home

Newtonsoft.Json.dll

Json.NET

Stampede Technologies

Newtonsoft.Json.dll is the assembly provides support for JSON parsing for .NET applications and is recompiled by Stampede Technologies. The module Newtonsoft.Json.dll, “Json.NET .NET 2.0” by Stampede Technologies has been detected as adware by 10 anti-malware scanners. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.
Publisher:
Newtonsoft  (signed by Stampede Technologies)

Product:
Json.NET

Description:
Json.NET .NET 2.0

Version:
6.0.3.17227

MD5:
e36f9b59e83350d8e9134c79a1d37f05

SHA-1:
e2cae023646d30e761713994d9b195c1730b6e23

SHA-256:
0a7003aa8c3335cbf06ee7adb1ec2824641d625cb6abdb631834dded0c85e5ca

Scanner detections:
10 / 68

Status:
Adware

Explanation:
This is the assembly provides support for JSON parsing for .NET applications. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
4/19/2024 3:11:00 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/CrossRider.pl
7.11.168.222

IKARUS anti.virus
Trojan.GoogUpdate
t3scan.1.7.5.0

Kaspersky
Trojan.NSIS.GoogUpdate
14.0.0.3365

McAfee
Artemis!E36F9B59E833
5600.7030

Panda Antivirus
Trj/Chgt.D
14.08.22.10

Qihoo 360 Security
Win32/Trojan.a2d
1.0.0.1015

Reason Heuristics
Common.PUP.StampedeTechnologies.O
14.8.25.2

Sophos
Generic PUA OC
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-MSIL
10405

Vba32 AntiVirus
TScope.Trojan.MSIL
3.12.26.3

File size:
483.9 KB (495,480 bytes)

Product version:
6.0.3.17227

Copyright:
Copyright © James Newton-King 2008

Original file name:
Newtonsoft.Json.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\cinemap-1.4\newtonsoft.json.dll

Digital Signature
Signed by:
Stampede Technologies

Authority:
COMODO CA Limited

Valid from:
7/27/2014 5:00:00 PM

Valid to:
7/28/2015 4:59:59 PM

Subject:
CN=Stampede Technologies, O=Stampede Technologies, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0CC7970117FD591A57609D71BEE0FCB8

File PE Metadata
Compilation timestamp:
4/26/2014 8:12:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:d14RIXwj5Ga4BztxXRKSPJtvKlJ3EQo5WyscPcDO:dK4JzlvEEQo5WyscP5

Entry address:
0x7930E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8777

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
477 KB (488,448 bytes)

Remove Newtonsoft.Json.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.