home

glyphinstall.exe

Trion Worlds Inc.

This is a setup and installation application. The file has been seen being downloaded from download.dyn.triongames.com and multiple other hosts.
Publisher:
Trion Worlds Inc.  (signed and verified)

MD5:
f32cddb73365e44958dfec39481ea6d7

SHA-1:
464bcf1156e9cc1a0743e2ae483735bd2d39b22c

SHA-256:
1993a1b150ff9dface78a4d40d87a7df37300eec9078dac7e38fb75264aac795

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:47:48 AM UTC  (today)

File size:
77.1 MB (80,834,016 bytes)

File type:
Executable application (Win32 EXE)

Language:
Greek (Greece)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\glyphinstall.exe

Digital Signature
Signed by:
Trion Worlds Inc.

Authority:
Entrust, Inc.

Valid from:
3/14/2016 8:34:53 AM

Valid to:
3/14/2017 9:04:50 AM

Subject:
CN=Trion Worlds Inc., O=Trion Worlds Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Entrust Code Signing CA - OVCS1, OU="(c) 2015 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US

Serial number:
772F5BEC92E26F36000000005565F6E7

File PE Metadata
Compilation timestamp:
6/15/2016 6:56:03 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
1572864:m94YmReSd1zWl7dApCVWX5IYjx/sFJgZ/xLwinSgfiXVb+2UEGeCH:q2d1zq2pwWJI6x/1Rx1iXc2U3eW

Entry address:
0x15BDE1

Entry point:
E8, DE, 40, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, FF, 75, 0C, E8, 53, B2, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, 7C, 07, 01, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 98, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D6, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61, 70, FD...
 
[+]

Entropy:
7.9961  (probably packed)

Code size:
1.6 MB (1,665,536 bytes)

The file glyphinstall.exe has been seen being distributed by the following 50 URLs.

http://download.dyn.triongames.com/GlyphInstall-9999-120.exe

http://glyph.net/download

https://devilian.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=OQIGAW1QN7MECHCDIZTA8CK2R6WZ4NSE

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-160.exe&l=1449239376764&f=2a89cccc8b187e0e51e3e545218355db:1085985488&p=https://devilian.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=1FCRCVCHZDYMBOBL1UF4NRDLWY7M4X9T

https://trove.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=GXQ239MRRCKB1GMZZWW2YZCLSS3L5V6J

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=D8QG80CNDLFVN19CNIOPPNU4MNB0LTSX

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=41KIO923LU3NBKQIQSBVPEQYN2SJ71RD

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-160.exe&l=1466406590767&f=7e45d9ea1fa3f0a9fa53e73e0a7aaa91:716492979&p=https://devilian.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-111.exe&l=1467288082418&f=b3e0533b661a7b2ad698fbb551e8667a:1161280137&p=https://defiancepc.trionworlds.com/account/profile/manage-game.action&r=https://defiancepc.trionworlds.com/account/.../email-token.action&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=4E2KEHLFPFU610J125MN3KH13U7XAIC0

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=2O92C6SMZSBKKSLDGDN9H8X4KMP6Y6JI

http://download.dyn.triongames.com/GlyphInstall-9999-150.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-111.exe&l=1467125554710&f=0ddfc71befb30c74da1eb275616b4917:3335526524&p=https://defiancepc.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-library.action&k=UA-7947017-5

https://trove.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=LJ2WCJUFWMU5QRS1J2WCK3C5FHUGQDGO

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1467799508415&f=1d23bc4a264a996e38ad19a84f537274:3531878037&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-0-111.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1467812892026&f=d6fb242704c467f90f78c28614b0e744:3035524015&p=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&r=&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=BOVYNNAQIHU54F2WTX5NPV8115A0DOHO

http://download.dyn.triongames.com/GlyphInstall-8-160.exe

https://devilian.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=LDBPBPCB000S6PF0O1Y6TVUBA3F12GBA

http://download.dyn.triongames.com/GlyphInstall-76-120.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=LVG597TG7GDVDP69MP2TRU7E8C3B7X0Z

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=P351VIGTT0REWQUD2LBPX40HFHPY2GR3

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1466303644941&f=4ec84a08738c898db6afd3d98096e09a:2132392780&p=https://archeage.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1466790625110&f=d52c6c7f43f2db711ec4f06c643c5763:3788794699&p=https://archeage.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://reactor.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=1HEH86AU7AZ3U2Q8T1P4YNR0PZAACV1P

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=O82OKUGSMNJKD2TS3IRXGGJ86RITPJOP

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=36BF34HMGGL1O33BW8YXKCPPL3HE3XLZ

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1466307953399&f=9144d5e49b697810a23b18afd6d153f8:395080137&p=https://archeage.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?m=plat_accountSuccess_msg3&k=UA-7947017-5

Latest 30 of 115 download URLs

Scan glyphinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.