home

net_framework_version_3_5_sp1.exe

Microsoft .NET Framework 3.5

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from download.apphit.com.
Publisher:
Microsoft Corporation

Product:
Microsoft .NET Framework 3.5

Description:
Microsoft .NET Framework 3.5 Setup

Version:
3.5.30729.01

MD5:
b1c450d793c419004bc0618e510c9b42

SHA-1:
4586eeb523034bb198cfdc7efcc264aa59a18758

SHA-256:
5e014eeec336a8336c4974958e092333f68ba913a2a18ffcd995337c9ea5a7e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:38:23 PM UTC  (today)

File size:
2.9 MB (3,024,912 bytes)

Product version:
3.5.30729.01

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
dotnetfx35setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\net_framework_version_3_5_sp1.exe

File PE Metadata
Compilation timestamp:
6/1/2005 10:16:51 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:BNpDJ082TPqyaP3xhIKc+8m9efm97y8pUcsKY4twQ9/3WOIpXFRDt:BC826P3xhpum9Icspgw0OfXFP

Entry address:
0x5972

Entry point:
C6, C6, 8F, 69, C9, 66, 6B, 12, 61, 81, FF, 89, 0E, 00, 00, 73, 09, 0F, AF, ED, 8A, EB, F7, D7, 0F, CD, 05, B9, 66, 29, 59, BB, B7, ED, 00, 00, 85, FD, C7, C7, F4, F4, 0E, 93, 87, F3, 1C, 98, 81, EE, F7, 06, 00, 00, 81, CE, F9, 3F, 35, D1, 80, D0, CC, 0F, AF, F9, 57, 68, D2, 68, 85, 00, F7, D8, E8, 00, 00, 00, 00, F6, DC, 72, 04, 8A, F1, 87, F0, 88, FA, 33, D9, 39, FF, 5E, 81, F9, 43, 46, 00, 00, 74, 0A, FE, C0, 87, FB, 8D, 3D, 2B, 4B, 1F, 6E, F6, C4, 47, 81, D7, 1B, 91, 17, 1D, F7, C2, 8D, 12, 63, A0, 8D...
 
[+]

Entropy:
7.9973  (probably packed)

Code size:
30.5 KB (31,232 bytes)

The file net_framework_version_3_5_sp1.exe has been seen being distributed by the following URL.

http://download.apphit.com/11/.../NET_Framework_Version_3_5_SP1.exe

Scan net_framework_version_3_5_sp1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.