home

hfmarkets4multisetup.exe

Setup

MetaQuotes Software Corp.

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program HotForex MetaTrader MultiTerminal by MetaQuotes Software Corp.. The file has been seen being downloaded from static.hfmarkets.com and multiple other hosts.
Publisher:
MetaQuotes Software Corp.  (signed and verified)

Product:
Setup

Version:
5.0.0.933

MD5:
04232ed951826b89c09b7393bde4d7fd

SHA-1:
cf2384f4c476b11c2517e9aa0ea3c02796010d77

SHA-256:
f8a177fa4cc367aa86b5a4c0134cd935066c7a68cc027939ad2f5dbf52e86045

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/29/2025 5:59:16 PM UTC  (today)

File size:
497.6 KB (509,576 bytes)

Product version:
5.0.0.933

Copyright:
© 2001-2014, MetaQuotes Software Corp.

Trademarks:
MetaTrader

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hfmarkets4multisetup.exe

Digital Signature
Signed by:
MetaQuotes Software Corp.

Authority:
COMODO CA Limited

Valid from:
1/23/2014 3:30:00 AM

Valid to:
1/23/2017 3:29:59 AM

Subject:
CN=MetaQuotes Software Corp., O=MetaQuotes Software Corp., STREET=28 Parliament street, L=Nassau, S=none, PostalCode=none, C=BS

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6324EFF48E7850635D538AAFF2D614C4

File PE Metadata
Compilation timestamp:
4/28/2014 1:08:19 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:elJpyoFydCXO3fEL4PhnX8bwCtkZSqkM265Ne:ZyAlPEL4pX+vM29

Entry address:
0x126A20

Entry point:
60, BE, 00, 10, 4F, 00, 8D, BE, 00, 00, F1, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.4845

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
216 KB (221,184 bytes)

Program Uninstaller
Program name:
HotForex MetaTrader MultiTerminal

Display publisher:
MetaQuotes Software Corp.

Display version:
4.00

Uninstall string:
C:\Program Files (x86)\HotForex MetaTrader MultiTerminal\uninstall.exe


The file hfmarkets4multisetup.exe has been seen being distributed by the following 2 URLs.

https://static.hfmarkets.com/assets/common/.../hfmarkets4multisetup.exe

https://static.hotforex.com/assets/common/.../hfmarkets4multisetup.exe

Scan hfmarkets4multisetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.