home

glyphinstall.exe

Trion Worlds Inc.

This is a setup and installation application. This is installed with Glyph. The file has been seen being downloaded from analytics.trionworlds.com and multiple other hosts.
Publisher:
Trion Worlds Inc.  (signed and verified)

MD5:
8b2d84a1ab3f59d6da679839845ab0c9

SHA-1:
1748badc19c3191be54e16aaf3a52ba4e1053278

SHA-256:
27114490433545e5c1ff30af07b8a60a731d263cc43b934a7aebca023a9fce4a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:43:58 AM UTC  (today)

File size:
47.1 MB (49,361,376 bytes)

File type:
Executable application (Win32 EXE)

Language:
Greek (Greece)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\glyphinstall.exe

Digital Signature
Signed by:
Trion Worlds Inc.

Authority:
Entrust, Inc.

Valid from:
3/14/2016 9:34:53 AM

Valid to:
3/14/2017 10:04:50 AM

Subject:
CN=Trion Worlds Inc., O=Trion Worlds Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Entrust Code Signing CA - OVCS1, OU="(c) 2015 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US

Serial number:
772F5BEC92E26F36000000005565F6E7

File PE Metadata
Compilation timestamp:
4/13/2016 9:01:43 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
786432:zSA51rftEnO1ipobMthhEKw1/hc8RPOodTPs4//qYInCi3CCRPrwzQI3z:2AjrwJpo6hN6/hcSOodzsU/bzi3CCRqx

Entry address:
0x141CAD

Entry point:
E8, 55, 25, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, FF, 75, 0C, E8, 97, B6, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, 7B, F1, 00, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 98, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D6, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61, 70, FD...
 
[+]

Entropy:
7.9908  (probably packed)

Code size:
1.5 MB (1,556,992 bytes)

The file glyphinstall.exe has been discovered within the following program.

Glyph  by Trion Worlds, Inc.
glyph.trionworlds.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file glyphinstall.exe has been seen being distributed by the following 45 URLs.

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1461678051002&f=f9a2160bfd0ac6fbc44a6ae41ffd0d6e:2366118585&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://reactor.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=72EBFMNIPW7LYX6SRGVFMYAR7OYBPQIW

https://defiancepc.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=F1HOQUCQ3I0EQ7JUI029T74G3CY00HBM

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=AQMPMHTTB57VKNBKODM6FL0RT9DJWMEY

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461684217559&f=d331493740a04e2d56f2df5b5ab47c4d:3435548758&p=https://store.trionworlds.com/account/profile/manage-game!input.action?m=account_reg_email_verify_success_title&r=https://store.trionworlds.com/account/.../email-token!input.action&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461437387956&f=a6b908473c05d529d55fa0628f9f0dd6:3181150530&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=5NUZCPC7TGMYOFP1RRIYUT4O8W5CUU08

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461608291177&f=c889f396f5d118dfc99316884d6873bb:4113875036&p=https://store.trionworlds.com/account/profile/manage-game.action&r=https://.../login?service=https://store.trionworlds.com/j_spring_cas_security_check?spring-security-redirect=/account/account-summary-flow.action?m=reset_password_success&m=reset_password_success&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-8-131.exe

http://download.dyn.triongames.com/GlyphInstall-0-150.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=GR3VJFGXE893IJ8ZMF0ULYHDVI9QFD1D

https://archeage.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=BD42AJ3P8AY6ZJRH12U1WV96SPJV0T1J

http://download.dyn.triongames.com/GlyphInstall-1-131.exe

http://download.dyn.triongames.com/GlyphInstall-5-131.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461307603402&f=71938cb2d33d08ef3f034157244ef8b6:138716175&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1461764821196&f=ad24ed6736718343c81cb75cf94268cf:2006308517&p=https://trovelive.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461432500393&f=b17f2d7376f6194ed763f0e5ebbf1345:2677336921&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461260563546&f=29d102d4de3cd8d5e2db65b00d21d1eb:605601885&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://archeage.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=P029DU598EG910EDZTFZRBOT0N7ZZSSU

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=IAHMXOXCFNLFY3GCB9FCX09Y3WRN4VGV

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=PGTNGXTHBIFJRFEXVKZD8DC7652427NE

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1461383427770&f=1006a77b7a5a36247ceea430b31d8a87:67483929&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1461462862829&f=3b1af66a84321b0580c845bce02eced5:1889814872&p=https://store.trionworlds.com/account/.../manage-game.action&r=https://store.trionworlds.com/account/.../optional-security!input.action&k=UA-7947017-5

https://defiancepc.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=HL06EQ53F981OAFAX6QZO188DTL9K4PK

http://download.dyn.triongames.com/GlyphInstall-0-111.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=NA4KFC98VYQI193TRSN932A93GPGCMTW

http://download.dyn.triongames.com/GlyphInstall-9999-131.exe

https://rift.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=3O9AG0CNMVEOJB3IRLHKPID2FCP4BZN3

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=26CNQ7OF6PAK5NSTVOK8ZCLSGBISKV9A

https://trove.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=IECV061W2UE21HCVD2CTN8GC0HWPOBVS

Latest 30 of 45 download URLs

Scan glyphinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.