home

dotnetfx35.exe

.NET Framework 3.5

Microsoft Corporation

This is a setup and installation application. This is installed with Windows Media Player 11. The file has been seen being downloaded from www.m-photo.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
.NET Framework 3.5

Description:
.NET Framework 3.5 Setup

Version:
3.5.30729.01

MD5:
d481cda2625d9dd2731a00f482484d86

SHA-1:
3dce66bae0dd71284ac7a971baed07030a186918

SHA-256:
0582515bde321e072f8673e829e175ed2e7a53e803127c50253af76528e66bc1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 10:13:33 AM UTC  (today)

File size:
231.5 MB (242,743,296 bytes)

Product version:
3.5.30729.01

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
dotnetfx35.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\temp\dotnetfx35.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/22/2007 8:23:13 PM

Valid to:
2/22/2009 7:33:13 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
6/1/2005 12:46:51 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6291456:7K/zHBDLJy8xham6G18u5+cH/FU5hhqTC8ZnU:CLJy8xgBukcH/OfhqTJZU

Entry address:
0x5972

Entry point:
E9, 26, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
30.5 KB (31,232 bytes)

The file dotnetfx35.exe has been discovered within the following program.

Windows Media Player 11  by Microsoft Corporation
Windows Media Player 11 was included with Vista with no updates, final release on XP. Windows Media Player is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images .
windows.microsoft.com/en-US/windows/download-windows-media-player
5% remove it
 
Powered by Should I Remove It?

The file dotnetfx35.exe has been seen being distributed by the following 50 URLs.

http://www.m-photo.com/dotnetfx35.exe

http://www.filehorse.com/download/file/.../

http://www.filehorse.com/download/file/.../

ftp://172.24.15.81/ftppermenant/.../NetFramework V3.5.30729.01.exe

http://www.ern.co.il/Fix/.../dotnet35.exe

https://www.ingressorapido.com.br/.../dotnet35.exe

http://w.x.baidu.com/alading/.../23411

https://docs.google.com/uc?export=download&confirm=N1FV&id=0B8ajdyZm_LAETXl5V2tzUjZybDQ

https://www.dropbox.com/sh/a5rcpr69797pe5i/.../dotnetfx35.exe

http://10.65.10.166/link_portal/.../dotnetfx35_full.exe

http://www.softportal.com/getsoft-10080-microsoft-net-framework-3.html

https://download.microsoft.com/download/7/0/3/.../dotNetFx35setup.exe

https://strefadealera.posnet.com.pl/download/Programy_serwisowe/Drukarki_fiskalne/.../dotnetfx35.exe

https://docs.google.com/uc?export=download&confirm=GpsQ&id=0B8ajdyZm_LAETXl5V2tzUjZybDQ

https://docs.google.com/a/.../uc?export=download&confirm=QJ6-&id=0BzbqqVzq7BSnZmZfZmxXRWZnU1U

http://ndrive2.naver.com/??????/?? ??? 2014/.../dotnetfx35.exe

http://maruey.2ebook.com/assets/library/.../dotnetfx35.exe

temp:dotnetfx35.exe

https://download.wetransfer.com/eu2/.../dotnetfx35.exe

http://www.megaware.com.br/drivers/desktop/motherboard/.../dotnetfx35.exe

https://doc-0o-2s-docs.googleusercontent.com/docs/securesc/m7hilmi1ia99v0a4hjgsnk28gho5ces4/qbqnm0oov80rmq76piaubftolkkv79fp/1470636000000/17275175025772940256/.../0B7Clna5B4ON5OTZwVzVBdnk4c2s?e=download

http://viettel-ca.vn/uploads/file/.../dotnetfx35.exe

http://www.download3k.com/DownloadLink3-Microsoft-.NET-Framework-3.5.html

http://www.filehorse.com/download/file/.../

https://docs.google.com/uc?export=download&confirm=klnI&id=0B-I8yBRFj5asSF94RUVzbDNUdUE

https://doc-08-bk-docs.googleusercontent.com/docs/securesc/s3g1cq42dlfsba5u83qna1puv4fgbm23/klghg23sk355rapn9tunq4uk9jpjfnvo/1470657600000/17275175025772940256/.../0B7Clna5B4ON5OTZwVzVBdnk4c2s?e=download

http://cdn.hancom.com/link/hancomshop/HOfficeNEO_HOME/.../dotnetfx35.exe

http://www.microsoft.com/downloads/info.aspx?na=90&p=&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=d0e5dea7-ac26-4ad7-b68c-fe5076bba986&u=http://download.microsoft.com/download/2/0/E/.../dotnetfx35.exe

http://www.download3k.com/DownloadLink2-Microsoft-.NET-Framework-3.5.html

http://10.70.52.173/dotnet35.exe

Latest 30 of 112 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.