b3c295ba49dfc5697572e0ef40cfce9e905f9e9335af1cefceadb54b5705dfa5

Known library: .NET assembly in a Blazor app (webcil)

Download .wasm Search scans with this module

The file is the module exactly as the page had it. WebAssembly does nothing on its own: it runs only when a script instantiates it. Labels describe what the module contains and are leads, not verdicts.

At a glance

What it is: The .NET assembly Newtonsoft.Json 13.0.0.0, packed as WebAssembly for a Blazor app.
Names it came with: File name: newtonsoft-json (2 sites). Its build and the addresses it came from say so; whoever builds a module chooses these, so they are hints.
How it was built: A .NET program (usually C#), compiled to a .NET assembly and packed as WebAssembly so a Blazor app can load it.
What it can do: Not visible in this file: the module only hands its assembly to the .NET runtime, which runs the code.
Where we saw it: On 4 public scans, 2026-10-05 to 2026-10-22.
Findings: Nothing flagged by the checks below.

Size: 694.3 KiB
First seen: 2026-10-05
Last seen: 2026-10-22
Public scans: 4
Functions: 2
Imports: 1
Exports: 4
Data segments: 2

Analysis limits

Only its first 2,000 strings were read.

How it was built

A .NET assembly in Blazor's webcil format: the WebAssembly part is a small wrapper, and the assembly inside is compiled .NET code that the .NET runtime loads. What the assembly is made of is listed below.

What it is made of

.NET assembly Newtonsoft.Json version 13.0.0.0 (file Newtonsoft.Json.dll), referencing 22 other assemblies:

System.Collections 6.0.0.0
System.Collections.Concurrent 6.0.0.0
System.ComponentModel.Primitives 6.0.0.0
System.ComponentModel.TypeConverter 6.0.0.0
System.Data.Common 6.0.0.0
System.Diagnostics.TraceSource 6.0.0.0
System.Linq 6.0.0.0
System.Linq.Expressions 6.0.0.0
System.ObjectModel 6.0.0.0
System.Reflection.Emit.ILGeneration 6.0.0.0
System.Reflection.Emit.Lightweight 6.0.0.0
System.Reflection.Primitives 6.0.0.0

Read from text the build left in the module: source paths, build metadata and .NET metadata. Whoever builds a module can change or remove it, so treat it as a hint.

Decompiled code

274 of 274 types decompiled to C#. Assembly Newtonsoft.Json 13.0.0.0.

Decompiled code is a reconstruction from the file, so names and types are often guesses. Query values in URLs are masked here; the downloaded file is unchanged.

Find a typeSortShow

Type	IL size	Methods	Notes
No types match.

Hosts named in the code

Hosts of URLs written in the decompiled code. A host here is something the code may contact, or just text it carries.

Assemblies it references

References 22 assemblies

System.Runtime 6.0.0.0
System.Runtime.InteropServices 6.0.0.0
System.Runtime.Numerics 6.0.0.0
System.Xml.ReaderWriter 6.0.0.0
System.Xml.XDocument 6.0.0.0
System.Collections 6.0.0.0
System.Runtime.Serialization.Formatters 6.0.0.0
System.ComponentModel.TypeConverter 6.0.0.0
System.Linq.Expressions 6.0.0.0
System.Reflection.Emit.Lightweight 6.0.0.0
System.Reflection.Emit.ILGeneration 6.0.0.0
System.Reflection.Primitives 6.0.0.0
System.Runtime.Serialization.Primitives 6.0.0.0
System.Text.RegularExpressions 6.0.0.0
System.Linq 6.0.0.0
System.Collections.Concurrent 6.0.0.0
System.Diagnostics.TraceSource 6.0.0.0
System.ObjectModel 6.0.0.0
System.Data.Common 6.0.0.0
System.Threading 6.0.0.0
System.ComponentModel.Primitives 6.0.0.0
System.Text.Encoding.Extensions 6.0.0.0

File layout

WebAssembly binary format version 1, core module, 9 sections (1 custom).

Section	Offset	Size	Items
type	0x8	12 bytes	2
import	0x14	20 bytes	1
function	0x28	5 bytes	2
global	0x2d	13 bytes	2
export	0x3a	67 bytes	4
datacount	0x7d	3 bytes
code	0x80	29 bytes	2
data	0x9d	694.1 KiB	2
custom: name	0xad8f8	29 bytes

Memory: 1 page (64.0 KiB), no upper limit, imported from the page as webcil.memory
Globals: 2
Declared data segments: 2
Function names: none (names were stripped)

Data segments

Each bar is one segment of the module's data: as wide as its size, as tall as its entropy. Bars above the dashed line are encrypted or compressed. 2 segments, 694.1 KiB in all.

data segment encrypted or compressed 7.5 bits per byteHeight: bits per byte. Width: share of all the data.

Imports (1)

webcil.memory

Exports (4)

Checks we ran

Threat-feed matches: none
Names of mining software or pools: none
CryptoNight mining structure: not found
Hashing or cipher loops: none
Known hashing or cipher algorithms: none recognised
Encrypted or compressed data: none
JavaScript stored inside: none
Other modules inside: none
Imports that read browser or page details: none
Function names: kept

Static checks of the file: nothing in it was run for these. A finding is a lead, not a verdict.

Seen on 4 public scans

Page	Title	Seen	How it got there
app.datatalks.se	Data Talks CDP	2026-10-22	Downloaded as a file
app.datatalks.se	Data Talks CDP	2026-10-18	Downloaded as a file
app.datatalks.se	Data Talks CDP	2026-10-08	Downloaded as a file
camelback-ecom.intouchelevate.com	Home - Elevate	2026-10-05	Downloaded as a file