136abce113930563d4a3d3700a4eac9804cb5121698ff19ce5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\USDJPY240.hst.new
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\GBPUSD240.hst
binary
MD5: 78276630db7142baa51db3aa21af1f57
SHA256: f358b44f1725d87b3072a00f604b5813442246d4f76eed1ae0ecf120200f7fab
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\GBPUSD240.hst.new
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\USDCHF240.hst
binary
MD5: 6ddf705d6c82c7354f0985e4525f9bfe
SHA256: 62379e7d7923eb5dceb913c906a025cc7a566e5bed3bd3304be1abcc0818b9fa
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\USDCHF240.hst.new
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\EURUSD240.hst
binary
MD5: 8863a728c0394d0d03de46e18508a76e
SHA256: 6c7e8d5b17dea0b6366dfcf59d59bc0eb26a2dc514fedc84bfc4121141f4a70f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\EURUSD240.hst.new
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\terminal.ini
text
MD5: 4729e85049528ba86a866c8ca818c463
SHA256: 5cc1c8799bc37a0c6c1ec64ed5c4f82b3fb349b9fbd3e840535bdabf830340d0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Libraries\mqlcache.dat
skr
MD5: d158796520e15217ad57580e3ec67ad1
SHA256: fd58ad240355e92d5517871e0fe91a8beecaf071443fbd48a4af0258c81e35d4
3148
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\logs\metaeditor.log
text
MD5: db3d4b48cab56b49aff113217a85df7d
SHA256: 95c3cff441ce11517b455e636e2325a46d48dd07238b5bc01df87ffec9f86c73
3148
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Libraries\stdlib.ex4
binary
MD5: c39dfa83b2a6f918f59419caccce40d6
SHA256: 05a3f93f0a78746a672a231fe9a2d266cd16733be974e7935e523bb7fcd6859a
4044
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\lastprofile.ini
text
MD5: 6ed31c5fd5171d4861e07e797fe42375
SHA256: e97e0f176d36639fd89a6f64264f0ba4cbaa9a49bb968d5d75b914e94402f3c7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\mqlcache.dat
skr
MD5: 59107f364a6bdbbf26fbcdad921c77d1
SHA256: 1d8a1386ba8748efa8c8fc534275bd0b64fb75733381b008228143fc0918e5d2
2748
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\logs\metaeditor.log
text
MD5: 313f6ee67972c25292f2c6e3d5d1c381
SHA256: a2b6352f454bbbd559b5b753e606d2fddf9db438cfa062477496431ac7802c85
2748
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\Pipes\PipeClientPure.ex4
binary
MD5: 3f0d24c9c987fd4124db974f6e43bbf2
SHA256: b4cb876742f3c5d172831a5aa13a5625fc0ebe6d31c799c27d160682470e7221
2748
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\Pipes\PipeClient.ex4
binary
MD5: e430fc26333f29a2125ea677092e65ab
SHA256: 675960a2fbfd92833f064ab71188a885ed483a4dcedaacf478b3da716f837a1d
2748
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\DLL\DLLSampleTester.ex4
binary
MD5: dbe5a658b77ecdd5de65823e316a0e16
SHA256: 95b3d3a9a8753d0c241c223d54110fb162745b6a326c67b465e0d588bee6df54
2748
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\PeriodConverter.ex4
binary
MD5: f39c8e0ed1722f6701c0fc995da80444
SHA256: 33598993bf3c7ef0f7a64245f1b7119d57c525b3157fa278e20349196aa8b029
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\mqlcache.dat
skr
MD5: 6e9684f287b4e10caebf403e93e1a254
SHA256: cb17ff1c6d473828898709ad6d8a55a01cc44a03a584872d3c068cbfc6a919d3
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\logs\metaeditor.log
text
MD5: bea07e6d2b8dce396fe21baa61b34956
SHA256: 2e08d1f6000aef541797d008c05ac36f4dbebfb36cbac5615788e6fcc5b300a7
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Examples\SimplePanel\SimplePanel.ex4
binary
MD5: 99cbe24cb963f8f6ba35b39ddc03fe8c
SHA256: cbfc6a1f12424d1860f35aa4fd97b9aa7f1f9b8c85184e91c18e6e5a36b31bdc
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\ZigZag.ex4
binary
MD5: 28de226c4ae33755425359afb2652517
SHA256: e1be6242488777ed450f4e52d8e87066c7e4941cd2bba1eb4d63aafc7b2def2b
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Stochastic.ex4
binary
MD5: 58b7d3977a1c9d20d067b32cf4ab8305
SHA256: d534fe24617923e0e923dc55fecce658026d0729f715f285ca7b2c895ff43107
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\RSI.ex4
binary
MD5: 627bec9b42c39c24a3d573d7ca64556c
SHA256: e919fcc71a16a8333e45402c68d186fa52b6c8af20142467e474d82acfeaf6f7
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Parabolic.ex4
binary
MD5: 289592bd2ba26dad604622e1ddcb5de3
SHA256: f599a690abd08fee61ec006eb5cb608085a6813aa04d59944cbf69f7cc3da700
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\OsMA.ex4
binary
MD5: da75fc3d343cf03bff00e6395c9fa1d0
SHA256: 39488edeae73b34880b226c5d8487e575f72c43cd287e749e4007c309a688c99
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Momentum.ex4
binary
MD5: dae5cb64c95f9f72f3e84d4dc13e8b8f
SHA256: 745a16b12f3db565b6239854ec715e1d58efd4aa5ee1ca139bd31beea3e78467
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\MACD.ex4
binary
MD5: d5e207b2280e32e9d9c815779b8dea7d
SHA256: 305ca740a5b5edc9f6ce15ae5979ac97a515dba36ff3762a252468a8ec782eb1
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\iExposure.ex4
binary
MD5: c9cce4de11f0bf7ef67666c80121a308
SHA256: 53a06affbec1b7f84da69d1ff231193a7784a4631ca5165c05424e591323d3c9
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Ichimoku.ex4
binary
MD5: 221e16f34dcb4ba2bf79b21f45e3fcb1
SHA256: 15961da1bcb6caa1a650877c88df65ca9671ffdcd72ab0b4320ac856fc7fef59
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Heiken Ashi.ex4
binary
MD5: 91c1063ea70d71e43b9b735ff2034b2d
SHA256: c6a454616b078bb5a1edd1aa34c27e89385967dba054e24a72edc9812232729f
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Custom Moving Averages.ex4
binary
MD5: 7364ffcefe1794625d6c927d3ae42ce4
SHA256: 8e6f295d0db6f30ef887a1b5d6a50388c64695e34814f86223877c8bb027e728
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\CCI.ex4
binary
MD5: c7307c2f20dec5d9ac9e45b0d2318171
SHA256: 7be3b06e9cc46f65da43b1de23b5669ddcb040f36cf352b890910c22d49a1376
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Bulls.ex4
binary
MD5: 594c6d57d9b6ecc4439920acfc6cd5eb
SHA256: 6d9c35309ca266832697712ff64cd40e848fa91d6ec8a280a5d2a4f5b14f5e4f
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Bears.ex4
binary
MD5: 2c629e3692b153012c49705ea3761fa5
SHA256: e16723d9f5677b8f38be89b72ad844bd3f04e88825afa951b0605dd45454bb68
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Bands.ex4
binary
MD5: 0620e8695b949f3822d534a058d1fdfb
SHA256: 66ee2a2e920678574a4e39a8c76f927ff3e4aa5e807da0d0cc60e6cc5233ecad
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Awesome.ex4
binary
MD5: 70ff58ce3a4f3cf933e207c7503c076c
SHA256: 0417e93ce631660b0f876a575a011b78150bd45c3b49d834f58716297d503511
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\ATR.ex4
binary
MD5: b6d4366d01ff32415de9c55dd18733dc
SHA256: e49465daeb9f39354a0855e81658a55fc85017eeaad926add775f3367cb8e326
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Alligator.ex4
binary
MD5: 4a92fa8241302ae8be0fa3ec1ff699e8
SHA256: 62c6c535e2fc654571ea58bd1ab72cffa813926a026cfa6105b4f1f290e4c1c8
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Accumulation.ex4
binary
MD5: e567163f5f842decc1c25ec7813b210c
SHA256: bd8802d8674e9be0200da156f7972f651c3ea87cdea943e08f0f63a61f28a526
2448
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Accelerator.ex4
binary
MD5: e5cabd19ffb6ff1183db6c219bebc03a
SHA256: 5e3adbfed51f598bf0f9d00f6d72f88d5cccca680a8920abefc1317fa871a754
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Experts\mqlcache.dat
skr
MD5: 77b634c9911d16c6d1abf9663d6e16a3
SHA256: 5535cd604851bcf77ee21e60ff0a902157d1f440102f0731a36a95b0f081adea
1620
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\logs\metaeditor.log
text
MD5: f3b25701fe362ec84616a93a45ce9998
SHA256: b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
1620
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Experts\Moving Average.ex4
binary
MD5: 9ad046eeda21e3d9320cb9a4d4421cd5
SHA256: fa468e8093d894f4ace7463b47d894d8f418725291ece0c97f2d1c85a7f129fa
1620
metaeditor.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Experts\MACD Sample.ex4
binary
MD5: e68e6f13ec4de19016e144a847366ede
SHA256: 882fec1bcffea6cf907b00b1bf1313fb312463e16038735977652a1a345b641f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\Community\mql4.community.dat
binary
MD5: b7d198bf30995cc6ba1e02cbde325b1e
SHA256: 673828da374d9e66d278a9af68bc8b76d115907e6c9af0716467e0359d245c82
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1552553798.English
binary
MD5: 40cf8355b364b32d433f71e49ec923cf
SHA256: 35030e2a629b18a9ac9236f4a48868849f7c2831abb183cd65ac6fd444c3df68
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1552553797.English
binary
MD5: 32570309bb85460923e9cb9d3c394f96
SHA256: eaf173a41edad5c06e6fade189e5ff42d35119d6d6a6c2a3ab845092e3feaeda
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1552553796.English
binary
MD5: 1e85d51da25ca2bb9463032e7e2c6485
SHA256: 4f7b948ef317e71f32b7b91144fc219e288416a44ff0efc0750c56d8467efcb1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1552553795.English
binary
MD5: 195594d51e19e9f860f7b30bccc6290a
SHA256: 75874adea9364042a79d7d139dde562926508348c4d0647b2fbe62e23af6a7c8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1552553794.English
binary
MD5: 3f1acea2829b683c2441282d2ef95812
SHA256: b47ead3d25d22d40e88a815e34cd49d2cec5faa87a8d77538060dd1394356aab
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1552553793.English
binary
MD5: 01331c598cd5c5c7d388e364d0208cf3
SHA256: e0f02c8116d7e86a44deb09950971223de02f019e30cfb42e84ae67b05bedbdf
3980
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0D23A05B-4637-11E9-BAD8-5254004A04AF}.dat
––
MD5:  ––
SHA256:  ––
3980
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DFA2421A310FC37B09.TMP
––
MD5:  ––
SHA256:  ––
3952
iexplore.exe
C:\Users\admin\AppData\Local\Temp\JavaDeployReg.log
text
MD5: 28dd9879aa8c328f000184df5907af66
SHA256: 5b1781124ac1f00bb16af5f4349ce6978764e739e223eeb52d0c59738b4ed919
3980
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0D23A05C-4637-11E9-BAD8-5254004A04AF}.dat
––
MD5:  ––
SHA256:  ––
3980
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DFD36054F762D0045D.TMP
––
MD5:  ––
SHA256:  ––
3980
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{0D23A05D-4637-11E9-BAD8-5254004A04AF}.dat
binary
MD5: f0b04187fde0eff8e002cc4a28bbbb33
SHA256: 00bb795933ce6e12bbde772bab3472f8997f05797a0aab1a397c206eae7e61a5
3980
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\{0D23A05E-4637-11E9-BAD8-5254004A04AF}.dat
binary
MD5: 2e12a6a740979df4e6577c52c6d3ccbf
SHA256: 9d54f73fe5bcc3a2ebfc109211da6e38970bcc8ef570a69e3a1b22ef7fdcc547
3980
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DF0255EB8BB249D3B9.TMP
––
MD5:  ––
SHA256:  ––
3980
iexplore.exe
C:\Users\admin\AppData\Local\Temp\~DFEB354695EE919D56.TMP
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\community.ini
binary
