home

rotor.dll

MD5:
bf3143bac4d228062b4b827890dedc73

SHA-1:
3fec033b4137cfb507f9c4dd7bf89544a00442e9

SHA-256:
5aae7227951ddfd42bf0109625a07aa1f4f19aca1fcfa6baee3bdb4868bbdc41

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/11/2025 11:00:53 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
14846

Norman
W32/Obfuscated_L.XJ
11.20140125

Trend Micro House Call
TROJ_GEN.R47H1A8
7.2.25

File size:
80 KB (81,948 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\labcenter electronics\proteus 7 professional\models\rotor.dll

File PE Metadata
OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.80

CTPH (ssdeep):
1536:h8Qr35mIAQIDhTPwAboglnbeL1KyDoGDo2L5wQAueJYhEX5Z9eRNu:h8QL5mIxIZYAUunbexro85wtyhEX5Zus

Entry address:
0x12810

Entry point:
50, 50, 53, 8B, 5C, 24, 10, 55, 8B, 6C, 24, 1C, 56, 8B, 74, 24, 1C, 57, FF, 15, C4, 24, 00, 10, A9, 00, 00, 00, 80, 89, 44, 24, 10, 74, 07, 80, 7C, 24, 10, 04, 72, 04, 31, C9, EB, 05, B9, 01, 00, 00, 00, 83, F9, 01, 19, D2, 42, 83, FE, 03, 89, 54, 24, 14, 0F, 87, 13, 01, 00, 00, FF, 24, B5, 50, 58, 01, 10, 83, FE, 01, 75, 2F, 83, 3D, 4C, 58, 01, 10, 00, 74, 07, 83, 7C, 24, 14, 00, 75, 1F, E8, 29, 02, 00, 00, 89, 1D, FC, 6E, 01, 10, E8, AA, 8B, FF, FF, E8, F1, 01, 00, 00, E8, 7C, 66, FF, FF, E8, D3, 01, 00...
 
[+]

Entropy:
6.3689

Code size:
63 KB (64,512 bytes)

Scan rotor.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.