Benign dotnet 11,504,846 installs Download

Xamarin.GooglePlayServices.Stats 117.1.0.10

Legitimate Microsoft-signed Xamarin library

“.NET for Android and MAUI bindings for the Android Java library 'com.google.android.gms:play-services-stats'.”

Authenticode chain CN: Microsoft CorporationSigned by Microsoft Corporation

Evidence

.NET Assembly (mscoree.dll) 0xad0–0xb00
0xad000000a733600000a80170000042a0000...s6........*..
0xae042534a4201000100000000000c000000BSJB............
0xaf076342e302e3330333139000000000500v4.0.30319......
0xb006c000000 l...
.dll extension reference 0x256f–0x259f
0x256f617953657276696365732e5374617473ayServices.Stats
0x257f2e646c6c0047636d0053797374656d00.dll.Gcm.System.
0x258f4c6f636174696f6e004a6176612e4c61Location.Java.La
0x259f6e672e41 ng.A
Visual Studio build path 0x3c5c–0x3d0c
0x3c5cb45c0d4491fffc14b2d4392f01000000.\.D......9/....
0x3c6c433a5c615c5f776f726b5c315c735c67C:\a\_work\1\s\g
0x3c7c656e6572617465645c636f6d2e676f6fenerated\com.goo
0x3c8c676c652e616e64726f69642e676d732egle.android.gms.
0x3c9c706c61792d73657276696365732d7374play-services-st
0x3cac6174735c6f626a5c52656c656173655cats\obj\Release\
0x3cbc6e6574392e302d616e64726f69643335net9.0-android35
0x3ccc2e305c58616d6172696e2e476f6f676c.0\Xamarin.Googl
0x3cdc65506c617953657276696365732e5374ePlayServices.St
0x3cec6174732e706462005348413235360017ats.pdb.SHA256..
0x3cfcff3d7ab45c0dc4d1fffc14b2d4392fd7.=z.\........9/.
0x3d0ca7813039c4f5b9 ..09...
PE version resource structure 0x3e4e–0x3e7e
0x3e4e00000000000000000000440534000000..........D.4...
0x3e5e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x3e6e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x3e7e0000bd04effe000001000000010000 ...............
PE FileVersion metadata field 0x40e2–0x4142
0x40e261007400730000000000300008000100a.t.s.....0.....
0x40f2460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x410269006f006e000000000031002e003000i.o.n.....1...0.
⋯4 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.