home

quicktimeinstaller.exe

Apple Computer, Inc.

This is a setup and installation application. The file has been seen being downloaded from software.oldversion.com and multiple other hosts.
Publisher:
Apple Computer, Inc.  (signed and verified)

MD5:
3bcb62296338da112213cab62ed1c002

SHA-1:
be8686f2b278bfc773d8ad5fa1c81d28aa090f82

SHA-256:
161c2ea97da3f40f3ca0da48b7765622d1cfe88139d9f661cc8e6c6107a68359

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 7:36:16 PM UTC  (today)

File size:
11.7 MB (12,276,904 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\win2000\quicktimeinstaller.exe

Digital Signature
Signed by:
Apple Computer, Inc.

Authority:
VeriSign, Inc.

Valid from:
1/7/2003 1:00:00 AM

Valid to:
1/10/2004 12:59:59 AM

Subject:
CN="Apple Computer, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Apple Computer, Inc.", L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:
0DE3615652A07218F2DD35ED4D33929E

File PE Metadata
Compilation timestamp:
2/3/1999 6:43:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:MaOuvype8l+58u3gL2mqCJRMXIfh1KG6Qapvv2dz+0jkLKXJ9X/kEOZZQKOPCygG:jKo358uY1qrYZo/MqqbXwZ2yeUscWca1

Entry address:
0x62A0

Entry point:
55, 8B, EC, 6A, FF, 68, 90, D1, 40, 00, 68, 70, 82, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, CC, D0, 40, 00, 33, D2, 8A, D4, 89, 15, 78, F2, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 74, F2, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 70, F2, 40, 00, C1, E8, 10, A3, 6C, F2, 40, 00, 33, F6, 56, E8, 3C, 1E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 7C, 1C, 00, 00, FF, 15, C8, D0, 40, 00, A3, 08, FA, 40, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
48 KB (49,152 bytes)

The file quicktimeinstaller.exe has been discovered within the following programs.

Jasc Paint Shop Photo Album 5  by Jasc Software, Inc.
Publisher's description - “Get your photos out of your camera and into your life with Jasc Paint Shop Photo Album. Now you can quickly and easily make the most of your digital photos. In just two clicks you can get your photos from camera to computer.”
www.jasc.com
9% remove it
Jasc Paint Shop Pro Studio, Dell Editon  by Jasc Software, Inc.
PaintShop Pro (PSP) is a raster graphics editor and, later in the series, a vector graphics editor for computers running the Microsoft Windows operating system. Picture tubes are graphic images with no background.
25% remove it
Kid Pix 4 Dexluxe School  by OCDSB
www.OCDSB.com
About 5% of users remove it
OpenDys Fonts  by OCDSB
About 8% of users remove it
QuickTime 7  by Apple Inc.
Publisher's description - “QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions.”
www.apple.com
10% remove it
Rhapsody Player Engine  by RealNetworks, Inc.
Publisher's description - “Rhapsody is the digital music service that allows you to listen all you want from wherever you are. It's the ultimate music cloud experience, with over 16 million songs and every genre to choose from. Check out old school hits, and the newest releases.”
www.rhapsody.com
21% remove it
 
Powered by Should I Remove It?

The file quicktimeinstaller.exe has been seen being distributed by the following 4 URLs.

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ4NTE0MjcyOTtzOjI6ImlkIjtpOjQwMTk7czo0OiJmaWxlIjtzOjE2OiJxdWlja3RpbWU2NTAuZXhlIjtzOjM6InVybCI7czo0OToiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3F1aWNrdGltZS02LTUtMCI7czo0OiJwYXNzIjtzOjMyOiIyOGM4MGIyZjgwYjcxM2VkZDk0MGE5MjEyNTdjMjcxYiI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ4MTMxOTU1MTtzOjI6ImlkIjtpOjQwMTk7czo0OiJmaWxlIjtzOjE2OiJxdWlja3RpbWU2NTAuZXhlIjtzOjM6InVybCI7czo0ODoiaHR0cDovL2VzLm9sZHZlcnNpb24uY29tL3dpbmRvd3MvcXVpY2t0aW1lLTYtNS0wIjtzOjQ6InBhc3MiO3M6MzI6ImQwZmM1NjFlZjI1OTE2MmUzYjUxZjBmYzBlOWE5NGVmIjt9

http://a1540.g.akamai.net/7/1540/52/20031010/qtinstall.info.apple.com/mickey/us/.../QuickTimeFullInstaller.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQxMDM3NzUyNjtzOjI6ImlkIjtpOjQwMTk7czo0OiJmaWxlIjtzOjE2OiJxdWlja3RpbWU2NTAuZXhlIjtzOjM6InVybCI7czo0OToiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3F1aWNrdGltZS02LTUtMCI7czo0OiJwYXNzIjtzOjMyOiI5Y2NmNTI2YWVmZWQzNWQ3YjRiMmQ5OGZhNmExNWMzOCI7fQ==

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.