The Qt5Core dll (C++ Application Development Framework) The Qt Company Ltd File Malware Analysis

The Qt5Core.dll (C++ Application Development Framework) File Analysis

Updated 6 months ago

Checked by Malware Check

Qt5Core.dll

Hash Type	Value	Action
MD5	665dc5d16c733e789ad283da9b5d9cc3
SHA1	6f679306a8af8909e77cbb5866f143bb52905df1
SHA256	78da431caf71f20752c7ff73a777e728097922887039bff2c53e449267b0b405
SHA512	4b3e4a0698cad4b08d54849a46b36ae3af0aa70c39f2404c09c8332b26d1e9bcd45d8eb5568589dd24d62b46a72dbfa0ebdd5a007bc5748d27fb62e11cdf8061
ImpHash	cc524ec6e43325a2c3f95f8d21a954fc

Hash Type

Value

Action

MD5

665dc5d16c733e789ad283da9b5d9cc3

SHA1

6f679306a8af8909e77cbb5866f143bb52905df1

SHA256

78da431caf71f20752c7ff73a777e728097922887039bff2c53e449267b0b405

SHA512

4b3e4a0698cad4b08d54849a46b36ae3af0aa70c39f2404c09c8332b26d1e9bcd45d8eb5568589dd24d62b46a72dbfa0ebdd5a007bc5748d27fb62e11cdf8061

ImpHash

cc524ec6e43325a2c3f95f8d21a954fc

PE Analysis

Basic Information

▼

Image Base	`0x180000000`
Entry Point	`0x1802c6a34`
Compilation Time	2020-03-31 04:25:53
Checksum	0x005e9e80 (Actual: 0x005e906b)
OS Version	6.0
PEiD Signatures	`PE32+ executable (DLL) (GUI) x86-64, for MS Windows`
PDB Path	`C:\Users\qt\work\qt\qtbase\lib\Qt5Core.pdb`
Digital Signature	The expected hash does not match the digest in SpcInfo
Imports	23 libraries
Exports	7920 functions
Resources	2 Resources
Sections	6 Sections

Version Information

▼

CompanyName	The Qt Company Ltd.
FileDescription	C++ Application Development Framework
FileVersion	5.12.8.0
LegalCopyright	Copyright (C) 2020 The Qt Company Ltd.
OriginalFilename	Qt5Core.dll
ProductName	Qt5
ProductVersion	5.12.8.0
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	3,043,439 bytes	3,043,840 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`3809D864703AA9BB0FC99330E2247B5E`
`.rdata`	`0x002e9000`	2,818,534 bytes	2,818,560 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`59DFFA22071018997CB76238C6A0B95F`
`.data`	`0x0059a000`	165,760 bytes	136,192 bytes	2.59 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F6F39729EA7DDD9A5B21BD7BEE47E543`
`.pdata`	`0x005c3000`	148,296 bytes	148,480 bytes	6.33 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A8872944D969B2747489C821BB5AC488`
`.rsrc`	`0x005e8000`	1,280 bytes	1,536 bytes	3.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`51A64F3F7E694B7D069F80CC4670CED8`
`.reloc`	`0x005e9000`	8,964 bytes	9,216 bytes	5.41 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`88E7417040338DF783B76AFA201E33F1`

Resource Analysis

▼

Total Resources: 2 (1,117 bytes)

Resource Type	Count	Total Size	Percentage
RT_VERSION	1	736 bytes	65.9%
RT_MANIFEST	1	381 bytes	34.1%

Certificate Chain Analysis

▼

Certificate Information

Product	Qt5
Description	C++ Application Development Framework
File Version	5.12.8.0
Original Name	Qt5Core.dll
Signing Date	04:38 AM 03/31/2020 (2084 days ago)
Verification Status	The digital signature of the object did not verify.
Signers	The Qt Company Oy; thawte SHA256 Code Signing CA; thawte
Counter Signers	Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Copyright	Copyright (C) 2020 The Qt Company Ltd.

Certificate Chain Summary

Symantec Time Stamping Services CA - G2 #1 Primary

Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59

Signature Algorithm: sha1RSA

Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B

thawte SHA256 Code Signing CA #2 Chain

Validity Period: 2013-12-10 00:00:00 → 2023-12-09 23:59:59

Signature Algorithm: sha256RSA

Serial Number: 71 A0 B7 36 95 DD B1 AF C2 3B 2B 9A 18 EE 54 CB

Symantec Time Stamping Services Signer - G4 #3 Chain

Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59

Signature Algorithm: sha1RSA

Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50

The Qt Company Oy #4 Chain

Validity Period: 2017-09-18 00:00:00 → 2020-11-24 23:59:59

Signature Algorithm: sha256RSA

Serial Number: 06 E9 57 9A AB 76 3E 72 07 99 89 C6 89 D2 B4 2D

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Qt5Core.dll
File Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-06-01 11:00:24 UTC

The Qt5Core.dll (C++ Application Development Framework) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification