home

keytweak_install.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from files1.majorgeeks.com and multiple other hosts.
MD5:
0437c75eb8b510b7d3715f047b6a84ff

SHA-1:
461af9edfba901e13f54f464b299dc2476fac2f8

SHA-256:
ddb0bad2a358191d2ee4ac8b8d359cc15e66a8dce6a49a8a6cd3b008f5345c1e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:01:31 AM UTC  (today)

File size:
280.5 KB (287,220 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\keytweak_install.exe

File PE Metadata
Compilation timestamp:
9/9/2006 10:44:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:Cq1nASnIi9Hty335NBpsiAPK8zRtwuM8JfmUwdtKoyzidrXR:nnb12nBpefKugMzi/

Entry address:
0x3137

Entry point:
81, EC, 7C, 01, 00, 00, 53, 55, 56, 33, F6, 57, 89, 74, 24, 18, BD, 40, 92, 40, 00, C6, 44, 24, 10, 20, FF, 15, 30, 70, 40, 00, 56, FF, 15, 70, 72, 40, 00, A3, F0, 47, 42, 00, 56, 8D, 44, 24, 30, 68, 60, 01, 00, 00, 50, 56, 68, 00, FD, 41, 00, FF, 15, 58, 71, 40, 00, 68, 30, 92, 40, 00, 68, 40, 3F, 42, 00, E8, 23, 28, 00, 00, BB, 00, B4, 42, 00, 53, 68, 00, 04, 00, 00, FF, 15, B4, 70, 40, 00, E8, 64, FF, FF, FF, 85, C0, 75, 24, 68, FB, 03, 00, 00, 53, FF, 15, B0, 70, 40, 00, 68, 28, 92, 40, 00, 53, E8, 0E...
 
[+]

Entropy:
7.9182

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file keytweak_install.exe has been discovered within the following programs.

KeyTweak - Keyboard Remapper (remove only)  by Travis Krumsick
Publisher's description - “KeyTweak is a simple utility that allows users to redefine their keyboard input signals. The functionality is made possible by a registry value first documented in Windows. Simply put, KeyTweak is just a front-end interface for editing a particular registry key.”
webpages.charter.net/krumsick
About 1% of users remove it
Toolwiz Time Freeze 2014  by ToolWiz
www.Toolwiz.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file keytweak_install.exe has been seen being distributed by the following 50 URLs.

http://files1.majorgeeks.com/72fde87f1f5436457658bfc37ddaf9c6/.../KeyTweak_install.exe

http://indir.gezginler.net/i/34160/.../

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1485335892&Signature=F7h5or0MnRkpKay5rzHhhKTEe3HlCdblAhVewg-3QL9BTQBIE5WVFKr10rEdYbDKjTu5HMLHGWfigPWi07hySVH7NqNU-3I7XhzRVVoj~u~VfFUD9WLdjaHzgomfVD~qsBTPqrR8tdi38RW9STwLRpJyVT5TntLg1xfhj4a~AXw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_es&type=PROGRAM&Expires=1482062904&Signature=iWcdG2W1yYFNniRB8MAWWJ4bCAZ4AOyQbuygHVAxcuMBhTdS3XXiuWNxNaep9-~I5BsC1fWy0Epw-8naKZtlZzWjUJQdkdp1WJ2fMmvdvAWkwtUUWPI1NfJW2LRuY1gFCLO5hY33zXjoInp7zhZY~UgyM0rpPTUJxOtEXIvTYgc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