MD5: 1618d2ec3142b32faf4b61adbadb5b63
SHA256: 54e11b45f406688e3b28afdc261ac2b412d906e5b2592bde6446e0ac6f958c27
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\terminal.ini
text
MD5: 4a863a611b457084d3aa23f119db5055
SHA256: 57c681626381c6fd3fbc5464ce2c4b539c80478559aebb8d4cd51b2f9fae2df2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\Pipes\PipeClientPure.mq4
text
MD5: d9280bf1ed94471c10b13e9813381770
SHA256: d386450fb726a1109c46fcc9eb9df24d62dc72cfce7874108e814e9a64b23b66
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\Pipes\PipeClient.mq4
text
MD5: 89b090956129f9a9adefa057539214b7
SHA256: 958d2efaca96bbb0a19b5782573055d9858ae94fae0ecfe268f0a78abca77a91
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\origin.txt
text
MD5: a4b4f31d0891aa975ad11e6aa46db056
SHA256: daefa0fdc791c5f4a7bdb3eec23bb2f66c141dfce2aee2b6710f8d5de1f7cf9e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\PeriodConverter.mq4
text
MD5: 618d1e087db8489f59629f11ed0ec93c
SHA256: 4a54ff994618cc2abfc68cb9c5c3852b11335946e0cd985468e83bce8b531f75
1348
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\server.ini
binary
MD5: 507fad72069a48355b4ee53eb2c3bfd8
SHA256: 4c5b1dce4d089fd4d6d1cb9882799a500ddf89baf97dfbcbb0bf233fa9beaebe
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Stochastic.mq4
text
MD5: e395d7e54b2860b93881e958e1c8ada6
SHA256: f47b8cc934b86ca7e67bb3a1b2874653192c71b438c62e06b718e54997437df9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\DLL\DLLSample.cpp
text
MD5: 858550acf4743eea3b68067aee04e773
SHA256: 497534b73ac6b44da6b1cf5ef0e47a9e09c4317942efd618c8f0cdce6a06a3a8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\DLL\DLLSample.vcxproj
xml
MD5: d017251750bc375bffcbc0e0c748ae26
SHA256: ca4db1aa0ec7c57dd98516de98ea1c4bacffc206e5a13d3b99edc7951b66e5a0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Parabolic.mq4
text
MD5: 27ef829de97ecff75cad32f1a66e94c7
SHA256: 488c0bebbb1613d052395d68dbe4844560df1e4b058311ce56f57cd3b73fd9cc
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\RSI.mq4
text
MD5: 0fd5e720bbe314604d62898a11319cbc
SHA256: 2f1a6fe6f92f80ed1f1fddda5012663b7be439afedcec1e7c3255a3f116278bf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\DLL\DLLSampleTester.mq4
text
MD5: 3b811c530968243b6870f912623c1115
SHA256: fcf325b8372e25cfe6d2cd8c7643dcf9d2675053d861ceffbf66b532c6ff18d3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Libraries\stdlib.mq4
text
MD5: ca55bf9c5f1d24ebb2b8d3d2fb2decd8
SHA256: 1e89457aec7fd2a37ee3753caea0cfa81d11e96503e595ee6899e0ca085cdae2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Scripts\Examples\DLL\DLLSample.def
text
MD5: d5c76e29c1642e2688fd583df1ae3785
SHA256: 1d9a8ed7973f082bc93d5476fe695a28fd19fcd2143aadfaafa9c2b770e82481
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\ZigZag.mq4
text
MD5: c2f8dc2d3303f2a1fc5251c6b24d87e5
SHA256: d359d074584e01f20cc1e68a51dff11b40a06f433a25689f87febf0d465fde77
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\OsMA.mq4
text
MD5: c7a0bb2839f81984ebc130401136cd0c
SHA256: 76d344069f06f153fec5773d7d5b166203babb6e6b52c9085c1832c560518c98
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Accelerator.mq4
text
MD5: b1f3c055d1d658678f6ea23927171c78
SHA256: 18c71bb87627996bad14e261c589f37c325a7f24f4f46c3aa8fe3b6ba82c2b33
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Examples\SimplePanel\PanelDialog.mqh
text
MD5: a6fd181f42160dbe74f287f28bd13b37
SHA256: 76117bf72cea2807973c3afd53c7230cab30c446eca8417c8b6974cfef119849
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Bears.mq4
text
MD5: 1b84372890df630bb4fed68d70d9bf64
SHA256: 04d0f2db0a952ca9eac60a4f05bde5d51d17134fb9d7a274c40ed5c1bf695d71
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Alligator.mq4
text
MD5: e16b7ffe5d116154f8356a67d871e1ff
SHA256: 87a399546883b0b0bbfb4b538d1454730e77c3f3603452a82d5229ed8e672a1a
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\ATR.mq4
text
MD5: 8f3540989b5fd64b46eeb7a5342fe310
SHA256: daa1a57769804e536a61c58718f4ce3b78790cdf034314f6f43bf5beb8cf72bd
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Bulls.mq4
text
MD5: 8139e5cf3f6cdecc937457fc5748b893
SHA256: 1741d66a028b0a000eae530a5aedfc688a4edc63de0b276b6b78ccae7bd812b1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Examples\SimplePanel\SimplePanel.mq4
text
MD5: fe755859981ef321664cb78d347f7f99
SHA256: 3e6cec3887b29e6aaffdc77c56d759dd4c59ed65c2a8483f45dd58d14536c9fe
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Custom Moving Averages.mq4
text
MD5: da935d269bb353ede2f3dfa59623beae
SHA256: 8fc6d5d8c41c576219fdcd1459dd628e51e01f9baf7156daa6d7fb624859aa6f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Awesome.mq4
text
MD5: bc221a95535cf8cba91108f717be61c0
SHA256: 794187f4cd98715187b407918a4156d56d9f67f575bd96fb3c073495d7378e67
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Bands.mq4
text
MD5: b454f9207122eb7975202791b60e2d2c
SHA256: 4240f4944761e5b0076b0987ea90e77364bd0696d2befdff466ec328861274f9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\iExposure.mq4
text
MD5: 269ee3e4c5bfc26c08f64d5f61946a87
SHA256: 531db761c389935bb33bf8dcfa7a9ff35d978215398c22fc38c8cea42b2d5b59
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Momentum.mq4
text
MD5: ef3124063e6ef71ebe8a7ee51647e72c
SHA256: cc8613a181b0fc648cb0bb7124faf4a54e731e9b0657a7024c64eec395993d36
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\MACD.mq4
text
MD5: 6608417d7f1506ceb4c18f422f68276d
SHA256: 4e3ce63aed9774537cc4034493ffa9a18aad94efdeaa5ae218a4731adb201e8f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Accumulation.mq4
text
MD5: efcf74e82c88d7d2313314f67d6f2f47
SHA256: a585f9731b26351b90e5d33eef116418e72d851f0061c2f833639b133770a9fa
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Ichimoku.mq4
text
MD5: 638172cf0da5953c957e4c0486a78ae5
SHA256: 2bb7487c2255fa711e91652c43507521f280699061536ad7e9d3f3a86dfeb1b4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\CCI.mq4
text
MD5: 048d69ff29dc9b183a4f5b8438b1aaca
SHA256: 7a376ee9e9a9d132036deafd213c02ca06461c28bbf45c2232ee2faf37d7006c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Indicators\Heiken Ashi.mq4
text
MD5: a276e0830e36898bb69a5a55b508c9dd
SHA256: f59dee9a918d99f9d6c3d15aa05236d833479fe38f5c1aeec2d58f3f31011859
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\stderror.mqh
text
MD5: d77fa3b400f300368134b130706c3adc
SHA256: e3c84dce8d33f9fff6b76f52f90a46528b57c24df46142087df95c9785f200b6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\stdlib.mqh
text
MD5: 809e934bfdd4ac34f97d9b141f70e098
SHA256: 8ec480af7088842916ccd3a16f692e0575f4f6fa9122205f19a171ae4aecc9f1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\WinUser32.mqh
text
MD5: 48dc25ae2730cfd50fb5021df0f5fbc3
SHA256: 1f5a3c515b011e683620837d1b1f1b94c5e6f4d879fdff8e10a7bf3e12deff18
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Tools\DateTime.mqh
text
MD5: 2ac228cede756d32ec93d7e2f83c9279
SHA256: 0cc82eecf19eb7402241579996d9103eeecc9ffb6cbe89a4a2c2d060e130cf15
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Trend.mqh
text
MD5: f0e9a1bb44920f3f4b9de5057cc20a78
SHA256: 918f3d47183a55b405012e04052998078a004bd50fa9732c105ef44c58a4334d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\TimeSeries.mqh
text
MD5: 1eab5c47d2658b9f36ecee4b95c979f5
SHA256: a6b3bcc526bcd3944448022fe41c6f1c5face3117101ea7f9f66f811ffc68c74
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Volumes.mqh
text
MD5: 21924e483ee3e858d0e1a6d436b3b21f
SHA256: 89d9fba0bb9c2b3f639005ca4617ce4912877f40e94ef05e8c0d2089ddbefbd9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\StdLibErr.mqh
text
MD5: 2a14fc8a81121ba3e0b7b7c0925ee0e5
SHA256: 84c4f1d49e6510c9abff6132f592b275cb6e1431f8ce3ce7b28772ac43062ce5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Object.mqh
text
MD5: 7b0d4b8cae69c636a0fbb93e67c9527d
SHA256: 48073f1fe3d2b03e613e26d0fe7e8561cd1154052482082dce3fba8e8f992620
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\MovingAverages.mqh
text
MD5: fc688c9edf5c0743c3314fc3c07e6f72
SHA256: 93bebed1c5595c6d742a45e4960b5170a249a742d529adf0ecc82606ebcd87a8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Strings\String.mqh
text
MD5: 72884b5e616884d6e2678cd8ace2a7fb
SHA256: 160b4eb060fd0599e0d8961f6a50f0968a165cd3cd68e36f109b3b93b607dcc1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Files\FileTxt.mqh
text
MD5: 4e2601ff7d2fe5fcdb15a5065b570f50
SHA256: 6dbba3cad2892302f9f946cd2e45cd499108a10f039bbb85c28a3ff21305342d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Custom.mqh
text
MD5: 45989fb46627f02cfa044d1888202a88
SHA256: 2d93dc0fc1954f3b505c322ebe404a5e3be253d02bc8c002ba406cbb28654a4b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Series.mqh
text
MD5: 86235be2492c84c7f66367505ac57a8c
SHA256: 7ca3df75187a9d0efcb1916790498e73dc2a8a336d5f90e0b8ec96c74a03e3d7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Indicators.mqh
text
MD5: a349747c3a237d6319189a9bfee660d1
SHA256: 489bc69500cc6d4847425c3ad85706cf5fe5ec3e2637f80686e78b49cd24d5b4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Indicator.mqh
text
MD5: ef0add3d25bd9a11e80b878bbbc30b34
SHA256: ca577335af2aaab80f316607350268f0f350352c13756e6d27e3cfa762c9afea
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Files\FileBin.mqh
text
MD5: 33d246b844fa581facbb08e8467435a8
SHA256: db0e13d7ddabe576e0896d67855a5c3821f71990654a21cefe4273cecc579938
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\BillWilliams.mqh
text
MD5: 3c90b96f578bbf4730dd6c7a6b2ecfa8
SHA256: 9eb8f4cb5c43b4fd7032202674dbe4ad0268a616d6c0033336e7fae4a200ce4d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Files\FilePipe.mqh
text
MD5: 99c35a6ac176ce10ae689382bd1d92bf
SHA256: e5eacf15134ceb7b60ebad58760ac3f00cfcc05295d9a00e304a9072ae8d8c2f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Indicators\Oscilators.mqh
text
MD5: 6eb39a603741eee5e3c2975e27f65a27
SHA256: bbd31d625a98663f325b9dad1fe3b12026b67cc46b2224c7647629a2e0ecb2f2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Files\File.mqh
text
MD5: e7a205dd5e83e98408085e7ef92081db
SHA256: 95cce53288908f3724730a63b970d0f2a8a0d85dea77359ebf72a05a397a42ef
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Wnd.mqh
text
MD5: 8737b445f68536be23ada984636af8af
SHA256: 2757aebe13e733b1ff9f0b3e96c7ceebf2778fde797b2f7c49be72699a2949d0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\WndObj.mqh
text
MD5: d2be71ede1e63c02b3b3b2ee7d23a4ef
SHA256: cda4437dda8afc73e7c24c0447f839d636a5fb295b92a7c43790e340898c2cc3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\WndClient.mqh
text
MD5: 95513f334b549578ab9b1e89c63064e9
SHA256: 7c40a8270290e191234b159dbe14da25d8b2860dff620b9745f0f3019d60da76
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Scrolls.mqh
text
MD5: 004d77b2445925b004ad3da133a7def6
