home

QtCore4.dll

Qt4

Digia Plc and/or its subsidiary(-ies)

QtCore4.dll is part of the Qt framework, a cross-platform application and UI framework for C++. The file has been seen being downloaded from doc-0s-4s-docs.googleusercontent.com and multiple other hosts.
Publisher:
Digia Plc and/or its subsidiary(-ies)

Product:
Qt4

Description:
C++ application development framework.

Version:
4.8.4.0

MD5:
3cf7a126fc6df63874a7a0b28ad5bdbd

SHA-1:
26a7aad5b3a2d293694875eb3e8eecbd5493fb6c

SHA-256:
e2dfcf2b2863a10b56468f18b3ec259eb5d7367ab4b8e128ed99b7ed0f2d5a1e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 10:29:11 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0807
7.2.356

File size:
2.8 MB (2,892,800 bytes)

Copyright:
Copyright (C) 2012 Digia Plc and/or its subsidiary(-ies).

Original file name:
QtCore4.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
11/26/2012 2:20:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
49152:T5jdt3xcOivel/08NSXUd7z1hTZAW0fyKKxzL1hpD1vywTmJsv6tWKFdu9CMTbLc:T5jdtGOivel/zNYUd7Q9KxzL1hpD1vyl

Entry address:
0x1060

Entry point:
55, 89, E5, 56, 53, 83, EC, 10, 8B, 75, 0C, 83, FE, 01, 74, 47, 89, 74, 24, 04, 8B, 45, 10, 89, 44, 24, 08, 8B, 45, 08, 89, 04, 24, E8, 3A, A7, 16, 00, 89, C3, 83, EC, 0C, 83, FE, 01, 0F, 94, C2, 31, C0, 85, DB, 0F, 94, C0, 85, D0, 75, 47, 85, F6, 75, 0C, 8B, 0D, 00, 50, 34, 6E, 85, C9, 75, 46, 31, DB, 89, D8, 8D, 65, F8, 5B, 5E, 5D, C2, 0C, 00, C7, 04, 24, 80, 00, 00, 00, E8, 4D, F8, 16, 00, A3, 00, 50, 34, 6E, 85, C0, 74, 2B, C7, 00, 00, 00, 00, 00, A3, 10, 50, 34, 6E, E8, A4, A7, 16, 00, E8, 7F, A7, 16...
 
[+]

Entropy:
6.6005

Code size:
1.7 MB (1,767,936 bytes)

The file QtCore4.dll has been seen being distributed by the following 2 URLs.

https://doc-0s-4s-docs.googleusercontent.com/docs/securesc/soci8juktgmp01io6d2cg1vdi3aia703/qgnlua4qe42o7c09d011jcsv6mpcit97/1391270400000/01043478629033562061/.../0B8HDfkV1ahHiU2gzQkRfOWtOLTg?h=16653014193614665626&e=download

https://drive.google.com/uc?id=0B8HDfkV1ahHiU2gzQkRfOWtOLTg&export=download

Scan QtCore4.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.