https://keytweak.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/bj5bOGkVEbbihPtQMqZXjky8oqR/Zp U4ocNDkMSxScI68oL6/Or6V wWAfq4qOB9jzgwIbQDg8Ntb2DSQv2sxlCrPGCEVXLjdm78EaD2t Nxs32qHoYSHL3y7kloJoVp3saRbuIK/fzz803HCzppwFl25jXYzbm19Ky6ejPc2TDLzlG/FCyzfqJLRk L6W47Ae110YqknqQyIIKE3QbQfD3I7l9p 0xLPgTZK 7/sVQTKLo7B/Iq3YRhaiOvmD2g0tXL4dzwjhn0lnqK7YtNpFJ0/kFpOOVny6VEg7LuHFLo2aXPVelpnZUYnDieUhFmL3hi8cy20EqlcnMeL3wVRnftA7voEgCb/hqfSRsHPR2/XrzcnPAk7KhI7oVIxcmLKVw9f1S6GmDTa7n7b57dHiv6nzJmPElroFGbjsy/.../ObS4yxzf5YgSOePNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1481341756&Signature=WWdB3cgGvuVof~FM3HeraZnU5z08sdxhcu6Fl0sAZrlVUireXnIq81fDBDvs1OTQUr3gcCvhe9KCHwS3vCrvRxkfBknmg7ajeCrV1OnkEMrA3USDZXJ69kSx693REEJF2QmWmeh5tSch2cpO492QSZ1O2dObwptEFZ98WHSPHYU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://files1.majorgeeks.com/ff0abbcc0227c9124a804b084d161a2d/.../KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_es&type=PROGRAM&Expires=1469989805&Signature=S9Z253ip1fznfk84~19OjUsaJy89DpQPGDMQ5eLyaNZBCt-2M3KgF24Z40O5QoSyHmFWvEFrg7TJBbbMW2GMOUMZh0h5TyhFFqVVk3nRl5OOcu-85QxiErvWrMyLrNaoxoxScCXaa3QW18wSa-dO5HdpTLrdbCJx-Fb1pxc6Bk0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=p9mtnti9snreticn3jeapi87o3

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_es&type=PROGRAM&Expires=1480604405&Signature=YFma~4-pdW4cVSnFCydBd~CJx~niLHJV5JTqrzzIb-qguWXWV6a6BbYY1lTmzyhuRh67i8y3~cciDuGfa8Yoseh21Yyid9hB-B97zyAX-YVeN~WI0jcS3MWKWerEqXZenaQaqu5FT8adrZXfdl2QShNIlf-9eAjM4o-9CLtdX9A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

https://docs.google.com/uc?export=download&id=0B7t-TU4qT9MVWXotM2NIX2Y1UjA

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_br&type=PROGRAM&Expires=1481694804&Signature=Y2thb6qXzSKC-FoYElW19bSXX5hODpt834thc2nIMNOp3wBL8g8priwuJcjyhKw4mOKqCYbbyCscNux3xp3m~IZ-zvBucVlPCExjgy6wNO9jgcMNDIYs1fNUKnmxTAp5ZhVnAGHaKbna4cQMpd28B30oBincBIZbqJI49~mUaTk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_es&type=PROGRAM&Expires=1484390625&Signature=VUK91-aktn3p77EySMgXMVYQ4eMFPYzRRFJfZmtQzid46hUKierUrJxcVKYoc13sdYwuoPkGQSCTnWU54YMtsSWhnBaSaihwmT9wX-gAMuIWX3TZmKdXgy9XZFEspnxsoT6NPNQZW7-~tERIDnJsfIGOcxUF-42Yy5mULoCmutU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1483558302&Signature=TPFlejlR9igq7ahrSZFeJPwMtlX0uRNFgNoc5Vj9PiM3tIlR10A208WvvBRhkPKUYvMVL4vM37p70U6BW08l1bPn8RazWdhRsHb4gqatftTfu~zUzmDrf2MYDh~SvkfviNFiCiNSfzEB~FYFFTwMia0r6CacmEkMPGS1PTmQuKc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=b37rq95fo1lvn8rp0ugk6lng14

