home

planetarium.exe

Daniel Linssen

This is a setup program which is used to install the application. The file has been seen being downloaded from itch.zone and multiple other hosts.
Publisher:
Daniel Linssen

Version:
1.0.0.0

MD5:
c8d5e1930d5ec3a37553cd8d6369b795

SHA-1:
7f2a3291bb1add476c3581deebc6bb2e34b8990f

SHA-256:
5bd29d1206027c37fa1b97c15ad87d125595e8b1c17d096b08f5dded7c07061c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:05:10 PM UTC  (a few moments ago)

File size:
5.9 MB (6,151,680 bytes)

Product version:
1.0.0.0

Copyright:
Daniel Linssen

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\planetarium.exe

File PE Metadata
Compilation timestamp:
10/14/2013 1:50:27 AM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
98304:t+FUSJ1nmbLDSMVTSGGJviCrctZ7AMHyJUmGLGTedjMqmNycBIMX8cYEZ:uUSPm3DSb9Nc/MTUm20WjM3EkXw

Entry address:
0x67CC

Entry point:
E8, 07, 0B, 00, 00, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 6A, 58, 68, 68, 75, 40, 00, E8, BD, 0B, 00, 00, 33, DB, 89, 5D, E0, 89, 5D, FC, 8D, 45, 98, 50, FF, 15, 70, A1, 40, 00, C7, 45, FC, FE, FF, FF, FF, C7, 45, FC, 01, 00, 00, 00, 64, A1, 18, 00, 00, 00, 8B, 78, 04, 8B, F3, BA, EC, 88, 40, 00, 8B, CF, 33, C0, F0, 0F, B1, 0A, 85, C0, 74, 07, 3B, C7, 75, 16, 33, F6, 46, 83, 3D, F0, 88, 40, 00, 01, 75, 17, 6A, 1F, E8, 30, 09, 00, 00, 59, EB, 43, 68, E8, 03, 00, 00, FF, 15, 6C, A1, 40, 00, EB, C8, 39, 1D...
 
[+]

Entropy:
7.9944  (probably packed)

Code size:
25.5 KB (26,112 bytes)

The file planetarium.exe has been seen being distributed by the following 50 URLs.

https://itch.zone/itchio/upload2/game/.../64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1468302190&Signature=Ndk7fBieWDEaLeKUClvgFbyFSL9rJDVkXwcoAbqMyhPAxhMwQkKZE qjUFUZp M1sOspoXchUaGEPZfTNYsixMl2ygX1xm4CGtefho4 EwGTXDc eGfLvoJa8biJx1nFPRMsVXrGyYvP4Er0HDMi v2kPZpECKExbC wZkZWvbo=

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1462274341&Signature=kbzka3l898cQNh3BREHxXAmMB//t2/3/dNPz/JKVed2B6dUseVKwBuDM hUFV6p658RIN4fnrTf4eviFTALnVE1TjXgcOVqdd7fUVNOrcY1nPluJCLxnxT1VEmbHmkvOxiUFJVrs/.../k=

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1468844135&Signature=xOO6o aslwNPnI75pynLReosOAfHuEQSNwzVUQW2FqXBegQ0fVH/KtgJJbtj/0yRudIZ4siqR8zO8/.../bw3RLGheW7Z9hyNXUlDyakXlIIDz5lpD3jyT5Yy6etexIek4jxJXobOqbEK7cN1I=

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/.../MtHZ8U3yDXYnwUsuYfba1JK3XnkaYooNKIDkWyuhFh 2QgRVgwWX2y4lXrdGkVr418Bz1oxcfPut7VwzW35XY2m1DnhsKxvEhubT1p3k=&hwexp=1481495594&hwsig=6bf1ceec7d27cf040269ab6d90e73721

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1476568998&Signature=a p6g4Flji1mQFX8W2X4LmXI6Un9P5SSpXwjgTAPQXMVlw0LGUt MXbi tV0ow0EaYWmZSHcujnVwCLgLyqA0g1zAabjkHazZB5UqOoTQMO7IQ1dI4PfM 7M5Pd0AViu/.../N55M4WkakWSE=&hwexp=1476568998&hwsig=fe5b98817177fefa5301d850cd848ea8

