oregres.dll
Microsoft Office file version info
Library on Windows 2 known copies with hashes
Is it the real oregres.dll?
Installed in
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Signed byMicrosoft Corporation
ProductMicrosoft Office 2016, Microsoft Corporation
DescriptionMicrosoft Office
2 known copies
16.0.9226.2059 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\oregres.dll · signed by Microsoft Corporation
18dc159e046ff09ef9007779757b09d2a49d5d0d7ac2191c6d02cecde6752ded16.0.9226.2059 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\oregres.dll · signed by Microsoft Corporation
5aded430189ac98f22f93b368883209a2fe99f8ad65fd12c41b6fc0fe1143a8eFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.