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1468205866&Signature=TMpH9nsTQPWjcNiJHeD40jQhwxx0Wu9iyO10DvPXDXU2MeofarCJdVVATW-e-YCAJpa5uherYTVmXJVV6ELPcJ9rEq2~cqesi3crKVoJCaHWI7gyOvt2GYi8nK6sl0DMCexL~yVKH5N-nOAuL5SaPXAWtpckozwiuwcbqDjOmMk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1479152232&Signature=DdMsdR0SU9q3wBwX4d4wl0St4TETFKDzwP4RNioYrk2Ug~J2flphkA3w41JnlCoAZYKRXprD2MNpYKdBdCPktmPJYPyjcVZZWvl22NgZYB64NrUr3FR2aRjfuYNJMJuBOWsaeuxZNN1ZN7Dbe67uIojKXndCYsKjoRH7S8zPRj0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_br&type=PROGRAM&Expires=1436404508&Signature=YhA~1kvb6KxoNoowxWYK~wBhWAJRZkTf-A1VH5ydkcluQAhx4cEQ-WFiq440szIuI~Yb88zOgShj7ei4Hvn-4zM8LI8qU7snKPVgpiTnEhYeL~b4J9~tD4d2m4BSiiclvZFV1-wYenEWak4EITSS4N70KD1lqS0TVf40ny3w6EM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_br&type=PROGRAM&Expires=1479057276&Signature=Pi-uC8dtNTBJzDXhb7F6vKrKjWI7iQa7fEQ8Gai06VvZG8ta8hXY3qxWvdI2oWCBy8y798Yp7XWDpJYcfjgLiWh57QjkfNXldemT8SBo7HMa6GbVRtYKwXKq0JqQsnoHBV14BA2e7cECIgdCVXTQgn3JXECEKxSw-9knQLPxbwA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_br&type=PROGRAM&Expires=1471598929&Signature=CdczzMykblW48uzmR1jlX4VwydjtOPm-Ll-Q7eTDM8eWLK0xnidYnwXTFWb6shDUCxOALE-Jqfnxvo7zt0y7iyU7UxmpB-ydsANE37dFQ~-P3nbSFw5Jzb4UFM7ezSIfrwOk~qZJorfT~xp9f8Gf9cUjN1p0G3esXTaIq87uzCo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://download.softpedia.com/dl/2699f341f8e30bc4f17dbafec317aac4/581e307c/100010487/software/.../KeyTweak_install.exe

https://download.bleepingcomputer.com/dl/f30c9dd30cb61baaf30489020a932f77/57d3fafb/windows/utilities/keyboard-mouse-utilities/k/.../KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_br&type=PROGRAM&Expires=1478055057&Signature=YKETua6Qd31z0Zma0YVkNnKtstdXB7uo3AQ~pDfhwdHiyf71nTZkDD8ATk6FdQIKUrkX~PTl-RAlngW6SQwcgtYacjU2eRB6cI8NHJMmg6iAFl7AkItnmc6AJy9KmQRrJ1IJnxT-pcHhiEBk0l3ncVa8Rxzg-bk~AC3gqHpleuo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

https://download.bleepingcomputer.com/dl/ccc042999935dbde4002f744be7254c6/5840d3f1/windows/utilities/keyboard-mouse-utilities/k/.../KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1475864699&Signature=SFd8ZBsLqU5koXGY2Gbi7Zg2Tt1hy4p~AXvAxPF7g7S5GCr4qx0BNuuns4DkeTtBBbinmRyTNigCpsaaiYytJtSMQVMT3vnpp9SjcFsKMOa-h7rrLOUG5TIlZtklIVfycelMj0c7wxB8e4wE54TFLcBOCmnLME0NJGIYBEsEEFU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_en&type=PROGRAM&Expires=1444454597&Signature=UGK8qfbweqaSw4DZi~bG8n2PnxnhxUhr8SoBdGNmPNbHTAayhrifZ-XO4QPs2SJbJH0pp5NG4s3rVGgje0iBn6e1XKtMVNR9V2XGRzC8oMBTlxFRv6hjs~zCz1NDiucXTxDjHbvZpi82INGOOOjY3gwp~xRbCzkiHkafHes84hk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_br&type=PROGRAM&Expires=1479270173&Signature=H1vKz8FI0Cu~4uTq~iOMdc1Ny00PLfTa8aUikkPlEx-22PfwClaBCqGaE6HB8vTgYnroBXnOrruk~s0wwxuGO4~ZezbC0xQCosiAaQEgOWCtMqTf4exbVby8hDXjic1K~ELrhLGxI02ncO0OSXNuDFhhbCVDB7FinpbpgMoSSUI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

https://ro.softpedia-secure-download.com/dl/67e025fbed13fa8c23f55770c693470c/584aec67/100010487/software/.../KeyTweak_install.exe

http://itsarang.tistory.com/.../cfile7.uf@24627F4654A500E8215DAF.exe

http://gsf-cf.softonic.com/461/af9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34625&instance=softonic_it&type=PROGRAM&Expires=1457221039&Signature=I6e17NnkeaU9IQxwFHnVg9TX5VOGKGS2Ap8vMVPTSD207zr86~nLw3OKCfXVYugkTHHz20~oq~9pKH0HbhPiAUC7dEvITwYGHAdxr7vn~CMYD9sSaA5aSIxgeqt7z~TFSDeWu7JVkgIKG8TeUt38kV6VcBDSWG~ylsbagynebuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KeyTweak_install.exe

Latest 30 of 185 download URLs

Scan keytweak_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.