SHA256: 86fefc8b1b446598e8a2db1ac029f29b8d99c56436016c26786b3e75c35b4c8d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\TimePicker.mqh
text
MD5: aab55cd6040897d2d7e02e97d3970abe
SHA256: cc9ec9f7b5ef20861a29f51df263fd7105765fcc81b84568eca22f9f404a6967
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\WndContainer.mqh
text
MD5: eb1a16a94dfad76462e74fb92ef24091
SHA256: 3200228bccfdb45e2537ce65c4e039319a71bcc4adc25b17665673f94d57693f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\SpinEdit.mqh
text
MD5: b545190e8a1c1b6ae3dbf467ade17bcc
SHA256: b533f860b715ed67baf422469e8a334d95dc31160f913a6574f6e973e2eaade2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ThumbVert.bmp
image
MD5: bac22303f0436aa58cefb67189e17cbc
SHA256: 95cfdb7dcbe29e5dc3a96be329d5f0c550e64ac71918c4fe4ac5b6d2a5f0e6b6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\TurnOn.bmp
image
MD5: 446a47bc09c7421afd92f0445e643e78
SHA256: f99bb8d3847457bae467851731577dbb5969a9b9c20747290c1d67f22c31e8db
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RightTransp.bmp
image
MD5: f57ee1b72dfcb29c193e1bf2504aadd5
SHA256: fe2ec3b5b8a2bdf0a91068021e0a45f94a789c636712023aa197ba503a740af4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Up.bmp
image
MD5: 7a4423c336862339c9aa594b3b9c1702
SHA256: 8bc47733e26818b3f00639c05476328fe1d1091ea466ad63f88faf638c2d75fb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\SpinInc.bmp
image
MD5: 13d28eec8e1f0764c72ecb0a1dd1d7ea
SHA256: 45b7e2554e10c99cf744ed5257f4e30be5d6f766f7b293f66a59338a41e39690
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ThumbHor.bmp
image
MD5: 682e747fc69e385c9bb408e39a1df41e
SHA256: 9a2b3d347fa1d2d5f1657c77c560e29b62caf8e6dd1f5210d7be049685195653
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Turn.bmp
image
MD5: d5943c75e08f7cf2dc815e9093d58158
SHA256: 9160e58f61b9d53af6fe1b70253f168a5cd5c9d77e5cdc3a8140d3d93d2711c9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\up_smoll.bmp
image
MD5: be82c36ebb19f0c41d41d6e190c1fbc1
SHA256: 8f783b97ad6c3d7cb01d6e485e9f0ccb11eb75992329ff8cc467b01e0f7e4c6d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\UpDisable.bmp
image
MD5: b9c859ada6c5b7b1953def98e5c8fa58
SHA256: 1312df4c53e4e08d401e8d60b165e3830ce7d7e6b3c86ae283e9a5a4fb9ef010
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\SpinDec.bmp
image
MD5: a18aabe128633df6eed9e7b00f168699
SHA256: fd6f0eb884b3d7d7e58cf43e77ef7582001f2b556451211e128b6606b84111e9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\UpTransp.bmp
image
MD5: b14cdde423729c7b5aaa817ee77ae012
SHA256: 094a229fea23466a4082d85e8560be6587931530d78d3d4b71c8bd9d50bcadf2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ThumbVertDisable.bmp
image
MD5: 7f39fe650f59f6f0520d1568508acce2
SHA256: e4bd4624a94a5cced4172602204f10486b08b2d1ae793ebcb5742bc95b033286
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\TurnOff.bmp
image
MD5: 4078b744ec4aacc05706da60658be5b8
SHA256: d773221ef3c8e5cb72be8712ac80cb89bc68ddbd749f6d94c0adbb7cd8dba2ed
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\UpSmall.bmp
image
MD5: be82c36ebb19f0c41d41d6e190c1fbc1
SHA256: 8f783b97ad6c3d7cb01d6e485e9f0ccb11eb75992329ff8cc467b01e0f7e4c6d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ThumbHorDisable.bmp
image
MD5: 6e67db6dd2f6b1bbf4d84720fa7ee4a4
SHA256: 196ca140b567b024cfb41f2d16b4b9ccec389cbfada539292e80949a20b21b77
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RightDisable.bmp
image
MD5: a00fb4dd839cef230ce56899ad9d1464
SHA256: 765663d59f213cc4a5d3a8cbf6fecab4e41da7f88d9a3cf953e4810c90170e52
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\LeftDisable.bmp
image
MD5: 358660468f7e31179d49ef6aa543fb4a
SHA256: a40029c345d44fa818e9671bff81c8be63bf35318f2871a2afe535823a8b6e71
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\HelpDisable.bmp
image
MD5: 92c4f6935b1a130b750d978030c858a7
SHA256: 3e3f4bd3043a36a4fc3c25e2194ba865762b361804f62ebf523cf773375d8496
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ExpandOff.bmp
image
MD5: 8b7c18d274ff8b0e041280c21b6af964
SHA256: 1e53f75f2e45bd11f86520ca3b3dc913b0e78446d23b93305ce07589b9c6f2e1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\HelpOff.bmp
image
MD5: 7e281a9ce676975dcab7f32383a1d38e
SHA256: 4a2467be237e723f0365eda8e325adb3f5965f972bf7139a22af01e7f3520ddb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ExpandDisable.bmp
image
MD5: 1f654455e5784f705534a8518fef5640
SHA256: 67f4ca5bf28b670e7b5ccaac63b8c5dc72e4047b1b10488ed35f141554222746
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RadioButtonOn.bmp
image
MD5: 68e3c1c502c40fd012e6f89109268e90
SHA256: 009841ca8e69b0c8a30cc075cf277925a70f62882988fe4555a65c1ce61d3fcf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\LeftTransp.bmp
image
MD5: d9c18f1ee9be649c4f5de670edfd7081
SHA256: 99272e707d33f20756f68d2c2edf9071ee6b8e81d77668f03f4aad0921b59956
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Restore.bmp
image
MD5: febd7ae0f7010d549c367e8bab2550e2
SHA256: a877849271623fa10b9132c251239c28e8a755779ba9f6f31d42485186f4996d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Left.bmp
image
MD5: c34c84bda85e10ccd6d7b6fab02087e5
SHA256: 3b8d2fcd6e18f269b5120496040ff64278cab5267f5656ed33ce37c8e51af371
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RestoreOff.bmp
image
MD5: eff937b33f71aac9a31ea8097e2c4363
SHA256: 3ad40ff8e35464ac01c87bc74202a76d292a638ef97098f092f3b0e643dee6d9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RestoreOn.bmp
image
MD5: fcce1f24487abfe92406180c2c0b786b
SHA256: 8691062f29793819e552660600e11c81690871711b4c12e032b2990b1308943b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\ExpandOn.bmp
image
MD5: 545034155439e4cf7357f1c24b647a1c
SHA256: ae5ed30ebf0e58ae4e06f2ec19d2931baa47d5272b6d45b4a2f3caff3abca95d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Right.bmp
image
MD5: 92aefc909d318fe697054d2f71d3f3ff
SHA256: 6a34150238b6ae6b47d41d101e231a1bed64912e008f35cd85fc40263c538b01
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RestoreDisable.bmp
image
MD5: 2982f52993888dc86f7d6e640c023e1b
SHA256: 5b41e9a68ab5610df501d88f3ae299d54aede456182d62d8ed26f13c40ff47a6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\HelpOn.bmp
image
MD5: a7d8aba2f57ca924e334699ca7021999
SHA256: 82211a2620665f4fda6698392af12cd4e90f98478ba4f427184e0689ef0fc806
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\RadioButtonOff.bmp
image
MD5: 3c2f63169316824d8eb5c29f69e286b6
SHA256: 6cc6772ef3dad5ad18856888b93b9956f8fb718c7e5e4ee9ac14b92d46045f92
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Rect.mqh
text
MD5: 5556ec3d0edc530b8c82d43a7c798fa5
SHA256: d275201e3270c3158d0aa48f0d256e8d7ff6e87ce20c8d6162766eccc1df92b1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DownSmall.bmp
image
MD5: 91c80ba0694482860929b0e28d344ba5
SHA256: 7a5d40045a21e5b529881fc03eb5ff29889cbc653b12bb50934c2c6d4f0f1cde
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\CloseOn.bmp
image
MD5: 81d2358666ae5369406ef640d53697bf
SHA256: b9b837781e3cf966e1fc9dcddeb451b32b3322270ab41086143742ee17360a07
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DropOff.bmp
image
MD5: b8562f083b4f9432539cf5ce20ff56a4
SHA256: a118242c3a439df88d3b76a3fafd346397a0d253117e1809c11187fbafbcea0b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\CheckBoxOn.bmp
image
MD5: 78de731a1b144055ea131b72ce887f90
SHA256: 0e18229efc821139baef5a1d0877853b65385768362c92ebc89ac56caebf94c4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DownDisable.bmp
image
MD5: 4119d042a71d4e00690db5da1969a128
SHA256: e736507d006b8fb0736121a82743261fdf8c57bdc1cc09dfada4ee0a151ae97e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\CloseDisable.bmp
image
MD5: 1e959a4b80d3cd7db149fefa3276eb04
SHA256: 8ede3ca9f3d3f6f0416b5b52d01f2f9320b1e29650372d7ae5240ae01cfb0777
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\CheckBoxOff.bmp
image
MD5: f5038628cb45cff4951f987da2efa250
SHA256: ec006ccbfc0709c5676f92b6d7a98c9494b345e6effcb8acf2e578bdef19cdf3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DateDropOff.bmp
image
MD5: 5af1c0a931291d0efc98398f7ca0b987
SHA256: bab183847f750292dc1b87192c1d15581751d0e907386d7c399fa6f4f017a4b5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\RadioGroup.mqh
text
MD5: 46e423a42a4e19b660702d7d51581f82
SHA256: c5d9e60467949957aeab34a9a7c83394fb5e26e221f48046b6c509d232c914d3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\CloseOff.bmp
image
MD5: 8a6eb3ddcac7cf5d4a89f13c46a6dd08
SHA256: 94b02e4a79c613140a28fa66c3da3212a705cffbd95270e4e0c4d47aaf3f5cb2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DownTransp.bmp
image
MD5: b8562f083b4f9432539cf5ce20ff56a4
SHA256: a118242c3a439df88d3b76a3fafd346397a0d253117e1809c11187fbafbcea0b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Close.bmp
image
MD5: b80f48dc9225044c9814ff0afaca3d9c
SHA256: 30cf53c4fb14809535bbae76681442ba60ecf924a99344af5e59653f7dbbce91
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DropOn.bmp
image
MD5: b14cdde423729c7b5aaa817ee77ae012
SHA256: 094a229fea23466a4082d85e8560be6587931530d78d3d4b71c8bd9d50bcadf2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\Down.bmp
image
MD5: 5549b11b15f1079f21dfbd7bc382fd86
SHA256: 58073fcc8c5c9e6f519c2e204cb64efd2bb88d6d1251d2eb38fdeba184f8bb9b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\down_smoll.bmp
image
MD5: 91c80ba0694482860929b0e28d344ba5
SHA256: 7a5d40045a21e5b529881fc03eb5ff29889cbc653b12bb50934c2c6d4f0f1cde
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\res\DateDropOn.bmp
image
MD5: 4e745d1cf8b71f2f4188dc19d24a251f
SHA256: 6eb4dc480cd579d0e18bb6364d4cf5fc1b373091a274ba1872e56f95bf1e6b53
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\CheckBox.mqh
text
MD5: 988a99373bddcb97d181c8ca2e638395
SHA256: e79fce1411e087d2e2e5ae0ff69271bf7c2f960ee89d9f26e41bb73b619cbc32
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Dialog.mqh
text
MD5: 884b11d6b942abe710dabff59680760d
SHA256: 647c2ee7aa891395789c8c7afcba55bf75fe356719431c5b45a1c87865bb90ae
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Defines.mqh
text
MD5: cb61698396fae3010fc42c710caf96b3
SHA256: d6530e0a5d0bdb46c1760443ea7a4e1b96ebd75a6e5a79aa26ebdf5e90f545e4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Panel.mqh
text
MD5: 54e1360b0676380650218943a1118c92
SHA256: 5cd81d3f77a49a59bbf9ff1b39aea1c212aa0f2418a7d0776eb515c52ab15a61
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\RadioButton.mqh
text
MD5: f2662adf73c75ac5b3dfff965b849762
SHA256: 96d1b193682e9fc6934ffdf0e69e804bce425642b91b9e3e7cd32f663e02d5b3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\BmpButton.mqh
text
MD5: ec3628a33445543151936b66524bd299
SHA256: d5ba48b9b31293b96642eb0fb75a44f85fdb63954f7f08d47810110682188146
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\DateDropList.mqh
text
