glyphinstall.exe

Trion Worlds Inc.

This is a setup and installation application. The file has been seen being downloaded from analytics.trionworlds.com and multiple other hosts.
Publisher:
Trion Worlds Inc.  (signed and verified)

MD5:
e99e42c95e139e0fdb65629e453cf85d

SHA-1:
7dc38e316e3123bd1bfcc906fef678a4c3b1995a

SHA-256:
2ae9d2425e19d4d955c236a7be0f2e7db2b5ca8f51e6ea365c31bfd5247239b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:12:16 AM UTC  (today)

File size:
45.4 MB (47,553,912 bytes)

File type:
Executable application (Win32 EXE)

Language:
Grec (Grèce)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\glyphinstall.exe

Digital Signature
Authority:
Entrust, Inc.

Valid from:
7/10/2015 12:41:26 AM

Valid to:
7/10/2016 2:17:13 PM

Subject:
CN=Trion Worlds Inc., O=Trion Worlds Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C17AFA1

File PE Metadata
Compilation timestamp:
2/26/2016 5:46:29 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
786432:mSqaZ3+yw/we115jDMULo3DU4Qh6hK0qOpxOKjoL7v:TN+yw/wer6pfbhKIvDj+

Entry address:
0x141C8D

Entry point:
E8, 55, 25, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, FF, 75, 0C, E8, 97, B6, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, 7B, F1, 00, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 98, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D6, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61, 70, FD...
 
[+]

Code size:
1.5 MB (1,556,992 bytes)

The file glyphinstall.exe has been seen being distributed by the following 50 URLs.

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-131.exe&l=1458920203519&f=c9eab5739796db140c669e80a8ee2ce4:3383550829&p=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://rift.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=QBAVD90IOVEF1QAG8WNBETDBJPIQE8W8

https://defiancepc.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=LGV13DATXL7WGVI73KTHMIQAYTTLOJNP

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-null-120.exe&l=1457076351092&f=531a66422d282276a7011135893a50c3:1084979410&p=https://archeage.trionworlds.com/account/profile/manage-game.action&r=https://.../login?service=https://archeage.trionworlds.com/j_spring_cas_security_check?spring-security-redirect=/account/account-summary-flow.action?m=reset_password_success&affiliateId=null&m=reset_password_success&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-85-1001.exe&l=1458890330270&f=0f8316dfc3643550cc8fe35762147d66:1675999823&p=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&r=&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=DWS3N2WNR09MAYTOIEJM4CDSM0I4APK4

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1456556970821&f=69ebda3368a422b0e2957fd8ba039afa:1158594337&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../watch?v=Mqpqgxb0WkE&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=M7SX23UF6VG258HQ9TJCF15M93VS3KZC

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=Y1CWX9KODFXFZEL6IJCDJC4TJNCGSJW

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1457176864083&f=78523076c2e57a6e4515a806eedf85e4:418732022&p=https://archeage.trionworlds.com/.../authtoken/token!input.action&r=https://session.trionworlds.com/login?request_locale=en_US&service=https://archeage.trionworlds.com/j_spring_cas_security_check?spring-security-redirect=/.../account-summary-flow.action&_ga=1.126525832.40652744.1457176815&k=UA-7947017-5

https://trove.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=27J3MJU7HF8WAB9XV6DXND2VV45YY8NW

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1457047440220&f=a96020b31df7ffcf1a9a5758959c89cd:2246934251&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://.../&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1.exe&l=1456797600229&f=374d19fd45691205a5f95002d51ed6bf:3969774045&p=https://rift.trionworlds.com/account/profile/manage-game!input.action?m=code_applied&r=https://rift.trionworlds.com/account/.../account-registration-short-flow.action?voucherCode=TF76ZRWXX6PMD93P63T7&request_locale=en&experience=aaf&shard=Greybriar&character=Zypaleth&utm_source=promotions&utm_medium=email&utm_campaign=ascend_invite&k=UA-7947017-5

http://touch.kaspersky.com/.../1457711433

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=L64QO1KRJX4QHN5NR5OCDJN5MIRS62QC

http://download.dyn.triongames.com/GlyphInstall-9999-160.exe

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-251-120.exe&l=1456937632488&f=7fa38b943e22bad57ef4b5b0cdeb67e9:3453034834&p=https://archeage.trionworlds.com/.../profile/manage-game.action&r=https://session.trionworlds.com/login?request_locale=en_US&service=https://archeage.trionworlds.com/j_spring_cas_security_check?spring-security-redirect=/.../account-summary-flow.action&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-67-1001.exe&l=1457566755596&f=3a572c9ef00de6248207d10d4fcdfd17:1525759322&p=https://glyph.trionworlds.com/.../forgot-password-flow.action&r=https://glyph.trionworlds.com/.../forgot-password-flow.action?request_locale=en_US&k=UA-7947017-5

https://devilian.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=3U99S70PZ3V5OPBD3SKAV9UGLVNJNGQJ

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-67-1001.exe&l=1457189508958&f=d794a2e86f338c549256afa1f2661c48:2334690018&p=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&request_locale=en_US&r=https://glyph.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1456715414978&f=9cdb5d56424922e65db8963267f041ef:3718780529&p=https://store.trionworlds.com/account/profile/manage-game!input.action?m=account_reg_email_verify_success_title&r=https://store.trionworlds.com/account/.../email-token!input.action&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=I7FKEL4APV100NJWYA3V8YVL21RLX4I5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9-150.exe&l=1457698885929&f=3c124cd9fb99e16675bf35b475f4bb30:2498506155&p=https://reactor.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://www.atlasreactorgame.com/en/.../?utm_expid=107399316-11.-mXcgZqYTeq54zC0jlNWIA.0&utm_referrer=https://www.atlasreactorgame.com/en/&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-67-1001.exe&l=1457220246530&f=a8d4fd42ca63c96e131e705330482549:4150633443&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../email-token!input.action&k=UA-7947017-5

https://trovelive.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=DS44KABM77EQE890IW9EOTC519O40V4

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-120.exe&l=1459309533918&f=b52694c454873d3d06b216f68abf65b2:3009743482&p=https://archeage.trionworlds.com/account/.../manage-game!input.action?dd=1&r=&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1457985515401&f=2588ecf509b1c3da367e863971c41ec7:3145774336&p=https://store.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://trovelive.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-9999-1001.exe&l=1459202603549&f=e892bdd68be6abc64eeb2199c9955e5d:4185317052&p=https://glyph.trionworlds.com/account/profile/manage-game!input.action?dd=1&r=https://glyph.trionworlds.com/account/.../email-token!input.action&k=UA-7947017-5

https://analytics.trionworlds.com/dl?file=http://download.dyn.triongames.com/GlyphInstall-null-1.exe&l=1457841779634&f=cb0a36d51855486d90028b2e3935a160:2103687345&p=https://rift.trionworlds.com/account/.../manage-game!input.action?dd=1&r=https://store.trionworlds.com/account/.../manage-game!input.action?dd=1&k=UA-7947017-5

https://rift.trionworlds.com/account/.../record-first-client-download!execute.action?struts.token.name=token&token=KNQAKT00YI1Z72U2FFHNZ71J9XP5TDV7

Latest 30 of 205 download URLs

Scan glyphinstall.exe - Powered by Reason Core Security