twelvekeyssetup.exe

TwelveKeys

NCH Software

This is a self-extracting archive and installer. This is installed with multiple programs including Crescendo Music Notation Editor and TwelveKeys Music Transcription Software. The file has been seen being downloaded from twelvekeys.en.softonic.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
TwelveKeys

Description:
TwelveKeys Music Transcription Software

Version:
1.60

MD5:
375716f5c956e8a5fa3319424316d5ec

SHA-1:
eb1921a66f0b846abbcf443177a5e0a0334f864a

SHA-256:
305d65aa92f38da5aab111f10007758041e491b52829fe649de4b8163b00d49c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 4:29:59 AM UTC  (today)

File size:
358.6 KB (367,192 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\twelvekeyssetup.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
5/19/2013 9:00:00 PM

Valid to:
8/7/2015 8:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
9/10/2013 9:59:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:KdkKH1CYHOmbEkPak8qMv9wfAgK/0OpQR6E80Em78OsqVOeGGGC4xZNUm0W:Kd/H1ImAkPak8RvyQ/Xu6Q7RHzGxZNUQ

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, F4, 14, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, 3D, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 10, 10, 40, 00, 8B, C8, E8, 2E, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 1C, 10, 40, 00, 8D, 44, 24, 68, 50, FF, 15, 38, 10, 40, 00, F6, 84, 24, 94, 00, 00, 00, 01, 75, 0A, 66, C7, 84, 24, 98, 00, 00, 00, 01, 00, 8D, 84, 24, E0, 0C, 00, 00, 50, 68, 04, 01, 00, 00, FF, 15, 00, 10, 40, 00, 6A, 63...
 
[+]

Entropy:
7.9798

Developed / compiled with:
Microsoft Visual C++

The file twelvekeyssetup.exe has been discovered within the following programs.

During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nch.com.au/index.html
22% remove it
Publisher's description - “TwelveKeys is a music program designed to assist musicians as they transcribe music recordings. TwelveKeys is perfect for musicians trying to learn how to play a piece of recorded music without having the sheet notation, or to assist notating other compositions and improvisations.”
www.nch.com.au/twelvekeys/index.html
25% remove it
 
Powered by Should I Remove It?

The file twelvekeyssetup.exe has been seen being distributed by the following 7 URLs.

http://twelvekeys.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOXcWk/i WOGeImNQ/.../NAqHlSvM2KCenzdnlEdAk9K8SVmpYGzRInVurroGbL4bArx9p0Hpl6soHMX3ToMiymPs cJnwvg=

Scan twelvekeyssetup.exe - Powered by Reason Core Security