MD5: 524fe04ca60e7af214eadbd5b409038c
SHA256: c644e993a7991b444d809243936c496128308cb7338715b84ff99019a2b66099
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Label.mqh
text
MD5: 1e837ea67a5d3886b62302f6256ab331
SHA256: c1457b7d24d20d92b1bce86c3e6df47d2932624bf80e723b72996c10bd84903b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\ListView.mqh
text
MD5: 78079f491478b1cd4125682493168614
SHA256: 7b323218354d5ed9b321dea9b8fa48225d50e9d3bab9af110ce7eb5d6af4c8db
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\DatePicker.mqh
text
MD5: a81c49f93239841f420d2cab3ad62173
SHA256: e459fa05c67bae9df99eb30dc269dcababb94e53115ba9c855de91dae57e586c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\ComboBox.mqh
text
MD5: 6fb221e47bc5e89d4680c1fbfd9dd14f
SHA256: d0ac4e366cd85096950f41a7f3ebd8b15c9bdb5acd742c8fee5be2f99173e765
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Picture.mqh
text
MD5: 690d75c744a78d8f4084eb62d263f9e9
SHA256: 2ebe350175fab7085ba747cda8dbd9a43d1408cc123f7b28aa7fe304e95f630a
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Button.mqh
text
MD5: 4dc7d4c0ef6209caa7de7fb7341f54b2
SHA256: 7aebe75c966bad1fd95b0c9fd40167c5256ce8570d6c22993cb01777b3c542ff
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\Edit.mqh
text
MD5: 954a84ac2751cb4631628dfe0812f278
SHA256: f45875092aea57eb5cf3daa277d7612d2b71d7b7baa20babbd1e77ed310e94c9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Controls\CheckGroup.mqh
text
MD5: 062471fd408fa9cb5a330b5e39a3e3ab
SHA256: bcf212b1c523e3af2341d5ff5a503360abcdf8e6bb662e4ddebd2e9dada3192c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsBmpControls.mqh
text
MD5: f90887d3759f33a7574e2b75c4dc68c4
SHA256: 563992888ccc0442209cb982b08598b0a289550cc7826142691ff4c59b1082bb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsLines.mqh
text
MD5: 63f193d0015923412c2edfe320969c36
SHA256: 1f78ecde58761acd7c0f79d4706ab7f6f854b117cf304697d3c2c017b711cda8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsTxtControls.mqh
text
MD5: a39e018a14e5de6b829c893ef1cd9b35
SHA256: b878bf13c8dcf713e0190824569a373d3ac51dc56819989423f61cb368ff5715
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsShapes.mqh
text
MD5: 05c3189cd49e0a71752bd89bfa53feea
SHA256: b9c41a7826622a9c0bdb88f3bfd8c50a13a92e05a1a2f008bdcba1658c5bf559
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObject.mqh
text
MD5: 83c5a72e993a4efdc4a8d9f0d6d03493
SHA256: 6cd760e13840c6cbfef3313c0c7db674808078dcf789e58938c04f9ea797aef5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsArrows.mqh
text
MD5: ef39d3fd157e7c765870195dda04afc9
SHA256: 93a187f7bc128b7d99ab2351d400992ec5a251910af23294085549958669ddad
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsGann.mqh
text
MD5: 4e91cd016ef3427a6350555eca66f6fe
SHA256: 440a61fcdd549cdb07509bb06561bfc743055fdddc790daa9680c48bf76f0375
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsChannels.mqh
text
MD5: 586308b2b50455a023539677d2746051
SHA256: f67ecb1900c8b5e5dcb6b1792b26e382c97c1a0fb1642cbbec1375ed3cf85761
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectPanel.mqh
text
MD5: 45a2073b089ccba7df2d10454319afd5
SHA256: 36c38fb800a794461433d3615c079691d3ed0799b1a9d62acdab5d3272c2224c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\ChartObjects\ChartObjectsFibo.mqh
text
MD5: 7db117ad62ea17b682e88a7c5886690a
SHA256: b89c6f9b7f14b22d6a192c5f0f625a759a6bdb0b4182c54906dea938cd45f3e3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Charts\Chart.mqh
text
MD5: 4ee53c009d840d69e81e1e13650d6304
SHA256: b915ee102dc232194f43e14f4404c601172d938468aa8c99560dd6a87997eff0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\Tree.mqh
text
MD5: 76cb57572f055249a78af710d0b2abee
SHA256: 4d4dd2007fa4d4577c9e40c28cf8544f8b154c15861b096bd1a840924d495500
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayLong.mqh
text
MD5: 7fd0d8764bfd83e848593977b3f3acc6
SHA256: ad4f1f2315b49e1196209e1ab7ee6e47a952ab3cde60e21c574acf1d0fd75ed6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\List.mqh
text
MD5: 6800539e6d92b736127fe5d94996924f
SHA256: f7334c9e21ff241b1d1154b06d431cce49c0e296b6c7fb46b59f7657d2991f8b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayObj.mqh
text
MD5: f8d64b176f2d22607ba4b0f86702eb66
SHA256: a56cf708caefbb655a3275daeac312121aed8ea1c21811b079458433c70cce28
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayFloat.mqh
text
MD5: 82efd278d622abf0ac3afb98c1900d4b
SHA256: 331e4b985bdfc45674f67a6eeadba3848913359132dbcce986052c7ef6a04f0d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Canvas\Canvas.mqh
text
MD5: 284f92700619dd0530971d7b42d63c12
SHA256: 64d5be479970fa194408c369414dfd4e76fe38f256294aecd7c7399139b01ef2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\Array.mqh
text
MD5: d8cd709d6263676aed5398d602ebeb19
SHA256: e0a9c33c7f48e8f3568493a6a5c0f73cfc0ca67f244c98db537197e33ef353f4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayShort.mqh
text
MD5: 4c0d4722fdab68c5a6d6f6c3d659c427
SHA256: 62897c427ba7824b3958be1a50fd5cf9f7e48403050d4be0b9f343e998a0b8b8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayChar.mqh
text
MD5: a6d32cedc7fd7e24d82f36039a1220ac
SHA256: 595c4cb02c29ce99495abb37e1bc93cb9384b05ce1a089a3ade7e90090c27af5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayString.mqh
text
MD5: 50b760340db5ed51cb72b3bfb29af6ed
SHA256: 1917d788ab1208c17f1fb49ae3a4b1989bbae3035893648c950c0570e3b7c04b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Experts\MACD Sample.mq4
text
MD5: 76336ff9b38fbebbfbaeff0b2de320fc
SHA256: 4b9b0837be9a580444a15513e02dbbfc4e3fba7321133aefe5cfb1cc7c34fd5f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayInt.mqh
text
MD5: b9a328a4e38a5152b93fe25c64c1dfbc
SHA256: 7bb3a442630411746d43d4ec0df18b1b2b3d56965cf29876228375e391997dea
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\TreeNode.mqh
text
MD5: 648fc969b496e280b0bb86f007f902f0
SHA256: 67d7b2ccb7e9283cca9deb3603a24795d47f1396ea8734ab82d902b9c135dcdc
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Experts\Moving Average.mq4
text
MD5: faf509a2d59302077b71f494ae8ed42e
SHA256: 94b8a95ba1e8f5de250938e09cabe433d8cb16037796f7b9a24ad261a6a6dacb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\MQL4\Include\Arrays\ArrayDouble.mqh
text
MD5: 1ca1a9d3122d67ac8fb7644c3016c554
SHA256: c4f2c50fbb3baf347c2c0c41e6f9729c4709273e0b46295f6a490b2e7becb0f5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\mql4.zip
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\Williams.tpl
text
MD5: 4d1db2b7c191d170c7d606d7653a8514
SHA256: da71cd87ffbd0a92179b23fa28c7adbbe9f7f79960d4e41affeeaa8c0ed99293
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\Momentum.tpl
text
MD5: 255b513a661f9808a09ebc1b03660653
SHA256: c7f8dacc1aefba1c965b6fea94a029d80a5161a011f81edbd5e4f5d15e554b28
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\strategytester.htm
html
MD5: 26b2d851bc754ce6f01893df04c64090
SHA256: e68af34ba74f7aefd077fe6147c6e2f40f91b90188e000656cab533ffb419a04
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\statement.htm
html
MD5: 2d2466b92a18e19823b379db53d4e114
SHA256: 8d1078534622984d2773fcd2584d41e2faa76d453ae4868c594490b7501069cb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\Popular.tpl
text
MD5: 8c2fb164cfe9ea09bd4657f05c9a9777
SHA256: ef2b0177a970b6d6df52a9d03a004eca68b6f410f91047050023024d6cb4f8bb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\StatementDetailed.htm
html
MD5: 0bac3dcd86d44db76d11a19b2fc5e841
SHA256: 4627125607c896c951cbf80189a22a3ff497f752f0f76972b00ffe62c5159be6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\OptimizationReport.htm
html
MD5: 784ea6b9ba9353a9edca33a7ff879593
SHA256: dc1d98f43c06e1a1fb7a6be186503a6eab61e59a83390fbaf217a13a99038c53
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\Volume.tpl
text
MD5: 71e7d43363787423f997d2911f841733
SHA256: 1e1cb0866dbc2091a39a98219395f6bf50e19633050ad63e40bf538def9e3ee8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\BollingerBands.tpl
text
MD5: ffb7ac27b5b6271afb5dfb3435a05a4c
SHA256: 3cc9e457716dc3116e0c5e94b0a08d52bc04781936ee6b42085325e157c812bc
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Swiss Franc\chart02.CHR
text
MD5: 2842e45a276daeb26f153de925222959
SHA256: 4a54928032f2efa381da20f147e9bc80e8644d0d01d0a48b2b4c103af026541d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Swiss Franc\chart03.CHR
text
MD5: 34b5854ae81208a46b56978b83ce2b0a
SHA256: e133902f73140796efad41aca3da903d1e158dc41cd546363a66e1ae3294ba6f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\ADX.tpl
text
MD5: 05ca4c0a3568e2f0352f5c28e33f54f7
SHA256: f57b9c2a2b58469fb54c27af8a934e5c45e6245f71f495f6e7a8998be85ea7f1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Swiss Franc\order.wnd
text
MD5: 160ce6235904b9dd0c0bc5debd46c2a9
SHA256: 8716dae9d97cde6377e17ba9355fc88fb7c730863182186154803f71ab9bf04d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\templates\Layers.tpl
text
MD5: ab09fe90952e30f625cea1a8ee37c03d
SHA256: bcd45609070340aeb991e2e144eb8f223b9f552cfbff510400a9e194fd2e4827
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Swiss Franc\chart01.CHR
text
MD5: a1dcfe0165a0ec56c2a7add71cf64720
SHA256: acb49e3a852696d9c00b8a18d4200664098b5eb824b2018b9f502caccc643e87
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Market Overview\chart03.CHR
text
MD5: a4d44a4fabceba241a0781d6ef9bcd92
SHA256: ffd5afc9eabcd6280d6c71d3e4e8e432efac3a2a82de3fc628adb16c55269419
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Market Overview\chart02.CHR
text
MD5: 3acd68a93129afd81d39c16fc8b66a43
SHA256: ec73fee2e63cce7054201f90058d54930ef9bcc0bc740a702b090168536944c5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Market Overview\chart01.CHR
text
MD5: 5aa16c6a9edd5076de7583ffb0939bf4
SHA256: a0f1b43b9da086973b29fe73f61ebc2cdc70aaf23ba39667c8478599d18cbdd0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Market Overview\order.wnd
text
MD5: 374d1a4c11ef82ab86cc86bc9fc3234b
SHA256: 5edd2401e423bf7f340357e99bfdb9e6737469085410aec2414bdfb16910e6ec
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Market Overview\chart04.CHR
text
MD5: 629309fa1359f8b047914e827f91a485
SHA256: 57739a03ec7fb3b1737c48a9677ca3fa657054acdc43bd160c1e23e4e448f00e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\default\chart01.CHR
text
MD5: e40994752a145890e922b500b9efcef7
SHA256: ec5ae1a4126438fd3595953ca9407aa3140e8ea1dbb8041a3e8a8ab474bf3cc0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\default\chart03.CHR
text
MD5: 3b738b2f0543172a85239248938c81e1
SHA256: 2417e8b00b4479870a57df6f1ff082d33f2cbb6f879611e263064b480b8470a1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Euro\chart03.CHR
text
MD5: 536bbeade46922fd39946ba84832fd91
SHA256: b8d172cbab65f0cd16b68b1a233734b4c71715bd0386676787640be38ab9b6fc
