home

octres.dll

Ressourcen für das Microsoft Office-Anpassungstool

Microsoft Corporation

OCTres provides the localized resources of the German language version (strings, images, icons, menu items) for the MS Office Customization tool. OCT is part of the Setup program and used to customize the installation of the Windows Installer-based Office.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Ressourcen für das Microsoft Office-Anpassungstool

Version:
12.0.4518.1014

MD5:
5c50ba38b8511836478dfb19ea5f15cb

SHA-1:
83f7662d90ed3989e460f239d31acba10876dc0c

SHA-256:
deb69785ef50dd96abf0b42f9e655737ae60ed1911b1958a7db51c97bd1cc4d4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 9:42:45 PM UTC  (today)

File size:
427.3 KB (437,600 bytes)

Product version:
12.0.4518.1014

Copyright:
© 2006 Microsoft Corporation. Alle Rechte vorbehalten.

Original file name:
octres.dll

File type:
Dynamic link library (Win32 DLL)

Language:
German (Germany)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\office\admin\de-de\octres.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 3:43:46 PM

Valid to:
10/4/2007 3:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
10/26/2006 10:51:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:iNNIJoooooBB4BBooooaVJoooooBB+oooooBoBoooooooooooBoooooooooooooJ:lJoooooBB4BBooooaVJoooooBB+oooo7

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1484

The file octres.dll has been seen being distributed by the following 12 URLs.

ftp://201.65.174.50/Pantera/Office 2007/Admin/.../octres.dll

ftp://hoptam.bsovn.com/Office 2007 full version/Office Enterprise 2007/Office Enterprise 2007/Admin/.../octres.dll

ftp://172.24.1.22/downloads/Office 2007/Admin/.../octres.dll

ftp://10.2.111.1/Office 2007 Enterprise/Setup/Admin/.../octres.dll

ftp://10.4.15.111/Software/Microsoft Products/MS Office 2007 Enterprise Edition/Admin/.../octres.dll

ftp://192.168.12.100/Microsoft.Office.2007.Enterprise.SP2.Integrated-GROUPNAMEHERE/Admin/.../octres.dll

ftp://portal.johnnyandrean.com/07-Installer/ofice2007/Admin/.../octres.dll

ftp://218.32.79.24/09掃瞄上傳/管理部/mis/office 2007/Admin/.../octres.dll

ftp://10.23.123.8/Standart App/MS Office 2007 x/Admin/.../octres.dll

ftp://27.254.83.203/home/thaiparcels/Downloads/Install All PC/Microsoft Office2007 Thai/Admin/.../octres.dll

ftp://p3kosi.no-ip.biz/NAS/01-APLICACIONES/PC/Adobe Reader XI/00-Office 2007 Enterprise/ADMIN/.../OCTRES.DLL

about:internet

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.