home

3d issue hotfolder.exe

3D Issue HotFolder

Trinity Innovations LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘APP_HOTFOLDER’.
Publisher:
Trinity Innovations  (signed by Trinity Innovations LTD)

Product:
3D Issue HotFolder

Version:
7, 1, 4, 0

MD5:
31095c3943b9b0bf77ae4d31a80d98df

SHA-1:
f4430fd4a70df201afd68667082a49ccf7cc0b02

SHA-256:
1c265791d552937d0b129b78689f47310c12e7b30fe68abb14f00b0c25e57ff0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:05:07 PM UTC  (a few moments ago)

File size:
9.3 MB (9,800,928 bytes)

Product version:
7, 1, 4, 0

Copyright:
Copyright (C) 2015, Trinity Innovations, www.3dissue.com

Original file name:
Hotfolder.exe

File type:
Executable application (Win32 EXE)

Language:
English (Ireland)

Common path:
C:\Program Files\3d issue 7.1\3d issue hotfolder.exe

Digital Signature
Signed by:
Trinity Innovations LTD

Authority:
COMODO CA Limited

Valid from:
7/2/2013 8:00:00 AM

Valid to:
7/3/2018 7:59:59 AM

Subject:
CN=Trinity Innovations LTD, OU=3D Issue, O=Trinity Innovations LTD, STREET=2 Deenystown, STREET=woodlands, L=Letterkenny, S=-, PostalCode=none, C=IE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
79121B44269FCEDA64317C33EE08EC6A

File PE Metadata
Compilation timestamp:
1/23/2015 11:23:15 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:3sOexnXbCsYAu6h47EF8+FFskMb6QwOsQASKDL2pvIvaG:BynXlYAu6h47Ot+6QwOsHWU

Entry address:
0x40B85D

Entry point:
E8, 06, 05, 00, 00, E9, 36, FD, FF, FF, 6A, 10, 68, 20, 1E, C8, 00, E8, 7D, 01, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 84, 01, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, C6, FB, FF, FF, C3, FF, 25, 9C, 73, 85, 00, FF, 25, A0, 73, 85, 00, 8B, FF, 55, 8B, EC...
 
[+]

Entropy:
6.8103

Code size:
4.3 MB (4,542,976 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
APP_HOTFOLDER

Command:
"C:\Program Files\3d issue 7.1\3d issue hotfolder.exe"


Scan 3d issue hotfolder.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.