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\British Pound\chart03.CHR
text
MD5: e70e75a48fcde1bdccbf60eefdf7e1de
SHA256: ce6f24a8b1ba06f703aff1ee5e7be53b36d9a5b2fdafd6c595f014e8321f4936
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Euro\chart01.CHR
text
MD5: b2f9a27089ca86ff32d61c553c0c5399
SHA256: 774aa085a942d24153c25dd06ddb802c4b5e68d12110c3c4a8e43a76ca504411
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Euro\order.wnd
text
MD5: dd404d8b3aa934cb8476cfa1c5762c0c
SHA256: 39c8278327a573c90bd58827a65a942775641f4d4cfd4646a4405bc5b0789be3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\default\chart04.CHR
text
MD5: 36e98c7362a0d27d2a596d939a144743
SHA256: d288cd11900a881ecaf7a48bf58b0b701fdd59865f771eb7743d1591387da3f4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\Euro\chart02.CHR
text
MD5: 7f285bb4ce156040e3b537516047cc8e
SHA256: 3c5824b89b60e6157e5332de0ffec20682ce4ebc57f2d8d976edc3f2e051cbd8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\lastprofile.ini
text
MD5: 6ed31c5fd5171d4861e07e797fe42375
SHA256: e97e0f176d36639fd89a6f64264f0ba4cbaa9a49bb968d5d75b914e94402f3c7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\default\order.wnd
text
MD5: bec51eabd4a915e9bf5c33d98e202f1b
SHA256: c5467fd664935820918fbde7bdd79fbaf423ee043c38fbfa83788ef1ec1f75ee
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\British Pound\order.wnd
text
MD5: 2547e671f549e0c3b143ee8032fde665
SHA256: a0a2d5f1521ecc527f378a2d5201d85f4213c05dadc5f06fe3b53cceb19df2a6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\default\chart02.CHR
text
MD5: a8413bde8cf6c9b8a815bd38981b5c4e
SHA256: d6a0fb8366a2724a0edf9d99b10451e06d7a7832594d78620cf3aefe11c88b5e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\British Pound\chart01.CHR
text
MD5: fb039b7b6818aa0b1b93dad2edffe9bb
SHA256: 67daa9da824098d6215fdc5dc9ca9d09ad94651ae604eacba5bd61269af15bbd
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\profiles\British Pound\chart02.CHR
text
MD5: 91ca3cb8e3fff0e65c6a344cbbd7dec3
SHA256: 78bfdc6664f61f77c139a27fc47f0bc1fb2bb3a5d62085f6a319a4c22ca77b38
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998548.uzbek
binary
MD5: 079e173ba22372f4fe60d390cdfd4347
SHA256: 9ff016e6a7e0e3b10023e07f885612d340dcce8f771cee0ecaf7d4fcd71464af
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998549.vietnamese
binary
MD5: 24e74959c0d0b7d5755bd49c149dcd2f
SHA256: 0d6b0412021f06dd12e33b6335d8e806c20cbda66ea14c297ff0a840a10c4903
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998540.russian
binary
MD5: 4bbb79cca74a0a3fd7686002ab891489
SHA256: d388ab9b830dad5c92f1fa0350b2c401f4a110eced74fdfb7fdc7de96fb536b3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998544.thai
binary
MD5: 74372627410408d7deeec1519bebe1d7
SHA256: 7070ab672dfbfeca7c6a26d625aee68400235dfead39910886874b248fe43f35
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998540.polish
binary
MD5: d4f2ade2b6cb8156f21bb13d7ffbe3a6
SHA256: 8c8174fbdba4a59b7d7aef74c62666cc18e362fa6d95aa83a3e7a8d839282e9e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998544.spanish
binary
MD5: 992d57a6809027e9a011d840ebc3a1e1
SHA256: 4333c19de5de0faf5dfb86d7c31387da2b8896adfd43466fd7fb9f76d811b0ad
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998547.turkish
binary
MD5: 893e1a24ed3f216bc17631f9f43e2916
SHA256: 5fec49bf99f0af929c3623dbac719103c85179d7fdb08ef2cbb43e6ab4ebddda
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998541.portuguese
binary
MD5: 20387cbf4eebd413afb3657322acf2ec
SHA256: fdd1f49c2bd5f46b931975ab5baabf21b929f196ea1dbe7daeacf27ceace5800
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998543.tajik
binary
MD5: c164a13c6c9d21208b6096ef06b9984a
SHA256: 7bcb1fa210d9572dd384b764cfb61a8184da94bd521112891b960000bec6f5d6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998543.slovenian
binary
MD5: 90b6920de23fdab7c733f444952249d1
SHA256: cff3c9540375ff2523583ea3c6a223b4c660fc68ce2ffd95d945916b6478c8a1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998547.vietnamese
binary
MD5: cd1300217d354736631fcd05cd49bc7b
SHA256: 417803400aea067224549318ac1f0611206656e94f95ff4cf7611b52664eb79e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998545.turkish
binary
MD5: 881a8d2f6a4bff354286982dff436201
SHA256: fbcc6e557dd3059851fd5ed3f72515f39b9028395c445b1f4eea7822de006ef9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998541.slovenian
binary
MD5: 11c39adfcac3fb27ff2efb8e42b0715c
SHA256: 11989a7e424b4b6a90657ca413dcd289ed69bc8ecafa8080858c0c31836e9f52
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998546.thai
binary
MD5: 4679c98326fa2a23329ec3755dd13573
SHA256: 95abdefc54c1aedd56568b935c818d2d536d6134275a015c0c939cf0ffd1bd53
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998545.tajik
binary
MD5: da3e845568369b615316ba3116e54ea4
SHA256: 3cfd1d0b508aa817c40e58269ba24e5423e6316527d949066fb86f689c6bd5ca
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998546.uzbek
binary
MD5: 945c2c65977b79ffff6ad256f00f7b48
SHA256: 5d90f3da88f66833b820718449f2425b0324953fca54816e7604aee5272c85ff
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998542.spanish
binary
MD5: 7faf7a3bc132d7c6dd9d58664a63ac1e
SHA256: 7ab916f195ecce5e961ed5c31e6c651eb4c1aca39a21b6f827bfcc6381cab10b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998542.russian
binary
MD5: 0d00c4f829b96865adb4504c55d82e4a
SHA256: 0b2eb4549557805349cfed2a6805f5c9721543b0e98b1847dd4c0634bb95164e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998534.hungarian
binary
MD5: e1bf81904aa7a79264d8a2049fc8192a
SHA256: b456138ea71299de3509d670c42129a1978ac36194cfa05bccb6a2c5d9bf31b0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998535.hungarian
binary
MD5: 19fb3012d4b8bce26dcfbff0e1c6bc87
SHA256: 08fb26701dc3388b1ddee8bb990520f1f176f1f7c994c696c9675d481eb1361d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998537.italian
binary
MD5: bb8d8df50be29a1de25abed6d4b85dc3
SHA256: e1cccdc1620a87ca2e4b61565b15506b228ab12ad6deeb4a91a89eee31f9fc85
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998536.japanese
binary
MD5: 15de05a64455f48c4ff02b9813316ff2
SHA256: 0c723fae56f3b3784ff51fbe4ae098cc8f58306f80e7018c4da756dc41a71cc0
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998533.greek
binary
MD5: 51694dc48797d468ab5e5a117a824aad
SHA256: 2d64411b1f1d856eb7e41ff9b3b8d4c643aa8f0a6580f73561dc900d9e91345e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998539.malay
binary
MD5: cd3f67142fa9f964e3b11a1d168f3928
SHA256: cb6ed08aa92b39c199ec3a9c9e7d4580f6680ac53e884ab8c884838394210299
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998538.polish
binary
MD5: 70bcfd32243614ff7bca396e3500251f
SHA256: 6782afb9907f9f01bdf30e428b15cd73554f6b2b9314ee9a5c82aa6ad9bd5c0c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998537.malay
binary
MD5: 685909cfc42fda4266f008d35840fe6a
SHA256: 6731d45b947238e89d54bb1a963b2c566f059cab66094d398ec2fb9d4959cc4c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998538.japanese
binary
MD5: 662b5dbb6f8a0b2362c3f40bedc76c2e
SHA256: b819529298c04327d7a2846c083d61ece987a5412f151a71573976a859da8232
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998536.indonesian
binary
MD5: e14b38e90baa07d9aa05e9e2e3e40a98
SHA256: de13e1229483371b5a1aa3d69ede6a7812f2c03379778f7e22345985b883faf1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998535.italian
binary
MD5: e3a5dcad902efaf0a7728b44d85b48d9
SHA256: cc90de30e2d20b6e97b919b9e0b32f515f68de6240cb46793f844d6f4aff9676
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998539.portuguese
binary
MD5: bb3a404af6b228c9c6596e36b465042e
SHA256: e2785e969d15c989d5d4d3970f5d1b21acfc7c6a5f8c1214ed589e79d1eec3ce
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998534.hebrew
binary
MD5: 9bc3ca53efc0f7d2dff95a0ee6c05922
SHA256: 97d426b23ee7e2cbd399f0fd19bd782aef143b8b21b5a6d45c695bf2ad1f0481
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998529.czech
binary
MD5: 12ea6c1c10430db3f6ad6b30eef2f0ea
SHA256: dcf458c298d84b698525e90400f9fa7a0e86e9f6bc2c3da6d1e71dbae68ff752
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998527.chinese (simplified)
binary
MD5: 073c01002d2f786cb61e7a3abb60e29f
SHA256: 48e78b4dcac754fa90bb6f1220724adb3cf1b65811d5b9ee8764d1bcec6629b9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998531.french
binary
MD5: c0d2f95aa593d502db3f4d648a132797
SHA256: f12697b3a734bdbc780dfe1ef70275c9a6c9d8cafedcf71669b13e6e2001409a
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998532.german
binary
MD5: 807d063a0d328ad4874d7a4023b649c4
SHA256: 170418282f44b045fb7e5592ce71e5ba001838f2d2079a503b91988822fa53b7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998530.english
binary
MD5: 524c78f479ef20def002e73d5b9011b9
SHA256: 08fb7ac219ec6f21c39e6c7b3f38f61b0d8a3f2929a78354bc014944400e0d03
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998528.chinese (traditional)
binary
MD5: 0fc3bec4b170e9058b217a660a9fdb43
SHA256: aacf761ab07517b8308a90d50a506799a2e8d91b9001307f1ed48d3ee5fd92c7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998526.bulgarian
binary
MD5: 181948d3d5d2ac343aa42cef2de85f1a
SHA256: 51ed1f6b5b9aaf2a867df2fa8fcc7e7d2e7f64d609cf09786cde71fecc6a68ba
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998522.turkish
binary
MD5: d29ec787382c445d3d394a6536786f03
SHA256: b9ec23a4f139286f963d1691417ee6b9632d1d94db4e4286f45041872da1837e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998520.tajik
binary
MD5: 321d760202f36d8d85bbe48c537307c4
SHA256: 26107e11343bb43cc931ef4f00c15f806fe5377b999502c53dc67119696f2974
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998521.thai
binary
MD5: 7c6b80b1c7b91213ee79cf158c7e6c18
SHA256: 4d5eb3d1c42ff0dc6c0a523cb5ff44a95934d89ec6b252df589575b97516ca1a
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998525.arabic
binary
MD5: 65ad6b93c3fceaca39c4036e978c9a8c
SHA256: 2823f69549c985cebbd652b28ec387bab2f13250a06cfad46d37f8f5f0f7e0b5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998519.spanish
binary
MD5: d3f684851648d9846f64dad71a8b60f1
SHA256: 4bc032a8a5deee51935a2c309d417b60ceb029f40335e9ac7074c75ac04f5099
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998524.vietnamese
binary
MD5: 4a7657694e8212bebc80d6b2fc993ff5
SHA256: a129eab448f80c779834e69b0c90f8dd457bf38a21382906065e8d6a21d3da4c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998523.uzbek
binary
MD5: 74bea72b940e59a01a06d96013610c7d
SHA256: 6e9a062e9b9edcec71e3236858500229d2446a93479e68b485760fe1da16ee04
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998518.slovenian
binary
MD5: d47b36a6971e222d1de1ec96a4662b51
SHA256: 5246364335d3a64dbd3b9b438145e8ba98589a3fe02933ec5dcb3c98cab8a22f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998506.french
binary
MD5: 0933f64914d5f6c063416d15b575a760