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1483652983&Signature=araFyCdfnHpQqbsf/egZWpBP9qCIzJTAugrt5ynrUJEzuTJOAu4Btj598o6PoX9AunzOnZ1Ea3yt0pELccG/uoJXuEXpKWLxCAylRigYXKqFESF0ZLH9XsmtMdn9KhuY5TiL09//Z0GgKKv26RZch6RCGbkc91KcSUB 5VcVDFE=&hwexp=1483652983&hwsig=86d1ce4959bf4cf7af22dff2697e2e46

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1474235333&Signature=AB78v r6nZNsI3LoLZCtMfAP/umHdSL4ydIunZKnunlwFvPBt767TK5otU4ngWemyUraXVpV/.../LTUF8uPlM4r7iIvZL7Rk2T21Be5MIGw0fs530d3b6YBj6j8czI5YA2KuOp9j0vYt klJQHcKc=

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1482518210&Signature=BhB/.../Nc=&hwexp=1482518210&hwsig=101bc2314e83486ef554a8eceebcfaa9

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1483898266&Signature=PIabNgkLtlJQp dmIWxOu988j9wR9qPrOfuHj9F1XeQRqg8nd0LM54lJCTQrv/594gSJxCOwyZA43qjnNvHkFbppqpJXC7xeRzVla47c8ZdmAePHZUTaO8Ga4POubaeOMUCAGTmwB8YQWz7/.../NB8UA=&hwexp=1483898266&hwsig=e33b0f8d1e2ac87bed63b56eda7669eb

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/.../sjpu KRrHC25kPpP p76T 3ppChbEdoDxUQ5Yoyv8dnaKJJoZRmllkSWwpfyE=&hwexp=1481806178&hwsig=291214f84fb8fa1b4e3305e5a38726eb

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1454445666&Signature=WXD2frD iNMfbupX/ciujoXa7dm2 Qak6FM8wOte6ML6DQ7M 9j2zZEfl/.../87cr7wL9fl7ZhyY854NmaqQsIB1Cq5tcshme1RfQC5T3QlSfjuwE=

https://itch.zone/itchio/upload2/game/.../64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1460208683&Signature=Frt0x 6 0DRLTf9o s7PZ0BEknaw7T x7nyAGjWFy 9AAEJ2e88KpQQPfkorY9SSbDVGgJQXazNf613VeQJ1WJC01bazWqGSrfuRazeS11enQ3x4KWLZm nuV27qMQWmHs2h9GtX7ymBgtyG1akSCjXbNmisY5QRaY1UgF 0eZs=

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1480710391&Signature=YIrd8Frj3/my8DxIvB4Vb2Ovb9vwiK7q179foWGEIobxKpqIUMqHkJo/.../ib8FNoYR kNeZQyPJOGGXNwjbcJl0EzW xReVM=&hwexp=1480710391&hwsig=b713328f9af30b56397561f4cc2bcadf

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481394685&Signature=T/.../zUYZhODw=&hwexp=1481394685&hwsig=64502d4d0258d91c5e2d1c152855e569

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1470862669&Signature=PI2AQt7OJfXftgXDx61vZf172OlVIzGsaydWFxer/oR/.../OATxvYcH8=

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481381067&Signature=U9I9FNwIupae/m9bFcUwvC6F0wJ2c3P7lTL8INkwycLntTKLo2VI3G8wGcy5s0S0XlOgdryN/Aui2cVYNY2xACnZteT exrg8q5qV08gJe u/.../LFRk5AAi9HrYxBbPSKP31wUWmBUeIDS3rM=&hwexp=1481381067&hwsig=94abb3aa81b2a0a2e2eb436d9a9b95b5

https://commondatastorage.googleapis.com/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1464406771&Signature=sybf9ckYGZlDf FYEQhcBrm2NhFbVuXVY4/xNyU U2ngSWu g46qeeTrC5vODDbcGHWpNoPxCSzb4TjjFNUU/3wb/.../vCglV5HYYHK6zEdCD7Vh4=

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1482444751&Signature=kXdrBKN4Ns4E6 teyaG0/O4ANnewe2RPpULYEDh9pA4ylVmgXRcvq95V5/ovAM8gejr9MN638rkRetwiHmUVE5vbMabZZxls4I6vsnog8GGf5kkB2Lgq/.../pVuC0HnIKGjXy8AE=&hwexp=1482444751&hwsig=9ab9722c0fccd3f71220ef51cce9f4bd

