home

Newtonsoft.Json.dll

Json.NET

Newtonsoft

Newtonsoft.Json.dll is the assembly provides support for JSON parsing for .NET applications. The file has been seen being downloaded from localhost and multiple other hosts.
Publisher:
Newtonsoft

Product:
Json.NET

Description:
Json.NET .NET 2.0

Version:
5.0.5.16108

MD5:
7dee71c1158ce216e119f560e35f97b8

SHA-1:
984290891f4663902ebac3e825c2c2036fc164a8

SHA-256:
48ab3fda3531b996f553f64597aa890c929c6f1a7ce978fb0c497e0117d7dfd8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 9:19:04 PM UTC  (today)

File size:
422 KB (432,128 bytes)

Product version:
5.0.5.16108

Copyright:
Copyright © James Newton-King 2008

Original file name:
Newtonsoft.Json.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\wlj41xe4.n00\lib\net20\newtonsoft.json.dll

File PE Metadata
Compilation timestamp:
5/8/2013 5:51:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:8MRG0gBW29XQJXzAE4+++d2gVM+33Ll6FSHK8Yr0tqmmuaN+zPZiR:8IG0gT9gB0+4232tQoMZiR

Entry address:
0x6ACEE

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
419.5 KB (429,568 bytes)

The file Newtonsoft.Json.dll has been seen being distributed by the following 4 URLs.

http://localhost/STARLIMS11.STARLIMSORACLE11/.../Newtonsoft.Json.DLL

http://192.168.3.147/starlims11.excise/.../Newtonsoft.Json.DLL

http://starlims/STARLIMS11.PROD/.../Newtonsoft.Json.DLL

https://sasprod.starlimscloud.com/starlims11.sas.prod/.../Newtonsoft.Json.DLL

Scan Newtonsoft.Json.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.