home

Newtonsoft.Json.dll

Json.NET

Stampede Technologies

Newtonsoft.Json.dll is the assembly provides support for JSON parsing for .NET applications and is recompiled by Stampede Technologies. The module Newtonsoft.Json.dll, “Json.NET .NET 2.0” by Stampede Technologies has been detected as adware by 11 anti-malware scanners. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
Newtonsoft  (signed by Stampede Technologies)

Product:
Json.NET

Description:
Json.NET .NET 2.0

Version:
6.0.3.17227

MD5:
d31ce0ff41bb4efb72b4edc197ee9036

SHA-1:
87a4fc2de4965027e4e19eab559fdc4de472c3c5

SHA-256:
c986776a000ae904d12bf0f604cb26b154df977c1488e455afee5b2be9f82349

Scanner detections:
11 / 68

Status:
Adware

Explanation:
This is the assembly provides support for JSON parsing for .NET applications. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
4/26/2024 6:42:59 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/CrossRider.pl
7.11.171.22

AVG
Stampede
2016.0.3096

Baidu Antivirus
Adware.Win32.GoogUpdate
4.0.3.15527

Kaspersky
Trojan.NSIS.GoogUpdate
14.0.0.1977

McAfee
Artemis!D31CE0FF41BB
5600.6752

Panda Antivirus
Trj/Chgt.E
15.05.27.12

Qihoo 360 Security
Win32/Virus.Adware.960
1.0.0.1015

Reason Heuristics
Common.PUP.StampedeTechnologies
15.5.27.8

Sophos
Generic PUA IH
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-MSIL
9850

Vba32 AntiVirus
Trojan.GoogUpdate
3.12.26.3

File size:
483.9 KB (495,480 bytes)

Product version:
6.0.3.17227

Copyright:
Copyright © James Newton-King 2008

Original file name:
Newtonsoft.Json.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\total-1.8\newtonsoft.json.dll

Digital Signature
Signed by:
Stampede Technologies

Authority:
COMODO CA Limited

Valid from:
7/28/2014 4:00:00 AM

Valid to:
7/29/2015 3:59:59 AM

Subject:
CN=Stampede Technologies, O=Stampede Technologies, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0CC7970117FD591A57609D71BEE0FCB8

File PE Metadata
Compilation timestamp:
4/27/2014 7:12:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:j14RIXwj5Ga4BztxXRKSPJtvKlJ3EQo5WyscPcDE:jK4JzlvEEQo5WyscPb

Entry address:
0x7930E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
477 KB (488,448 bytes)

Remove Newtonsoft.Json.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.