home

todoc.dll

Chongqing Duoduo E-Commerce Co., Ltd.

Publisher:
Chongqing Duoduo E-Commerce Co., Ltd.  (signed and verified)

MD5:
9c0c210b752f12e963ee2e1b16b75008

SHA-1:
2e5ee1d81c7c53d1963ae341057da7442f68de13

SHA-256:
e75e1b4a845fa25266c06aaee6a8816b45eb1fce6524fe669452be2ed3e1c401

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 12:09:58 AM UTC  (today)

File size:
256.5 KB (262,696 bytes)

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\yypdfreader\convert\todoc.dll

Digital Signature
Signed by:
Chongqing Duoduo E-Commerce Co., Ltd.

Authority:
WoSign CA Limited

Valid from:
1/12/2016 4:47:26 PM

Valid to:
1/12/2017 4:47:26 PM

Subject:
CN="Chongqing Duoduo E-Commerce Co., Ltd.", O="Chongqing Duoduo E-Commerce Co., Ltd.", L=Chongqing, S=Chongqing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
1D6A2F0D66C13867550B67E4B62C2B4F

File PE Metadata
Compilation timestamp:
1/19/2016 11:59:05 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:NBI4J0sR9kdu5eLHDTF8ZcfbOPSoVoSZ/DsL:Nu42sR5Ysm

Entry address:
0x196CC

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 7F, 9D, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 83, EC, 28, 48, 8B, 0D, D1, 37, 02, 00, FF, 15, E3, 0A, 01, 00, 48, 85, C0, 74, 02, FF, D0, B9, 19, 00, 00, 00, E8, B2, 47, 00, 00, BA, 01, 00, 00, 00, 33, C9, E8, AE, 34, 00, 00, 48, 83, C4, 28, E9, 65, 34, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Entropy:
6.2356

Code size:
164 KB (167,936 bytes)

Scan todoc.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.