Benign dotnet 9,769 installs Download

Galosys.Foundation.AspNetCore.LazySlideCaptcha 26.7.26.2

Legitimate NuGet package

“Galosys.Foundation快速开发库”

Markdown-style heading precedes a code fencePE has no signature record

Evidence

Visual Studio PDB build path Galosys.Foundation.AspNetCore.LazySlideCaptcha.dll · 0x11a0–0x12f0
⋯3 more rows
0x11d032afd74394b69e554acecc14010000002..C...UJ.......
0x11e0443a5c70726f6a6563745c626173655cD:\project\base\
0x11f0666f756e646174696f6e5c6672616d65foundation\frame
0x1200776f726b5c7372635c47616c6f737973work\src\Galosys
0x12102e466f756e646174696f6e2e4173704e.Foundation.AspN
0x12206574436f72652e4c617a79536c696465etCore.LazySlide
0x1230436170746368615c6f626a5c52656c65Captcha\obj\Rele
0x12406173655c6e657431302e305c47616c6fase\net10.0\Galo
0x12507379732e466f756e646174696f6e2e41sys.Foundation.A
0x126073704e6574436f72652e4c617a79536cspNetCore.LazySl
0x1270696465436170746368612e7064620053ideCaptcha.pdb.S
0x12804841323536007e7d0fbd32afd7d394b6HA256.~}..2.....
⋯7 more rows
PE version metadata includes CompanyName Galosys.Foundation.AspNetCore.LazySlideCaptcha.dll · 0x151a–0x17ca
⋯5 more rows
0x156a69006f006e00eb5f1f90005fd153935ei.o.n.._..._.S.^
0x157a000030000800010043006f006d007000..0.....C.o.m.p.
0x158a61006e0079004e0061006d0065000000a.n.y.N.a.m.e...
0x159a0000470061006c006f00730079007300..G.a.l.o.s.y.s.
0x15aa000086002f000100460069006c006500..../...F.i.l.e.
0x15ba44006500730063007200690070007400D.e.s.c.r.i.p.t.
0x15ca69006f006e0000000000470061006c00i.o.n.....G.a.l.
⋯5 more rows
0x162a6300680061000000000034000a000100c.h.a.....4.....
0x163a460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x164a69006f006e0000000000320036002e00i.o.n.....2.6...
0x165a37002e00320036002e003200000086007...2.6...2.....
0x166a3300010049006e007400650072006e003...I.n.t.e.r.n.
0x167a61006c004e0061006d00650000004700a.l.N.a.m.e...G.
⋯21 more rows
PE version metadata includes ProductVersion Galosys.Foundation.AspNetCore.LazySlideCaptcha.dll · 0x17e8–0x1938
⋯7 more rows
0x185861007000740063006800610000000000a.p.t.c.h.a.....
0x18688a0033000100500072006f0064007500..3...P.r.o.d.u.
0x187863007400560065007200730069006f00c.t.V.e.r.s.i.o.
0x18886e000000320036002e0037002e003200n...2.6...7...2.
0x189836002e0032002b0037003700370038006...2.+.7.7.7.8.
0x18a861003200350034003700640062003900a.2.5.4.7.d.b.9.
0x18b863006300350033003300610032003400c.c.5.3.3.a.2.4.
0x18c862003600630038003700650031003400b.6.c.8.7.e.1.4.
⋯7 more rows
Markdown-style heading precedes a code fence README.md · lines 1–21
⋯12 lines
13```
14
15### security
16
17```csharp
⋯4 lines
Large base64-encoded string (128+ chars) README.md · lines 29–34
29:8… = SecurityTemplate.AesDecrypt<SampleDto>(rt, key);
30
31var pub = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDM9As4OkFLUyEmtqVJJaHkAf0xKR3aq38q6FqSi1vQfy1hUjhh/Z8k5NaT2WnmnchGUOoGsvwtKVAHrS62qvWzAPy7sauvG/O7hu1l+3SsrRDtv/O6hqRjEbPex/hpZM1opdkDtiiuHB5wHFYnD7JouWme9lNAViRcj4bXfqnZqwIDAQAB";
32string @private = "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";
33encrypted = SecurityTemplate.RSAEncrypt(original, pub);
34orig …

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.