home

glyphinstall.exe

Trion Worlds Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from analytics.trionworlds.com and multiple other hosts.
Publisher:
Trion Worlds Inc.  (signed and verified)

MD5:
625064cc83c54e4b4a77914094c58135

SHA-1:
2911e3ed27a7a90f6a48ad0cfbcef4cda30e9e11

SHA-256:
430fb8434c6104d54a30600857b3407252c291a2f47bbd059bf9b1fbe485f4f6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:11:17 AM UTC  (today)

File size:
76.2 MB (79,849,952 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\glyphinstall.exe

Digital Signature
Signed by:
Trion Worlds Inc.

Authority:
Entrust, Inc.

Valid from:
3/14/2016 8:34:53 PM

Valid to:
3/14/2017 9:04:50 PM

Subject:
CN=Trion Worlds Inc., O=Trion Worlds Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Entrust Code Signing CA - OVCS1, OU="(c) 2015 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US

Serial number:
772F5BEC92E26F36000000005565F6E7

File PE Metadata
Compilation timestamp:
5/20/2016 5:26:34 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
1572864:dvfnZ13V9uW3MdF4eMFrW6IhIYaR0nvWYIaxyiXgeU1pdSAzSUbzsHDwKKzi3u/:dvfnvV9Qv4eIrRIhIbRovnIkyleU1Ht/

Entry address:
0x15BC71

Entry point:
E8, 6A, 40, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, FF, 75, 0C, E8, 53, B2, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, 7C, 07, 01, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 98, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D6, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61, 70, FD...
 
[+]

Code size:
1.6 MB (1,665,024 bytes)

The file glyphinstall.exe has been seen being distributed by the following 29 URLs.

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1464016348017&f=55b1266d0a80f424ff3da3ad06404a12:3548511181&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-14-160.exe

http://download.dyn.triongames.com/GlyphInstall-9-150.exe

http://download.dyn.triongames.com/GlyphInstall-9999-131.exe

http://download.dyn.triongames.com/GlyphInstall-470-131.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=FUFCLZ9AX97SLESYJII61QMGOLYK8YNH

http://download.dyn.triongames.com/GlyphInstall-80-131.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-160.exe&l=1464015948779&f=ae99f78f85340043f8e7b614c00f5789:3362379161&p=https://devilian.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-game.action&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=J2LWJVZ0O0UEKKYCGM2JHYJS420EZDQS

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1463781215144&f=f79a8800b9751d2bfedeac345b2876c5:140469100&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1463711290475&f=84e875a5c82aee4d36f2908617fec8af:3413531600&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?m=plat_accountSuccess_msg3&r=https://glyph.trionworlds.com/account/.../account-registration-flow.action?request_locale=de_DE&affiliateId=&comeBackToPageUrl=null&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-1-150.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=CNB9CRCD9932XCBPS3AQLUV8OTX4EIAE

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=IBYY4TMFKTFGHWSA9XZAQ8PKVKW1MMYY

http://download.dyn.triongames.com/GlyphInstall-7-150.exe

https://defiancepc.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=7QM4EHM66M0KZ71E3YLAA3HRW2CALHWG

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=GS7557XFXPXK85DRW70R3TFS12KRWLVV

http://download.dyn.triongames.com/GlyphInstall-89-120.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1463846413091&f=665cef2d7a566295629af53ebf502d39:1339154928&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../email-token!input.action&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-0-1.exe

http://download.dyn.triongames.com/GlyphInstall-0-111.exe

http://download.dyn.triongames.com/GlyphInstall-9999-111.exe

http://download.dyn.triongames.com/GlyphInstall-14-150.exe

http://download.dyn.triongames.com/GlyphInstall-468-131.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1464017684593&f=e5b8d4a2388b072dc64c880ebbff0f11:1030620617&p=https://trovelive.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe

http://download.dyn.triongames.com/GlyphInstall-0-131.exe

http://download.dyn.triongames.com/GlyphInstall-0-120.exe

http://download.dyn.triongames.com/GlyphInstall-0-150.exe

Scan glyphinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.