OcHelper.dll

Microsoft Office 2013

Microsoft Corporation

The library is part of Microsoft Office 2013. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Lync Click to Call BHO’.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2013

Description:
Microsoft Lync

Version:
15.0.4619.1000

MD5:
40836793a1a77a04fd0b1753ee418708

SHA-1:
6e8f82994789223b82a62463c28ff33283c48718

SHA-256:
74419e23d798bfe1ca367e2140dacc98607e83ece02da493794d278a4282a278

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/8/2016 3:15:00 PM UTC  (today)

File size:
213.7 KB (218,784 bytes)

Product version:
15.0.4619.1000

Original file name:
OcHelper.dll

File type:
Dynamic link library (Win64 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\microsoft office\office15\ochelper.dll

Digital Signature
Authority:
Microsoft Corporation

Valid from:
4/22/2014 12:39:00 PM

Valid to:
7/22/2015 12:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

Registration
CLSID:
{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}

ProgID:
OCHelper.BrowserHelper.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
4/29/2014 1:03:57 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.10

CTPH (ssdeep):
6144:R5h6VZeuqnFqK1KmHtbbS6CP0w8VZOdir9b:gZdqnFqK1JtG1P0whA

Entry address:
0x1F3B4

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 17, F1, FF, FF, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 87, FE, FF, FF, 0F, 1F, 84, 00, 00, 00, 00, 00, 0F, 1F, 80, 00, 00, 00, 00, 48, 8B, C4, 48, 89, 58, 18, 48, 89, 70, 20, 48, 89, 50, 10, 48, 89, 48, 08, 57, 41, 54, 41, 55, 48, 83, EC, 30, 4D, 8B, E9, 45, 8B, E0, 48, 8B, F2, 48, 8B, F9, 33, DB, 89, 58, D8, 89, 5C, 24, 24, 41, 3B, DC...
 
[+]

Entropy:
5.9980

Code size:
130.5 KB (133,632 bytes)

Internet Explorer BHO
Display name:
Lync Click to Call BHO

CLSID:
{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}

CLSID name:
Lync Browser Helper


Internet Explorer Extension
Name:
{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}