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481745989&Signature=Ph7MPvxf76no9ebSbz9jkK/oIORDztOczlZT23QMhIBL0KaxWConwXYgeYCNOJw4ntZ/D7rB9nLBS4Kxt5v8UkweV9TGXHcVnPCE6K9L9R/.../etCQmf37PI=&hwexp=1481745989&hwsig=e8503690e1088fd8623b1d007946eeb3

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481590098&Signature=QJ/Yyh1bGuAPbwMlTPtrSiqiq46UvgqXHkk3vSkmJ9CqxkWbAFT9XX9U35ohA1/.../eAva1l aBwYT45H4cl1LbZsiTgLXCmb2R8hakqWnpW0IUHlw=&hwexp=1481590098&hwsig=230be706d2bca93f6e7170fe7ad14083

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1474635931&Signature=ZoED3HdnG7CgM5BQjJn3/0V444fosnbdNipIx3IZq0ChUoxD0kuD8vY4DOC1GCLNXoCPDlCWgQ48l/GWB9f4ySPK3gvulZTBc4QPDgZhaMNf3tQVqAcTrXEkXaWqPAPRm3ru/.../ fWOnGruZj3BFcEQ=

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/.../2YCehS2X3r3mI3t5phPF1gQcMA20pOR3myr7aE4LvUY=&hwexp=1479144411&hwsig=2b3cca572198c757f00c1e1c8651f3da

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1477181415&Signature=mMXun/.../dvM0AQ2K0 d484BBjw=&hwexp=1477181415&hwsig=1580f00c2d98e14420c73014ce7abc41

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/.../64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1479025547&Signature=oWB5FTvOPvDx4cN9aNSs2iupnWfoewJncrebsHcQaFPu8tGE gd868E6Xh28lJP hL5exyDYNAMgxhf GN2Wg6xQw2Mv8ohFOAnya0ANLSwrxxIpHTaf0P V8BE2PyTwKWewkOHEWPVyd7r9JInGqD7YBa2Fpsnx5g6MFA5va M=&hwexp=1479025547&hwsig=e89f7def00e4f4089102fe119aa75b79

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1464306095&Signature=hVyJ5LWz85nYYsRkGKzfbod24OqBAS90/4sm8cJW bgOB/.../EH pBLo0WaxM7Qdcn4QPRLDQ0gi1SVj8OAeVQnR91j4rUr9mJOO4bx0ZWlP0Cr6WQrMyZ8NWgk9 W4RE6dop2IvV34z1YfDeJGZ4D57q1bf6gtz5PYqSKWi80=

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1471743253&Signature=tB272jbT5BEQpOuwA/.../tQMHA21QTHiYqd6iM2BEzEwa6PLPPWh XmN20=

https://commondatastorage.googleapis.com/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481472306&Signature=KJ/SqEURAyBM6ck6hbNeCUqiPta3z4O7UZEhqUP5EqQoHZduMPquFwh4xU/Rex9p7DyXprMJE/dtuSHwuxsFrF8O3gi2vzTh2XjuVYHruNwl2rK/.../OvBy0=

https://itch.zone/itchio/upload2/game/26896/.../kSA0TCtANZaD9fWsoWgqMkKmMcYLKvtXuRRjvD6x98ISVqY a6pgkqMVdPKp29j49AnKTrhrAYEn4Aw5OJz2VPt4KRAcM0bwEa3Rny42EYUnPPlCKBbXzLMMDBBWi KPK2uHN8ZjTIUOexvgE0J2eKFbMfQsMB8=

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1466202584&Signature=mS5/ JE7naYCKPQ/fCp0mfhViMlj2nJ3hfIRuZUg5PrHNXE A/.../sVUCsCsM5qUNIhZs78z7zbPxSNcxmSmdEEJPAbRO8wSRhU CK4dG1GeKTzE59umVB3vICpilcGDtNLTpkFaRwuO1EbWnf5oE4YfjLZ9fRw1eg=

https://itch.zone/itchio/upload2/game/26896/64578?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1463684252&Signature=C5gVaOjLLA7Dh/DsH/tr90XncbKEvHHoOLho6HPWCqg/YyX8Tlz vuFgfJEnX1QpOGZUeis2pGrX3/.../wLAONy6038GYTJXK5fmII8vFb58ovMXJUphm LAjNE63hyDGRVVWCcrmumyquBKtk=

Latest 30 of 53 download URLs

Scan planetarium.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.