home

Newtonsoft.Json.dll

Json.NET

Stampede Technologies

Newtonsoft.Json.dll is the assembly provides support for JSON parsing for .NET applications and is recompiled by Stampede Technologies. The module Newtonsoft.Json.dll, “Json.NET .NET 2.0” by Stampede Technologies has been detected as adware by 11 anti-malware scanners. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
Newtonsoft  (signed by Stampede Technologies)

Product:
Json.NET

Description:
Json.NET .NET 2.0

Version:
6.0.3.17227

MD5:
1b974c92e587af3e69757f8bcf991325

SHA-1:
2c42b63c10422770a7924c1d390381cadc5893ff

SHA-256:
97291eaa78c6c539b3e7fb3e261bdce4e070fddcc023f8675cacce9b18bda736

Scanner detections:
11 / 68

Status:
Adware

Explanation:
This is the assembly provides support for JSON parsing for .NET applications. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
4/26/2024 11:52:23 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/CrossRider.pl
7.11.171.178

AVG
Stampede
2015.0.3310

Baidu Antivirus
Adware.Win32.GoogUpdate
4.0.3.141025

Kaspersky
Trojan.NSIS.GoogUpdate
14.0.0.3046

McAfee
Artemis!1B974C92E587
5600.6966

Panda Antivirus
Trj/Chgt.F
14.10.25.06

Qihoo 360 Security
Win32/Virus.Adware.960
1.0.0.1015

Reason Heuristics
Common.PUP.StampedeTechnologies.O
14.10.25.18

Sophos
Generic PUA CM
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-MSIL
10277

Vba32 AntiVirus
Trojan.GoogUpdate
3.12.26.3

File size:
483.9 KB (495,480 bytes)

Product version:
6.0.3.17227

Copyright:
Copyright © James Newton-King 2008

Original file name:
Newtonsoft.Json.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\total-1.8\newtonsoft.json.dll

Digital Signature
Signed by:
Stampede Technologies

Authority:
COMODO CA Limited

Valid from:
7/28/2014 3:00:00 AM

Valid to:
7/29/2015 2:59:59 AM

Subject:
CN=Stampede Technologies, O=Stampede Technologies, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0CC7970117FD591A57609D71BEE0FCB8

File PE Metadata
Compilation timestamp:
4/27/2014 6:12:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:v14RIXwj5Ga4BztxXRKSPJtvKlJ3EQo5WyscPcDU:vK4JzlvEEQo5WyscPf

Entry address:
0x7930E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
477 KB (488,448 bytes)

Remove Newtonsoft.Json.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.