home

4c644917760f41698bd4ceb5bf651da949a2d135

Trion Worlds Inc.

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
Trion Worlds Inc.  (signed and verified)

MD5:
e01fd8e56c7237102d9ac67d11c1d258

SHA-1:
1efd0cd7445aa68266d6663e222c4246e767c973

SHA-256:
ca20a06cc15f73a2adcdced1dbbc81f6f6f11b1ce4b586a6498b1359d0f82995

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 6:19:22 PM UTC  (today)

File size:
30.4 MB (31,846,296 bytes)

Language:
Greek (Greece)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\4c644917760f41698bd4ceb5bf651da949a2d135

Digital Signature
Signed by:
Trion Worlds Inc.

Authority:
Entrust, Inc.

Valid from:
7/7/2014 11:52:17 AM

Valid to:
7/10/2015 12:40:39 PM

Subject:
CN=Trion Worlds Inc., O=Trion Worlds Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C177EB6

File PE Metadata
Compilation timestamp:
4/22/2015 2:48:37 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:KGCMOlhCsoMuG43/xbpzcj+6HLhtlzoQXzfWCvK41VaeOK0g/1V/W9pyurH4bEwh:KHpCyuPA5HVQQXDvvtaDNy/Yj4gq3TP

Entry address:
0x13CA0A

Entry point:
E8, 28, 25, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, FF, 75, 0C, E8, 9A, B6, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, 4E, F1, 00, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 98, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D6, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61, 70, FD...
 
[+]

Entropy:
7.9806  (probably packed)

Code size:
1.5 MB (1,536,512 bytes)

Scan 4c644917760f41698bd4ceb5bf651da949a2d135 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.