Resubmissions

23/10/2026, 11:31

261023-nmt24sbt2z6

23/10/2026, 01:08

261023-bhc7ksgz616

22/10/2026, 23:46

261022-3sa9hsgt516

22/10/2026, 20:55

261022-zqxg7ahz7l6

22/10/2026, 15:43

261022-s56abavy3p6

22/10/2026, 15:11

261022-sk226avw2k8

21/10/2026, 10:03

261021-l3nh6abv9x1

General

  • Target
    Newtonsoft.Json.dll
  • Size 685KB
  • Sample261022-s56abavy3p
  • SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Newtonsoft.Json.dll
    .dll 685KB

Newtonsoft.Json.dll

  • IMPHASH dae02f32a21e03ce65412f6e56942daa
  • SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb