home

octres.dll

Risorse dello Strumento di personalizzazione di Microsoft Office

Microsoft Corporation

OCTres provides the localized resources of the Italian language version (strings, images, icons, menu items) for the MS Office Customization tool. OCT is part of the Setup program and used to customize the installation of the Windows Installer-based Office.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Risorse dello Strumento di personalizzazione di Microsoft Office

Version:
12.0.4518.1014

MD5:
1fdbf50f5b27af2bf4ab5eb546b1c694

SHA-1:
83c5dc4d397577cf2d10df817203400c2f76d88b

SHA-256:
c09d064c05be6ed179046736e28044f99d6b109ffc7432747ee9156b5640b102

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 9:53:29 PM UTC  (today)

File size:
425.4 KB (435,584 bytes)

Product version:
12.0.4518.1014

Copyright:
© 2006 Microsoft Corporation. Tutti i diritti riservati.

Original file name:
octres.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Italian (Italy)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\office\admin\it-it\octres.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 3:43:46 PM

Valid to:
10/4/2007 3:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
10/26/2006 10:51:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:QNNIJoooooBB4BBooooaVJoooooBB+oooooBoBoooooooooooBooooooooooooo3:PJoooooBB4BBooooaVJoooooBB+ooooR

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1428

The file octres.dll has been seen being distributed by the following 12 URLs.

ftp://201.65.174.50/Pantera/Office 2007/Admin/.../octres.dll

ftp://hoptam.bsovn.com/Office 2007 full version/Office Enterprise 2007/Office Enterprise 2007/Admin/.../octres.dll

ftp://172.24.1.22/downloads/Office 2007/Admin/.../octres.dll

ftp://10.2.111.1/Office 2007 Enterprise/Setup/Admin/.../octres.dll

ftp://10.4.15.111/Software/Microsoft Products/MS Office 2007 Enterprise Edition/Admin/.../octres.dll

ftp://172.25.3.100/pub/software/offic 2007/Admin/.../octres.dll

ftp://192.168.12.100/Microsoft.Office.2007.Enterprise.SP2.Integrated-GROUPNAMEHERE/Admin/.../octres.dll

ftp://portal.johnnyandrean.com/07-Installer/ofice2007/Admin/.../octres.dll

ftp://218.32.79.24/09掃瞄上傳/管理部/mis/office 2007/Admin/.../octres.dll

ftp://10.23.123.8/Standart App/MS Office 2007 x/Admin/.../octres.dll

ftp://27.254.83.203/home/thaiparcels/Downloads/Install All PC/Microsoft Office2007 Thai/Admin/.../octres.dll

ftp://p3kosi.no-ip.biz/NAS/01-APLICACIONES/PC/Adobe Reader XI/00-Office 2007 Enterprise/ADMIN/.../OCTRES.DLL

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.