SHA256: 28ba9d3e1007b721fd6bcace906a01a7d341499e8f95479d636812bc89f67db2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998516.portuguese
binary
MD5: 4d7c74cc2fc9083de842b57337947a57
SHA256: 6e41dd72fb822cb1daddfaad3d583ca8cd67f6796b304a6c4e248d5615e62d6f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998510.hungarian
binary
MD5: 830b9ea4666045338bb1e5a11b906b03
SHA256: 028edc7d34e063a6cb670a7954aac5f35d37a2725a8493a0191cd41adbf74799
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998517.russian
binary
MD5: 57dc121fba7311c6aacc189f609c03bf
SHA256: b7c027c88144fc3a996f8c3f6c0d3d2ea163ed331ac821d9e4fe777834d4fdaf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998514.malay
binary
MD5: c033dc470d1fb64443398f69f1000ff3
SHA256: 0edc4129cb2739f8934f86046a3e7595b36660be3f6a6054aaac25e46a596d70
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998511.indonesian
binary
MD5: a86f2422fdfcf246a27161dea1836975
SHA256: c2264c449b82cfd923cd842f55491c6c4a7a331dc76a2e96b7d58f2e1c21d809
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998515.polish
binary
MD5: f520e894a235cc409b1645e8f02417dc
SHA256: 9482c866a5931ca8b02b86c317bd66b3fd2107579e744c7f726b13fbe462499c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998507.german
binary
MD5: f4cc6248af51308fbfdd2ea82ca0820f
SHA256: b6133c51b992e09449956d3d30b558affa125e95b89e843aa57d6f14995f8fbd
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998513.japanese
binary
MD5: 4c767a502ec4c24094552ebc855f34e6
SHA256: 5fdb1b3152025a3f608580666c8b79d871a8e87ef706e8dc519d80b92ca0482f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998504.czech
binary
MD5: 66c8d97752ed739d9ca778c24cae6639
SHA256: ed140f38ce2cf558da8cf997cb9dbc3f08ab3948ee963ba6ab47b2244b2e2920
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998512.italian
binary
MD5: ec4aca9059fb987b176535d8a3531954
SHA256: 7b0923eee7abdde6aba4ce924e54721addb2f6de80e4af6de6b7b17a155180e9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998505.english
binary
MD5: f043ad43d927596b14595c13925a43d1
SHA256: a919d2de88ac09b5d173a3a5ad2624b4a829bee5ee4839d3e8f6db95911ba479
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998509.hebrew
binary
MD5: b07eb8024575e79d462ac76332ee4154
SHA256: 15ce8089845d3cb3d6ca6eea237986af34f96e1beb0c9c30908211e8ea87ff3c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998508.greek
binary
MD5: 374ee17a1e37102e8216f139d68c2b60
SHA256: e81263f5b00917dfef04941a2c55efd8edcb6df8f0b545ec4de980207157afa2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998500.arabic
binary
MD5: d497d887c4b2283b7269f0ee6730144c
SHA256: c0fefe50c2253ab50129b137e842ad10e7ec9d9dac33c4f1a92a8887c55f4667
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998503.chinese (traditional)
binary
MD5: 26f442bb2256241ed0da5e9e7f4ad3e8
SHA256: a7f3e23023838f7adb948dee3cff1c0347a1f3f2ff7a24305eca5d50b22c892e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998491.portuguese
ini
MD5: b2900ea74767b8b3d5aaf26fea7cafa9
SHA256: 8fe79a3a6cf179ff7815ba29693e80ed0942453d8855d353639428fd90cfcae5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998493.slovenian
binary
MD5: bbbda8152a51badd0803b1b38c971d17
SHA256: df8cccffd34adce80800e22a91a0e70aceaa4c3bc00a963bfaba1ef28b117c1b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998495.tajik
binary
MD5: e538e0dfc7abc22bdad0297af7b05dde
SHA256: 4fc680cc2c7c0180b76265817feffb150026218346856311c33a1c21e28440b6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998498.uzbek
binary
MD5: 14a6c59c638a4eae3968a8009679c43b
SHA256: b3718e52049fd62d851eaf0216d503d427c12694135f7aad95b459d9f02e4f56
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998497.turkish
binary
MD5: 4afb2e77c581b6180aca614645541779
SHA256: 2fb63cae131eee6565d977bdbe027d903709491c3f20b0767d210042188b1554
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998502.chinese (simplified)
binary
MD5: 6896873991fa79f52db0d249dc23016b
SHA256: d4af277062bd1e12589ce46eed6bcdfb0c058e33f49646e32131dd104b3ea8e9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998501.bulgarian
binary
MD5: a75567124b33adf47d55bafade32f538
SHA256: c50396675d9155d26dde9b12862ae122ebc11d943231895435cdc694a698f66a
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998499.vietnamese
binary
MD5: d15ad4bd602da8178c7e817221cf0d51
SHA256: b400758cf861120ccf6dab9871a93f69d32d955f14e2a7f4b0b58353cd55d4d4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998496.thai
binary
MD5: 11e68ea172e5ef574e2dc250759d3a58
SHA256: 9cb36fd8b3f675eebaf32c261d54b35a98db96645bded6ca17f0359a7171f559
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998494.spanish
binary
MD5: 82647d78d037af28259a34f35b0e3d76
SHA256: b154f5a9553a2a020c5c381367642534bf12dd8e2923ff4a141f49951bde64cb
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998492.russian
binary
MD5: 3f9fa19c238141c66b978f3191db591c
SHA256: cc3c41e828f0e09ab0efc24b8811f439706e2094d76c70a47c672d981b124bdc
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998490.polish
binary
MD5: 9ddbfa21962a3a56bcc9e063505ab890
SHA256: d306b69eef0d2fa48743c12e4f20d25b1e90ba88472e3d8b9d6a1762cb50a186
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998483.greek
binary
MD5: ce05b1fc790f6dae8778822bfdd8e5d5
SHA256: b0e99660540fbe6cf6cceaacb0d22d34ed6766380271a7848f7784b4ddee9e19
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998488.japanese
binary
MD5: 6f8f3296d43fd229a527281f9b4e7962
SHA256: 79db35e0d534d9dc21558c901a54298783057888439748e41166b737cfc792fe
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998487.italian
binary
MD5: 4aa55e01f430a13ac1ab8d5b34ba21f1
SHA256: 11cf2f7e8eb03ad00ed337a937289e7ce2dfdc9456b2f28ae4853d6ef3d4c8a1
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998489.malay
binary
MD5: 6a0e926f2ff1eb9738b5c66520a1d9e4
SHA256: 03a427e04c3285ac305f4b2aa75a363eeeb5c45186424236de907a437093ea7e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998484.hebrew
binary
MD5: a61bbb4ba96eb975aeb4a1c535008bff
SHA256: 5d89ec2125605dadb627245a21939e06cc5cd3d0b74795cd10546ee4c3f767a4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998485.hungarian
binary
MD5: 02ade2daeecaa508a33fb10f22cfdc9b
SHA256: 43dfd561ac9c25c8fc3520495bb2e9c54695b5aa8db07e550e5e622cf4324605
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998482.german
binary
MD5: 2877b731771343923b13c651b1449340
SHA256: 1e8e38b8d0c2544c247d0433250337802ac6b1bfaf0f1c4e68894eb6ff022f7b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998486.indonesian
binary
MD5: d7a7a9381a21340ad6b74b73af07275a
SHA256: 37ab8a44e07329ecba38855d31d4d9875882da3c4ef0ef93077f323a829bd758
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998479.czech
binary
MD5: 685504196a8943d1223bb1b13127ee7a
SHA256: b25c6216ac379d4a279ae049379298208df1004296452708964771ca2c606a5d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998474.vietnamese
binary
MD5: d8f3239f6c71a532ec6e324d99e436e7
SHA256: d4696101938c0d36e53af173c9054b999a70bc3a75493cbd11630995a78ab883
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998477.chinese (simplified)
binary
MD5: 2d9bc421d28ab8e23d22ac725af95063
SHA256: c9a03b070708a71ff5b62e39fb32682c5a0110dcb7e226f4a083c3a73e064f83
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998481.french
binary
MD5: b8c8e62daad0e3a5cd68d9f7eda2b5d7
SHA256: ddf8f8f49dfeac41da3b1c2baeafefd86801dd94d79cdbf29bd365e8879f9bc9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998475.arabic
binary
MD5: 796b354f554b1d634dabcc33f7126003
SHA256: 0022a1414e3ac22ecf34f51d2e7df0d19c44e2c2ad6c912ea622c5317495d65d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998476.bulgarian
binary
MD5: 0bd9dc5bd3f3059b3e73fa9e7f7fec06
SHA256: 45e3dbeb5febc304affbe6fbc3275969a555b07aad48e6cc4ffdb125443a17a2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998478.chinese (traditional)
binary
MD5: c8ad5474a5c41884a809dea6996338d4
SHA256: e933d9316d65f1c2301d30b59c65c5505bc19d3d05c7d97ebd569113aef7956c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998480.english
binary
MD5: d32ff72f9a6ab20bebbba20662d2745c
SHA256: 5bfb02a4fe0f88c69e2235bdd8a1faaa8a0449ecca6831e5c28a9c66deddbdaf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998460.hungarian
html
MD5: 17f072c1b0dc7211fb478b9c3e2a9177
SHA256: 735c1b8051f8b7b00459f7b27b9d186abfaa1ab6d47ab230e2f8f6ececd9a023
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998472.turkish
binary
MD5: ec93800c759366080b0e2ff3dc9b0f70
SHA256: 9bcf5f6bf58b9e7e5e1ea35c29d4d12a0354f5632e1ac7b72c7413252a6b0825
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998467.russian
binary
MD5: 0954f371ae72fe6771cac4c1028d89e6
SHA256: 08fab349dacf27ba40251d7ffb708f075f0f763f2b8cae81be3fb0d84642e37b
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998464.malay
binary
MD5: 7a27bceefe1272dfafa676d9acac0824
SHA256: e84761f44e6b60b9e497ffc10965732d5bfdb9b4fa8de5f49a81206b2a29ef05
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998461.indonesian
binary
MD5: de3e36c07c5220a2b77f8b4bf407bdd6
SHA256: 927bf724a8ca04ad6ef280dc5c7c121717eba1d14f788c704a82654e048d1f6c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998463.japanese
binary
MD5: b59147ad58c17221b19a37000d0695db
SHA256: 83e6281f98feb994e4116a32ed5107ac5fa5c5b71fa03e7788d4d90d2323e63f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998468.slovenian
binary
MD5: 3e0fb74b95d646d5fd073bb83b9e62e1
SHA256: f6a4b20328de8c5178d5c06f14dbb9b55b44527f88bf4546824f593e160e7e40
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998465.polish
binary
MD5: 755fb481796a6f84e1cf7780da8fb352
SHA256: 1958aa085eea7f587a8110908120941a29d0c2ebed4604fa910a80cb57e9d5f8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998470.tajik
binary
MD5: 0aebe91d1e053be64eb206eee72b741c
SHA256: a09be482e367dbf2ffc2872b989812fc144595561bf60664d4cad53139933bc4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998471.thai
bs
MD5: 5cc6c69ac646acfc1b3c21b17c633561
SHA256: 1c57e660456b7a3d9a0b3ac601b1416bbb92a53bc961ac9713b0027695a02e02
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998473.uzbek
binary
MD5: 0c426d1a37aa3ab6717da805f90cc4c9
SHA256: f906bdfaedee01026b436f9a459671e3e5966c09ac45a0009dd287bd6782ea07
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998469.spanish
binary
MD5: d8cbb6fefe127bb411683e9360e44a0e
SHA256: beba8bc4d16c4bc9c4e576301f86d4d93b98fbfc351b83315b12c09b943ebcda
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998466.portuguese
binary
MD5: d490b3f026c8c51a863ba74330c112b2
SHA256: 091935568e5e6dc7f854a9177af10879396c84c83e68f4ea50ee0eccbc47d3d2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998462.italian
vc
MD5: a82e3a13b482c5283ac4d3f4fd235ba2
SHA256: 294ecddd083134308dc9d657a6ebeec5c3443e41e606a3222033ea1a3179514e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998456.french
binary
MD5: 2ba594a12b613664642e36274b08228e
