home

earthps.dll

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

MD5:
3be7773cf846747dc359db2c7c1ff5bc

SHA-1:
61712d46b7b61b5a0930f3d0c4a7036306a8c597

SHA-256:
91fd0633ae0068a2d4d7cfefc8813d86599d18dd673f97e4399ea9e0f812adf2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/27/2024 12:24:26 AM UTC  (today)

File size:
18.5 KB (18,944 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\Program Files\google\google earth pro\earthps.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/18/2007 6:09:04 PM

Valid to:
12/18/2008 5:19:04 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61052123000000000006

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:/hy/jso9uT+quEOjBMluJemafdjIafdjcjsob:Jy/jso5zMlAafdjIafdjcjsob

Entry point:
30, 82, 2A, AE, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 02, A0, 82, 2A, 9F, 30, 82, 2A, 9B, 02, 01, 01, 31, 0B, 30, 09, 06, 05, 2B, 0E, 03, 02, 1A, 05, 00, 30, 82, 02, E9, 06, 09, 2B, 06, 01, 04, 01, 82, 37, 0A, 01, A0, 82, 02, DA, 30, 82, 02, D6, 30, 0C, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 01, 04, 10, 48, 14, A3, 45, 61, 04, 67, 4D, B1, 23, E3, 36, 9D, 36, 72, CB, 17, 0D, 30, 38, 30, 34, 31, 30, 32, 32, 35, 39, 35, 30, 5A, 30, 0E, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 02, 05, 00, 30, 82, 02...
 
[+]

Entropy:
7.2450

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.