home

NDP461-KB3102436-x86-x64-AllOS-ENU.exe

Microsoft .NET Framework 4.6.1

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft .NET Framework 4.6.1

Description:
Microsoft .NET Framework 4.6.1 Setup

Version:
4.6.01055.00

MD5:
864056903748706e251fec9f5d887ef9

SHA-1:
83d048d171ff44a3cad9b422137656f585295866

SHA-256:
beaa901e07347d056efe04e8961d5546c7518fab9246892178505a7ba631c301

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/22/2024 10:25:16 PM UTC  (today)

File size:
64.5 MB (67,681,000 bytes)

Product version:
4.6.01055.00

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
NDP461-KB3102436-x86-x64-AllOS-ENU.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 7:42:45 PM

Valid to:
9/4/2016 7:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
9/21/2015 11:54:13 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1572864:SL78UzR3Tg8Xyh0/aHrATkd01efRk8GgxvRpwefR4/M6Wd1+yn:wtg8ih0CHyCRKgdgQR+MD7

Entry address:
0x18BDF

Entry point:
E8, CB, 19, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 50, 80, 42, 00, 75, 02, F3, C3, E9, 52, 1A, 00, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, D0, 66, 8B, 08, 83, C0, 02, 66, 85, C9, 75, F5, 66, 8B, 4D, 0C, 83, E8, 02, 3B, C2, 74, 05, 66, 39, 08, 75, F4, 66, 39, 08, 74, 02, 33, C0, 5D, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 85, F6, 74, 07, 8B, 7D, 0C, 85, FF, 75, 15, E8, EC, 1C, 00, 00, 6A, 16, 5E, 89, 30, E8, 90, 1C, 00, 00, 8B, C6, 5F, 5E, 5D, C3, 8B, 45, 10, 85, C0, 75, 05, 66, 89, 06, EB, DF, 8B, D6, 2B...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
155 KB (158,720 bytes)

The file NDP461-KB3102436-x86-x64-AllOS-ENU.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/48fc952ef6fd10ff19709ad81ff4e8dc/58876d62/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://122.2.223.42/data/ff6c70001a69ff8c/download.microsoft.com/download/E/4/1/.../NDP461-KB3102436-x86-x64-AllOS-ENU.exe

http://lb.cdn.m6web.fr/d/c/a/a3f7304194b1dc9d571bb3886128432a/588e2a11/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/f353db5c526ef775b2709a61fd667ef2/58860e81/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://www.lo4d.com/get-file/microsoft-framework-4/.../

http://lb.cdn.m6web.fr/d/c/a/2d8843f59bd43846b83138defe36b626/582a2cc0/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/47dcea7a1f7ff21c1c2553df3a58a9ab/585d17d4/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/7ec55fe36aa1886ea671d28cbce67ca6/57482d45/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://filehippo.com/download/file/.../

http://223.196.82.204/msupdate-hijack/id/E/4/1/.../NDP461-KB3102436-x86-x64-AllOS-ENU.exe/original/download.microsoft.com/download/E/4/1/.../NDP461-KB3102436-x86-x64-AllOS-ENU.exe

http://filehippo.com/download/file/.../

http://filehippo.com/fr/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/f23c8821ff62f0cec1c582376553bfa1/58381ca6/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://liveupdate.taxmann.com/.../NDP461-KB3102436-x86-x64-AllOS-ENU.exe

http://lb.cdn.m6web.fr/d/c/a/9898323a2f6a813a7b012a5682fc61b9/58459b84/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/8f08bf02ab33212e14545883fa9d7141/58922986/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/9899909af4a0bbe177a41d01bf714c90/580944cb/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/es/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/54126cb3239a728793dec33386262761/589a27b1/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/b07c267901bf4c55fda4ff561602a6b7/58683a19/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/6f31316146747bda89554995daaf3dab/5829b845/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/60d54efdd7a4e6bfa6d9af0053b83b73/589f69e9/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://lb.cdn.m6web.fr/d/c/a/06add31c35a30f037c59c0b41099c356/5856f715/soft/.../microsoft-net-framework_4-6-1_fr_12834.exe

http://filehippo.com/download/file/.../

Latest 30 of 1,169 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.