SHA256: e7b2f0ea463b7e4882535fe46f781a5f015401ff5c3d09b95e79fd383f86a72c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998459.hebrew
binary
MD5: ab08d299f74cdf6c6b4a5376d9b2f960
SHA256: 1b7171693a0200e778ce5e8004aec6fb5053a97b130ed8bdaf321cec277afa96
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998452.chinese (simplified)
binary
MD5: 70a7a197aa361bcf388fdda772b467b7
SHA256: 1ab437cd2a984f32f503577100f2d458339e7b1949e3f3e858a73f68e4e18547
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998451.bulgarian
binary
MD5: b073c7aa15e3220384d9db634d6e675b
SHA256: 47e2b0793d6a5780fd0b8d1f51fa20a2f3f171c8e5b22f7e2cc18c70138acda6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998455.english
binary
MD5: 15b6b32ad24f97e673672bf13aa537f2
SHA256: e49ca07e23751177b8d67374b3d1739eec94d8f49164eb85524f042b498230cf
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998454.czech
binary
MD5: b3d26b2c3fd159df014bb695c47c05c8
SHA256: 60550f465473c61d9901647a9aff7e1d5d6942d5d0269960c6bf00fd1d212824
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998458.greek
binary
MD5: fa75cfb37608f4dcf16a9d5785a526a5
SHA256: 39c4a6fb0679176a628d4390b9831aff861672593c2b3f567500300c9a62e106
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998453.chinese (traditional)
binary
MD5: 0a6f0f02e1757b1574bd14da1e9b73bd
SHA256: 2361ed08f3de05e85f5f31febcdf1356bd6352e5a5b7a7649461b1e547dfdcf9
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998450.arabic
binary
MD5: 1dfd055c1f2ac9d21e0c64c971a4b452
SHA256: 40863ae5d4b55f9332e281098d9754c4818713d04b9c1c5ae37ec49ea40d7dab
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998457.german
binary
MD5: 1ec3ab2ced6d5649cce37cdc3c164bac
SHA256: 5ffce936e0e2f95e58468196f309fd6af6da7983a3bae8a70bdf49c619fea251
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998446.thai
binary
MD5: 7c49b093e559262ea16593377ad0c9e2
SHA256: 425d7998d21391f552bc1a192c2c7a38e37a597e6907263a5c5824ff94c57a00
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998445.tajik
binary
MD5: 1e2c3a427c8c18fc240600969fea8b0d
SHA256: 141f2ec2a8455daff6928950ed63338723d6d0354ac9cbf705636f514e3d7484
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998449.vietnamese
binary
MD5: e08d5380854f04138d0eaa45bf77f62a
SHA256: 6dd2d70c1b0e23e36b1336d8265f1480bca257ee6c14567db744d99fb5ebb1b4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998447.turkish
binary
MD5: 918bab3059b943e4394bb301f794c117
SHA256: 0a6a49647ea9f4e5499ff6925a7a002d085b51aefece8ed91907490fe18a7f78
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998443.slovenian
binary
MD5: dce60fcd77555dd1256c28cbcfb955ce
SHA256: adf912bbe0eb4dcf1337b7c839640022da62d079a3540f051e3c629e5330072d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998441.portuguese
binary
MD5: fc04bb96377bdceb0356e6c39c34818a
SHA256: 85f028c981923035e77e9a5b8f6fcaa8c076ed5288a832b9828a9c863aa1838e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998442.russian
binary
MD5: 2812ce832c8ff83ef96cfe7a41007053
SHA256: 7cbf60db52780628ab698a78085da15d72ae60b794b24829230a410ed5edcd92
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998448.uzbek
binary
MD5: 4db4c9267f2610f964c00594b8786afd
SHA256: 0ad0cc862071622d5242f24fb68d1a2c3092c55f32d03c261821387297a0fb4f
2340
trade124setup.exe
C:\Users\admin\AppData\Local\Temp\Cab9A23.tmp
––
MD5:  ––
SHA256:  ––
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998430.english
binary
MD5: 1cad9159202ed3c8da6e10fb4f84c16f
SHA256: 65d8541cf73d57c029d3e4036b8c09145d3cbadf5b0bed6253510a9244e1da71
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998429.czech
binary
MD5: 33a8e8fa96ff8974765a5b33584e7d9a
SHA256: 2a7f4d48737e0854822876ba74e7180f86dff1fd855eb38209c56fe8914297e7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998439.malay
binary
MD5: de8b3f41889692c4bd6f3c9d1cdeb6a8
SHA256: 0c9c033a2e90e9157684cf8f0ae9f73bab6fd414f8330704fd1390971cba79d2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998431.french
binary
MD5: b7df50d5998f88a33c95f4f6203da215
SHA256: e8586ab3c64dc17198a135c033924d1b8022cd9d2545db42953dc5aa6c042f6c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998440.polish
binary
MD5: f9a4700acf3f1199c2f495e08d16da80
SHA256: 993858c8f05710302a0872af56d9731b059d6731c8acccbf1e68003270691a46
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998437.italian
binary
MD5: 91d39d738ec0f5395d4f2d86a13ff19c
SHA256: 643f8394eaa33cc1997263c5ee418eba8552e65e5bb094de0a8ace3a9b564cca
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998432.german
binary
MD5: 2f617e6beb5b53282f72c68415cfcb69
SHA256: 9304e0e8775a10a00a88055d72e07a43bfe13c165c379c3b9d76f1e4d9a45219
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998434.hebrew
binary
MD5: 441f55ac05b7c47cd7c1d076b48fd5c8
SHA256: 4ba1c3811f2864fdcb8bf241d01fde792fcd57e1d8688250e4ad50e5ff1583a8
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998433.greek
binary
MD5: 1c375156c2d44a89529f18568a9aa33a
SHA256: 4dc1dd439ad59ce18f2c8aaa7d5f42cbed7d3c2aea57553b3b224f1eea46ef29
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998438.japanese
binary
MD5: 008aa08466cfc6f2e2e0e628d149c1a8
SHA256: 4b0bcb22f7466cc029cb9bd07e5c482c77a407cfa8d36b12d789b5cfa1570cf2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998435.hungarian
binary
MD5: 9776f5c7b1c4bc758879b0fc72d7713e
SHA256: 91b30fb13e2257bff1161599be2bacbf8ff1a85dd1fc5b49526d66feea7e45cd
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998436.indonesian
binary
MD5: 2984a875e0dcc7e095a8bfbaa75ba9fa
SHA256: 9edab05c61d7bc345c32b5c489d9bb0e9e8847e48d240e8ed65d99c6bf4ad7ad
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998426.bulgarian
binary
MD5: f3b3b39d31605892b52d1cc654d59985
SHA256: 7cdeb1cc2941cdca00a6e42b76499dce42f6df72e80bf75551a1c5c4881330e2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998420.tajik
binary
MD5: 62e06e4c23985f562ed112c6d129cdb4
SHA256: e6a8ece38be6471053432ae9379432dbe4894158c5f0bfa0db491aa20cb6aac7
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998425.arabic
binary
MD5: 61643ddae28cd1267fa364d0616170c3
SHA256: 5f07571f925d8d4e146bc7dcaafd675c8cb6aa6daa3e9cfe628d984fb81f3200
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998415.polish
binary
MD5: ae8de958b9417c1799519318f1ddd485
SHA256: 499fb3f8ef7c2761ce2c1ac5e87c9b06252058c25897b5ae97814d43c3bf616e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998416.portuguese
binary
MD5: 82c41eee332eafb83e6fb0c2c8f674a4
SHA256: e1d403becf4e6f9921a103d72685eec10bca2b9b9186ff6421756f04fb1a15d5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998421.thai
binary
MD5: 547c427764f36ace4e5d15d2e2eaed9d
SHA256: 859b2a4eb2af7052f01cda5f817064d4e14036484eaaa326a34d10f627387530
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998417.russian
binary
MD5: 704607223d1014305e6c095245ef446f
SHA256: 4b53b57c9fa26574ba30ebe6ffc30b8cb84da3338207a436373590a953cfe323
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998418.slovenian
binary
MD5: 6b4febc6877cef5526a374780a607b13
SHA256: 5412aa69b1ee7b6012984de83737c68e03562054c2646c15d961d2d90daeb24c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998427.chinese (simplified)
binary
MD5: 42c66c25f334a098c7b79b4e11f2d5d3
SHA256: 8b19cd72367e31c4ef6aa1dc3ebe5896caf6b3e04465b6ae6410a3521bb1c733
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998419.spanish
binary
MD5: db4a58133fe2a47af3ede31225a2f732
SHA256: 809c0252b376ef7aad6bc3a90fbe141cc6a7c81c4143cdd7e2150fb6c22fa818
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998428.chinese (traditional)
binary
MD5: c77eafc99c885a322c482971352ca9ed
SHA256: 5652eb2eb035cd03654a1b7bb6ea4f6d2073f6920e26123d17fe7c4fb6393766
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998422.turkish
binary
MD5: 668534ebbcd4005c9862cb82ea84c168
SHA256: 69762b22ccdbb21d757b8e217e4491eb54b5f9280132cc3cb28b07bdda950c93
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998423.uzbek
binary
MD5: b59fc776200856b3f5a925296ac04d5b
SHA256: 16435483789984085b7e2a768407e7f9144146343f36f30307c4e5f982a82275
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998424.vietnamese
binary
MD5: 2faa74558431091ec0f3163a10bef074
SHA256: f7e606f18f8d0befafc821caa83374f2e3fc95ead33c03bc1e411301443c9281
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998410.hungarian
pcx
MD5: 5cd315427035674098464128ae5b7b33
SHA256: 5887c32fc8eef1bd2b8cb0601144ddcaa33d10b1135c5578ee398f0149b7e690
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998412.italian
binary
MD5: d00b7073a2084c6c3433115d292bb85a
SHA256: 14cf9b6a4891defa6f4110c44838e8cb1cc82b84789d3b33a5c94fdff78a1d6c
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998407.german
binary
MD5: c8d389b12545ed7cb181bfe601b2c117
SHA256: 4355a5978d2e64b992e1740b11c43ed2c4dd308bbc88db6a461e805f4630c3dd
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998413.japanese
binary
MD5: c53035942e66cc96c524da8ac9679678
SHA256: 8c2ff9b72e09519a7c734b7fba03a44adb2bf5ebe7b4ac343cb7b7ce9cf79297
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998411.indonesian
binary
MD5: 9d92b80a7eddb57c875314de903cea90
SHA256: 69ae363cbf8e2c63613622dca3802bc0b45715327c53738acf06b3e165c0a55f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998408.greek
binary
MD5: 7fd658751eee738b8ff3a1a2038f44f4
SHA256: 7c7e8d8300334459ddcc4eb85b4e365f37ac789dee93823b2db498a6f246bb53
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998414.malay
binary
MD5: 5f6811812587fab3996e487ed7aaabb9
SHA256: 26e1d6749e777b30dddc9f0d612ab245b6afd660d11c184b443e3789bd15446f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998409.hebrew
binary
MD5: 216b044501f170e58ec5cb6b30cd938e
SHA256: d5de051cd44903b1bc85cbc8440f3e16994f577a3b2457fe31d1f34b9de5ef27
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\symbolsets\forexall.set
text
MD5: ac067b7421b35e9844e0136e872fd201
SHA256: be33e4f4450d384c2378a36b86d38a8189c44b4ce55f3bf518fecbd19e8863a5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998404.czech
binary
MD5: 2a4a15f387dd31f20019540f2523b082
SHA256: f0c4b73596f2f0882da6c8978e925b3707e83fe80c23abfd809723160969e2b2
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998402.chinese (simplified)
binary
MD5: 942079e1ce0afe08ae49d33fe746ff7e
SHA256: 1a14b08ec232e11ad3aa0a45ad9fa34543a52bb96ebeaf57494877e7d9dccbe4
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998400.arabic
binary
MD5: 3cdccad7dae6ba83604c2c1b9de68fca
SHA256: 848cd1e91fb14a990695e3fd8a9873b1c33666f55c32aa907b26908e71143f9f
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998401.bulgarian
binary
MD5: 71ef4e8b97e6b7924e7d79bbdf85c375
SHA256: b9ad7b79371fc7b2521315910fe7222c5149264e0226be6526d24244f964138d
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\symbolsets\forex.set
text
MD5: 624342a0882c87fadd1447519017c519
