home

Newtonsoft.Json.dll

Json.NET

Jonas Zimmermann

Newtonsoft.Json.dll is the assembly provides support for JSON parsing for .NET applications and is recompiled by Jonas Zimmermann. The module Newtonsoft.Json.dll by Jonas Zimmermann has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
Newtonsoft  (signed by Jonas Zimmermann)

Product:
Json.NET

Version:
4.5.11.15520

MD5:
019a5c29f2caf220a8f69a9e506a7493

SHA-1:
0b72c38933832fc163eb1090ee0050b561f642b2

SHA-256:
877648d0ed912a55ef1c527eef3abe7154710c74ccc7abd0928755f60bc1652d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
This is the assembly provides support for JSON parsing for .NET applications. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
11/5/2024 11:06:00 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.10.4.3

File size:
388.2 KB (397,512 bytes)

Product version:
4.5.11.15520

Copyright:
Copyright © James Newton-King 2008

Original file name:
Newtonsoft.Json.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\donotspy10\newtonsoft.json.dll

Digital Signature
Signed by:
Jonas Zimmermann

Authority:
thawte, Inc.

Valid from:
9/1/2015 3:00:00 AM

Valid to:
9/1/2017 2:59:59 AM

Subject:
CN=Jonas Zimmermann, OU=Individual Developer, O=No Organization Affiliation, L=Lueneburg, S=Lower Saxony, C=DE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
4B7CBA9F39D1835F3A0E31785E8054F7

File PE Metadata
Compilation timestamp:
11/20/2012 11:45:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:O+BWmtpZQYS2PjCLfjSCpkALDUbr0tJ0nzbi:xPw2PjCLe3a6Q70zbi

Entry address:
0x60EAE

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
380 KB (389,120 bytes)

Remove Newtonsoft.Json.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.