Benign dotnet 743,426 installs Download

Xamarin.GooglePlayServices.Ads.Base 124.1.0.4

“.NET for Android and MAUI bindings for the Android Java library 'com.google.android.gms:play-services-ads-base'.”

Authenticode chain CN: Microsoft CorporationSigned by Microsoft Corporation

Evidence

.NET Assembly (mscoree.dll) 0x27c–0x2ac
0x27c2a06281800000a2a1e02281900000a2a*.(....*..(....*
0x28c42534a4201000100000000000c000000BSJB............
0x29c76342e302e3330333139000000000500v4.0.30319......
0x2ac6c000000 l...
.dll extension reference 0x8a5–0x8f5
0x8a5657276696365732e4164732e42617365ervices.Ads.Base
0x8b52e646c6c0053797374656d0053656375.dll.System.Secu
0x8c572697479416374696f6e005379737465rityAction.Syste
⋯3 more rows
Visual Studio build path 0xe04–0xeb4
0xe049649294bb9ff8053e77d30e401000000.I)K...S.}0.....
0xe14433a5c615c5f776f726b5c315c735c67C:\a\_work\1\s\g
0xe24656e6572617465645c636f6d2e676f6fenerated\com.goo
0xe34676c652e616e64726f69642e676d732egle.android.gms.
0xe44706c61792d73657276696365732d6164play-services-ad
0xe54732d626173655c6f626a5c52656c6561s-base\obj\Relea
0xe6473655c6e657431302e302d616e64726fse\net10.0-andro
0xe74696433362e305c58616d6172696e2e47id36.0\Xamarin.G
0xe846f6f676c65506c617953657276696365ooglePlayService
0xe94732e4164732e426173652e7064620053s.Ads.Base.pdb.S
0xea4484132353600f9f26cc8964929bbf9ffHA256...l..I)...
0xeb48053e77d30e4f1ab65ebe2cd1e05 .S.}0...e.....
PE version resource structure 0x104e–0x107e
0x104e000000000000000000005c0534000000..........\.4...
0x105e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x106e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x107e0000bd04effe000001000000010000 ...............
PE FileVersion metadata field 0x12ee–0x134e
0x12ee42006100730065000000300008000100B.a.s.e...0.....
0x12fe460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x130e69006f006e000000000031002e003000i.o.n.....1...0.
⋯4 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.