SHA256: 8128778587634b4d8fd45b17029a8b600de6f9b1cf0fba9d03d8f69e0c337806
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998405.english
pgc
MD5: 4c69e7c1cd1fc20dd5f68b01e887aefb
SHA256: ea2c2cca809955e97799105d98fcde5656a26ea47f83bedbf9fcb726c4365746
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998403.chinese (traditional)
dbf
MD5: 57bbad93e51893016c3a904eb443c219
SHA256: 32c231d7d83e113650b8b202be8ccb8c6bc4288b559a9e3055f9e15f66bc8cc3
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\mailbox\1356998406.french
binary
MD5: 963b85929973aecb4e96700363e54014
SHA256: c3092ec57d51f8485de10ead7f72800fb9afa712d6a180fd4e313a8de72f3dc5
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\symbols.sel
binary
MD5: a04efdff9789f83477813f182a201f63
SHA256: 2bd5156bf4e9a9e25a21f5045b8034fb9700079114c9f648f211e093d1e6a88e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\EURUSD240.hst
binary
MD5: 0e99c7c88062c0c789b32114f53dd8f3
SHA256: 7fa181a16da476de554a4f61a30a3fa8a1128151082cffe958327ca525943fc6
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\USDJPY240.hst
binary
MD5: 636aaea02f7c0dc5f118006b513b8eb2
SHA256: f8cc9dc0ab2f8b54a0f95ada3f0bacda522522c8ee8288abb8dd64c9a7c5990e
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\GBPUSD240.hst
binary
MD5: 1883c6a300205c1bf53035f7bf419bc0
SHA256: b293a98e2bbf3746e87870c57f0f5bfea2aba52bcc70270ed6ddb22a448f618a
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\USDCHF240.hst
binary
MD5: 9dfc8aa8992c0cfb3c0814d0ab6aef2b
SHA256: b4f3a09bc1e4246c87dd3bb53a942d7ba87e60955562872191b135eea4f52c27
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\symbols.raw
binary
MD5: c995d35d802dd67519c5ab906a705187
SHA256: 6c297768b98217333bbfdbe3109d7825f7e7b3af6d40dcd9282d042649975982
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\history\default\symgroups.raw
binary
MD5: 3038c31b38bc8ae5997c5dafc3cb9656
SHA256: 697ee540318f56c6989007cfa2730b4528ae5e06cfc3c878dcce98ca21515cee
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\Trade12-Primary.srv
binary
MD5: 23b1d9959a9a3fc45acbb88aef150fe2
SHA256: 8f0451304710e3e0b88514bc849dc3e1580161b0eba35a3f1116730d86e2ec67
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\Trade12-Demo.srv
binary
MD5: 140fccb350e5a1858499a775fbe60a59
SHA256: c325eb4d130a4a50b76143f2604a72db113fffeba2d9aa51849cbf14c7633f12
2452
terminal.exe
C:\Users\admin\AppData\Roaming\MetaQuotes\Terminal\E000F5C313010FBCD08655E1FF3C3CFF\config\terminal.ini
text
MD5: da3fdc4ac3a86b9e2b577d20b4671da1
SHA256: 1416cd862425a3d11eed28bae3950b3cdca9983511a85b2b2a588dc8ff82afa0
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\ui_icons9[1].png
image
MD5: 302c16f515cb38eeb7eeb216aa501b34
SHA256: 507f3614c9d62d9ab21e8e46e944fdb3d5e3c0ebff739154cbaf18e0a0810910
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\favicon[1].ico
image
MD5: 9bde575d7329afcd0fe97dce371bdb9c
SHA256: a153cbad0a44cd602a9704883551076885c920fb1b5195eb715bc74ac933a124
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\fbevents[1].js
text
MD5: f2f3fc1ed61ef87e70f034486dd1e969
SHA256: 6bb981959d783d83df88b9aa48738948c9a8a22c1a31b8cb5305d3e338ebf9a7
3952
iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\PrivacIE\index.dat
dat
MD5: c1f462dc83a8cdc77f1dc24cae7d0c11
SHA256: a138d6f752dbc55d62db0e36819d2ae8dba1ecf57c34c5da53f90cbed9529f43
3952
iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt
text
MD5: 78a78d773bc1923524edd08bbaac8c24
SHA256: ac15605822e81258efa07e37a8fd5de225a67559050dc657e4cedc937fa46574
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\FNW6WC0E\www.mql5[1].xml
text
MD5: 6a3ddda177f5f93b9d9c245e56c1cfa5
SHA256: bb9a57a939dffdb3bff666e1a1b1d7538b3c8ea83cc164e8d6865a6942c0f84b
3952
iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt
text
MD5: 52f7b1379db122dee0ec6eeddba174d1
SHA256: 0a163c9d3bbe135696ffd2a7a60fac95faa1e08985feffe1bc76409441e735a4
3952
iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][2].txt
––
MD5:  ––
SHA256:  ––
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\signals-icons7[1].png
image
MD5: b28b62099cba4e873b55e3b26ff71612
SHA256: 6ab2f622eff279690acde16e8dad8495e5042302977ada3f684245901c116127
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\freelance_avatar_bgs[1].png
image
MD5: 5a188e6a0b7adbc79ebd9df495d086e1
SHA256: 6f04df16b6b5d1d5af857c62815cfa26deec91d7ca2c14d7d17fa40ffd195e4a
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\ico_footer_desktop2[1].png
image
MD5: 7ee5c7ef86d8d737851af4c9769ef2ac
SHA256: 1784de6f90a13ded43597d66a4057786395b4d0d7831c3e763743b9e5bb101d9
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
dat
MD5: 6623c6084ea2c76662d951e02ad7d8e0
SHA256: 99ce6e3b69543179dc0aebacb3f72ae4c2420d9f9340c3cb556488ee44535710
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\ico_notifications2[1].png
image
MD5: 6b016ffa6fe9a08de64dfaa496d6af45
SHA256: c634f762e00307cfeaf371d9c8bf983d6129e98852633f64e74012502d234110
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\ico_block2[1].png
image
MD5: a187771eb995ea9d31381fab6de321fd
SHA256: d535e936337db42621ffd13df4ec4427f89b59e753cf1b9deb937c4fbc09c32e
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\ico_flags[1].png
image
MD5: 73602de498740b775344ed108a57d4cc
SHA256: 476bd37da98f8047171a060ae06362d89309964247b728fe98470154a1b861ab
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\ico_header_profile[1].png
image
MD5: af1cf02463949cf79ea57fd468e02fd3
SHA256: 5260d880652f0f382211773ff90d7c0b74eb4e4363699c168f3f18d1d8644f4f
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\button_gradient2[1].png
image
MD5: 78359653d702217566e71b0bbf066d7f
SHA256: 4eef253bd71de6f0f48d63b0a57fe459557fafb3465c17d08a1fabce1cdf23fb
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\logo_mql5-2[1].png
image
MD5: 729f11426a3131c03b3fed2d617eda87
SHA256: 10c06b1807ebf4f5ab847aa336d2dbb6a6ca3d1671896c128ddf0bd34ad2d293
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\aw-recovery-system-logo-60x60-7510[1].png
image
MD5: e002821b90f8c7afd837c91e011765d0
SHA256: 1cfa046d5f89f21e8be09f9460339519a350d85836fbf4a8c0603820d5a3ee6e
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\price-action-diver-power-logo-60x60-7575[1].png
image
MD5: 8ddf60d0e42fdc0bf2a82ce9b92fe377
SHA256: e4d1b1cdaa9d3febae3c7fa647d25f77ad4f9102556e1d2d7a3a50a9feda079c
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\bruces-price-predictor-logo-60x60-5296[1].png
image
MD5: 458c5bcb58c4742cffff7a1c8c01c6e5
SHA256: 49c1a9561cb7bf91d97b99c358e87bcc82748ca948c5aea4cf8f1876a5c99aea
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\scalping-pro-mt4-indicator-logo-60x60-9955[1].png
image
MD5: e98d4bd1e0bc68f20107fcbf12f180f7
SHA256: 93b983aa2fa8df2df6530a5d6a97b16e2c173c20fe507857b1944741abc8e684
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\max-mixed-hedging-dc-logo-60x60-7126[1].png
image
MD5: 5932078440ab20c56db8e1e1740659e4
SHA256: 612c58467f8b48a651e859b343b7c78662d150e6b95f67254ff20e554a5de535
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\price-info-panel-logo-60x60-2409[1].png
image
MD5: 9b41174e85f63e5f652a2a321e74e3ff
SHA256: 367fadbf826ae6cdd475b07f50695eb155895b4cc737e4a0a95d34b4e641e6b1
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\auto-format-logo-60x60-2955[1].png
image
MD5: 795f22619d906dc746db27f518255baf
SHA256: c9452b08d9d42e3a84b09d911641b5ccfce8a142a62fb35e384c8c04dbf30c51
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\neural-hunter-mt5-logo-60x60-4592[1].png
image
MD5: e4c11a820065661784550fc8927fd99c
SHA256: 86d4d1ba9825e9e1464dc259614552cd177f965e61ccead8193261ac9f8046dd
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\the-one-mt5-logo-60x60-2920[1].png
image
MD5: fd5ec30589ad14c1665e980948de9ad0
SHA256: b96994cc81073a3858635ad56cf125ca425a363456963c02a5992388aeeceec7
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\marketBig__7_60x60[1].png
image
MD5: ed0c537d9c5f484fff0c73d72848f443
SHA256: a6b9c35cfa017ec6e84f2d542796705b252a24d94d6af53b26d16a1164c416f0
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\MQL5_kohonen_trading[1].png
image
MD5: e03c456ba29cd9a8564cfd28a171d700
SHA256: 397d8cca4a883b4aeb066ae6721072bb214ad985e3289a798903461740de305a
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\Select_Symbols_Utility_MQL5__1[1].png
image
MD5: 6a93bbbd35759d3afd5accf16c9a8de5
SHA256: 36e722f2bb586c7f8a2a2e30cb3aa14692b0b093a3c9baa4a1fcdbcea6c6a111
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\MQL5_html_trade_analyse[1].png
image
MD5: 513b725805c3e2e292244dd3ea1cc11c
SHA256: b7ff936b789b5cfe033438827013957645c804239ffc1370be00962f604ad926
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\forexts.60[1].jpg
image
MD5: 551198269b351fb23411972a73156e75
SHA256: 6afce26278f0dec7f364da78cbed3faab1d76c865740112ac0e3e46abdb307bb
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\Correlation[1].png
image
MD5: 50487c37aa7191e7772b26e92f97f463
SHA256: 4600606a11eddb90686cd96c2a60bb360fcf0d885e5b36270ab3f9504a983652
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\HorizontalVolumesM0taTrader5[1].png
image
MD5: 7e3adc51aa33639f25f399690b4b34c9
SHA256: 93d9c6b490cc6351e939700a270080a72a4e279d015f28cab293a991ac32775f
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\mql5_avatar_martingale_osnova[1].png
image
MD5: 09a631fdb5994082cfa67a89e0eea3bc
SHA256: dd569c60d7de3e940ca9d6dd1e44d25c1fa4c916ff7cdaf7d0f747b4929cbb4f
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\5A05F017-AFFF[1].jpg
image
MD5: 6967dd294a6cee07c10aa0f71b04f88d
SHA256: 71b2737a7979a012dbbd790c4c5ab77f335a2135f7807564851ac49f6e8fdcd0
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\MQL5_kohonen_trading__1[1].png
image
MD5: e03c456ba29cd9a8564cfd28a171d700
SHA256: 397d8cca4a883b4aeb066ae6721072bb214ad985e3289a798903461740de305a
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\Pattern_I__2[1].png
image
MD5: ae758a6eaa0c3f3250d787e30063c76f
SHA256: 82042fc1d5098482d79150c8e2d921e09a8c515b6ea0e9bd643be57b6011dd7d
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\family-eco[1].png
image
MD5: 5b08b40bdfc9c9a283cc121faf3d0e2e
SHA256: e651f2dbd8c4d7f83cb3bb6838bb73675990a45e20105c5a5d9b8defa08e5534
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\MQL5-avatar-zigzag_head[1].png
image
MD5: 45c833ec1987d2b2c0f57ead27b600d1
SHA256: 1b1b3bf813139d7668ab294c435ad71dcc504ea45cd53a9c0f986ef36cb22d59
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\54CCE5B1-18E2[1].jpg
image
MD5: 25356e275e46bb59990cf093450e96d4
SHA256: a7a62c4a8c19165cfa070d3b3f41869ca1b189407c007be95878cbbb125c0055
3952
iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\50D09349-3D90[1].jpg
image
MD5: b63c34cf4c8b0fe3c0d4b8e1f5ebdf06
SHA256: 98a72a0ae119e5d212e6d94ac7d1228f37b107225226b0e91845d049a0923c8f
3952
iexplore.exe