home

glyphinstall.exe

Trion Worlds Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from download.dyn.triongames.com and multiple other hosts.
Publisher:
Trion Worlds Inc.  (signed and verified)

MD5:
21ec94bf11b5146d06b0af5a5ae364b8

SHA-1:
763308645eef566d87d5eef1eb7e09ff4164713a

SHA-256:
fe238df66f3a6cc543ef2bf531128e2138695c96c7e9076ad5cc6e0a046aa3e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 2:25:26 AM UTC  (today)

File size:
68.7 MB (72,056,288 bytes)

File type:
Executable application (Win32 EXE)

Language:
Greek (Greece)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\glyphinstall.exe

Digital Signature
Signed by:
Trion Worlds Inc.

Authority:
Entrust, Inc.

Valid from:
3/14/2016 4:34:53 PM

Valid to:
3/14/2017 5:04:50 PM

Subject:
CN=Trion Worlds Inc., O=Trion Worlds Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Entrust Code Signing CA - OVCS1, OU="(c) 2015 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US

Serial number:
772F5BEC92E26F36000000005565F6E7

File PE Metadata
Compilation timestamp:
7/6/2016 8:09:04 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
1572864:8BMoRyVgUmoEfXbdT5H4C0uD8Ydoe+2oAT7uivpFKQbe4a5:WDrUJEB5m0PNX05

Entry address:
0x15BF02

Entry point:
E8, DD, 40, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, FF, 75, 0C, E8, 52, B2, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, 7B, 07, 01, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 98, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D6, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61, 70, FD...
 
[+]

Entropy:
7.9952  (probably packed)

Code size:
1.6 MB (1,665,536 bytes)

The file glyphinstall.exe has been seen being distributed by the following 25 URLs.

http://download.dyn.triongames.com/GlyphInstall-0-160.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=QH7BDMA21PFGRAXAAZUETOT1TB5OY3U2

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=KTZV4KQ5NJJDRA5BELXLRNKC4Y1BPR53

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1467995583138&f=abe3a87e26a4c88f67aba9da3f96be84:1014231311&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1468464127735&f=c092ab0b1b243e21e112ca2c8a7e64e0:151319221&p=https://archeage.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://archeage.trionworlds.com/account/.../manage-game!input.action?m=plat_accountSuccess_msg3&k=UA-7947017-5

https://defiancepc.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=19RCK9QJ1D5FYLVPGG3NBGHMC5TVOWG

https://archeage.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=KFPONKTKE0X69529S0YAH17ULJIES6MU

http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1468042702841&f=8b8021a264da647d8a0eab519b181166:2446732294&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1468270556447&f=4fce27b5e7998552cbb0f7ee98f5f05b:2383386265&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-111.exe&l=1468476726072&f=9cf6b2a5cf2d46fda96de5dd979d773f:1204316317&p=https://defiancepc.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-library.action&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1468068436428&f=947436518ee1fbb19e7af81e0b9fbd85:3508007387&p=https://archeage.trionworlds.com/products/view-product?code=AA_ARCHEUM_ASCENSION_PACK&request_locale=fr_FR&r=https://archeage.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1468456218942&f=bd905b49f1c82827e5e24df09a109310:1907816275&p=https://archeage.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

http://glyph.dyn.triongames.com/glyph/.../GlyphInstall.exe

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=7ZQI47C392Q9T87406FV5BVO3BZDIK6B

https://archeage.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=JCMHCUWDQ3S49U44TLICXH7DDX6HVWZB

http://download.dyn.triongames.com/GlyphInstall-0-1.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1468015628382&f=7cff3ba98f1acc44d0124e4efcd0990f:2608605435&p=https://archeage.trionworlds.com/account/profile/manage-game.action&r=https://archeage.trionworlds.com/account/.../email-token!input.action&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=5ICST2A8KJPUF9VUVT6FB7G0J8B8ZOGT

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=22MY9XH322MS4V1OT3REYI1YTEL98B91

http://download.dyn.triongames.com/GlyphInstall-0-120.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1468001703294&f=0ad6b2c39f5ecfb3c37982f9f0eb107f:1243097945&p=https://store.trionworlds.com/.../profile/manage-game.action&r=https://session.trionworlds.com/login?service=https://store.trionworlds.com/j_spring_cas_security_check?spring-security-redirect=/.../account-summary-flow.action?m=reset_password_success&m=reset_password_success&k=UA-7947017-5

http://download.dyn.triongames.com/GlyphInstall-0-131.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1468427136003&f=bf6d92929d11936c7e61f8f49a17eed3:4187281729&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1468035096910&f=c84548e89e5b2f057f8cf3b1b0150f90:2886056781&p=https://trovelive.trionworlds.com/.../profile/manage-game.action&r=https://session.trionworlds.com/login?service=https://trovelive.trionworlds.com/j_spring_cas_security_check?spring-security-redirect=/.../account-summary-flow.action?m=reset_password_success&m=reset_password_success&k=UA-7947017-5

Scan glyphinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.