Benign dotnet 29,748 installs Download

pendo-xamarin-forms 3.13.9.10194

“The Pendo SDK for apps based on Xamarin Forms 5. The Pendo platform allows product owners to track user behavior and deliver personal exper…”

PE has no signature recordHardcoded HTTP or WebSocket URL
SHA-256b82eb1b4d49b69d698fc3757a54fb1285f3916a3afc01dab3f2751a03fc9cd5e

Evidence

.NET managed assembly pendo-xamarin-forms.dll · 0x1e0–0x430
⋯21 more rows
0x330000a2a220304282100000a2a1e022822..*"..(!...*..("
0x34000000a2a42534a420100010000000000...*BSJB........
0x3500c00000076342e302e33303331390000....v4.0.30319..
⋯14 more rows
Hardcoded HTTP or WebSocket URL pendo-xamarin-forms.dll · 0x12bb–0x13ab
⋯3 more rows
0x12eb6e7320617661696c61626c6520617420ns available at
0x12fb68747470733a2f2f7777772e70656e64https://www.pend
0x130b6f2e696f2f6c6567616c2f6c6963656eo.io/legal/licen
0x131b73652d7465726d732d616e642d636f6ese-terms-and-con
⋯9 more rows
PE version resource structure pendo-xamarin-forms.dll · 0x1fe0–0x20c0
⋯6 more rows
0x20400000000048000000584000004c030000[email protected]...
0x205000000000000000004c03340000005600........L.4...V.
0x206053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x20704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes CompanyName pendo-xamarin-forms.dll · 0x2116–0x23c6
⋯3 more rows
0x214674007300000000000000220001000100t.s.......".....
0x215643006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x216661006d00650000000000000000005000a.m.e.........P.
0x217614000100460069006c00650044006500....F.i.l.e.D.e.
0x218673006300720069007000740069006f00s.c.r.i.p.t.i.o.
0x21966e0000000000500065006e0064006f00n.....P.e.n.d.o.
0x21a6530044004b00580061006d0061007200S.D.K.X.a.m.a.r.
0x21b669006e002e0069004f00530000003000i.n...i.O.S...0.
0x21c608000100460069006c00650056006500....F.i.l.e.V.e.
0x21d67200730069006f006e00000000003100r.s.i.o.n.....1.
0x21e62e0030002e0030002e00300000005000..0...0...0...P.
0x21f61800010049006e007400650072006e00....I.n.t.e.r.n.
0x220661006c004e0061006d00650000007000a.l.N.a.m.e...p.
⋯17 more rows
0x232674004e0061006d006500000000000000t.N.a.m.e.......
0x23360000340008000100500072006f006400..4.....P.r.o.d.
0x234675006300740056006500720073006900u.c.t.V.e.r.s.i.
0x23566f006e00000031002e0030002e003000o.n...1...0...0.
0x23662e003000000038000800010041007300..0...8.....A.s.
⋯6 more rows
PE version metadata includes FileDescription pendo-xamarin-forms.dll · 0xafa–0xcea
⋯3 more rows
0xb2a300034006200300000002c00020001000.4.b.0...,.....
0xb3a460069006c0065004400650073006300F.i.l.e.D.e.s.c.
0xb4a720069007000740069006f006e000000r.i.p.t.i.o.n...
0xb5a00002000000030000800010046006900.. ...0.....F.i.
0xb6a6c006500560065007200730069006f00l.e.V.e.r.s.i.o.
0xb7a6e000000000031002e0030002e003000n.....1...0...0.
0xb8a2e003000000050001800010049006e00..0...P.....I.n.
0xb9a7400650072006e0061006c004e006100t.e.r.n.a.l.N.a.
0xbaa6d0065000000700065006e0064006f00m.e...p.e.n.d.o.
⋯9 more rows
0xc4a2d0066006f0072006d0073002e006400-.f.o.r.m.s...d.
0xc5a6c006c00000034000800010050007200l.l...4.....P.r.
0xc6a6f006400750063007400560065007200o.d.u.c.t.V.e.r.
0xc7a730069006f006e00000031002e003000s.i.o.n...1...0.
0xc8a2e0030002e0030000000380008000100..0...0...8.....
0xc9a41007300730065006d0062006c007900A.s.s.e.m.b.l.y.
⋯5 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.