home

NDP46-KB3045560-Web.exe

Microsoft .NET Framework 4.6

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from 182.176.139.125 and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft .NET Framework 4.6

Description:
Microsoft .NET Framework 4.6 Setup

Version:
4.6.00081.00

MD5:
58d88886a42aeb5d17e8b232c2697899

SHA-1:
480ca134b9e3f2437df10719d5a8c77ddec0a4f1

SHA-256:
e5ced0f95e6aefc4e4ee0884ca7ce317fff7d91edbda32243a436123e46d9439

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/16/2024 3:38:44 PM UTC  (today)

File size:
1.4 MB (1,497,400 bytes)

Product version:
4.6.00081.00

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
NDP46-KB3045560-Web.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ndp46-kb3045560-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/5/2015 3:42:45 AM

Valid to:
9/5/2016 3:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
11/19/2014 8:56:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:d7uBlJ/jaMSmtLvUDSRbm4Jah1rVxpYRsQ0AQu72O8vUDcsBisPX:dalJ/jCeTUDBzrVx6RPgkiLcf

Entry address:
0x1894B

Entry point:
E8, CF, 19, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 50, 80, 42, 00, 75, 02, F3, C3, E9, 56, 1A, 00, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, D0, 66, 8B, 08, 83, C0, 02, 66, 85, C9, 75, F5, 66, 8B, 4D, 0C, 83, E8, 02, 3B, C2, 74, 05, 66, 39, 08, 75, F4, 66, 39, 08, 74, 02, 33, C0, 5D, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 85, F6, 74, 07, 8B, 7D, 0C, 85, FF, 75, 15, E8, F0, 1C, 00, 00, 6A, 16, 5E, 89, 30, E8, 94, 1C, 00, 00, 8B, C6, 5F, 5E, 5D, C3, 8B, 45, 10, 85, C0, 75, 05, 66, 89, 06, EB, DF, 8B, D6, 2B...
 
[+]

Entropy:
7.9369  (probably packed)

Code size:
154 KB (157,696 bytes)

The file NDP46-KB3045560-Web.exe has been seen being distributed by the following 41 URLs.

http://182.176.139.125/data/02ebe48d01f08c9f/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.190.3.66/data/04f095ded95dcbc7/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.190.3.130/data/05d460cfa6f5b75c/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.190.3.130/data/046f866f12744d4c/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.176.138.20/data/03a302e6865ab0bf/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://descargar.freedownloadmanager.org/Windows-PC/.../GRATIS-4.6.81.html?ac52f5f

http://182.190.3.204/data/01cb2f2f89bb8c01/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.176.138.20/data/01c07fcc26040bbb/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://103.1.138.139/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://151.99.86.70/data/045955e2811768d7/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.190.3.162/data/04388445f7068eeb/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://lnkr.us/get?key=b11e8793cade0a4fedc9f17323b20200&ref=http://vessoft.hu/software/windows/download/netframework&uid=87680563&out=http://download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://59.103.253.234/data/05064f189d23d408/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://113.171.224.165/.../NDP46-KB3045560-Web.exe

http://182.190.3.66/data/02413130e95a27b7/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://dl.msdn.com/.../mu_.net_fx_4.6_for_win_vista_sp2_7sp1_8_8dot1_win_server_2008sp2_2008r2sp1_2012_2012r2_x86_x64_wi_6837960.exe

http://122.2.223.10/data/ea0c50b0102a7e22/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://62.8.79.10/data/0771265126e8d099/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://118.175.9.50/msupdate/1/4/A/.../NDP46-KB3045560-Web.exe

http://dl.msdn.com/.../mu_.net_fx_4.6_for_win_vista_sp2_7sp1_8_8dot1_win_server_2008sp2_2008r2sp1_2012_2012r2_x86_x64_wi_6837960.exe

http://122.2.223.10/data/bf79b0f046386376/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://182.190.4.107/data/0296f2dc78e0315a/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://go.microsoft.com/.../?LinkId=528222

temp:NDP46-KB3045560-Web.exe

http://totalsoft.org/go.php?site=http://download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://www.netzwelt.de/.../28717_2-microsoft-net-framework.html?sig=377a0f3f38a5bda859431512ec20f5dd

http://201.48.127.4/msupdate-hijack/id/1%2O2¯2F14A6C422-0D3C-4811-A31F-5EF91A83C3?2FNDP46-KB3045560-Web.exe/original/download.microsoft.com/download/1/4/A/.../NDP46-KB3045560-Web.exe

http://click.linksynergy.com/deeplink?id=XdSn0e3h3*k&mid=24542&u1=412831M1M160301045806TAN&murl=http://go.microsoft.com/.../?LinkId=528222&source=dotnet

http://download1389.mediafire.com/q46p368iqyyg/.../NDP46-KB3045560-Web.exe

http://software.thaiware.com/download_url.php?id=6057

Latest 30 of 41 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.