home

uxstyle_sep23_x86_x64.exe

UxStyle

The Within Network, LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from mega.nz.
Publisher:
The Within Network, LLC  (signed and verified)

Product:
UxStyle

Version:
0.2.3.0

MD5:
d4139d7130117272e09637ef90f7f965

SHA-1:
2c3a57504be5eb936839e526bc5adb5a5ff97225

SHA-256:
79c5b2bf0894b11e923a5f033612931c723332b4232e88177b95c4694bd9b8ef

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 11:04:54 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0923
7.2.357

File size:
2.1 MB (2,201,888 bytes)

Product version:
0.2.3.0

Copyright:
Copyright (c) The Within Network, LLC. All rights reserved.

Original file name:
UxStyle_Bundle.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\uxstyle_sep23_x86_x64.exe

Digital Signature
Signed by:
The Within Network, LLC

Authority:
GlobalSign nv-sa

Valid from:
9/7/2013 2:06:36 AM

Valid to:
9/8/2014 2:06:36 AM

Subject:
CN="The Within Network, LLC", O="The Within Network, LLC", L=Purcellville, S=Virginia, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A4D35C720E701B33E48D37935CBE4BD5

File PE Metadata
Compilation timestamp:
8/26/2013 9:02:28 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:3SjXgrvS9P4mv20nVVOI22wtVvPIJIA2//C6dsxTviPg0bAubB7hz:3S0+9PN2IR2XV3JAIC6dsdqIMB5

Entry address:
0x265C1

Entry point:
E8, CD, 39, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, D0, 60, 45, 00, 75, 02, F3, C3, E9, C8, 40, 00, 00, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 44, 7C, 45, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 80, 61, 45, 00, 01, 0F, 82, 79, 41, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0...
 
[+]

Entropy:
7.9151  (probably packed)

Code size:
229 KB (234,496 bytes)

The file uxstyle_sep23_x86_x64.exe has been discovered within the following programs.

Aliengreen ThemePack  by mythemepack
www.mythemepack.com
About 7% of users remove it
AlienInspired ThemePack  by mythemepack
About 7% of users remove it
SkinPack 7  by SkinPack
www.skinpacks.com
About 5% of users remove it
SkinPack Adore v4  by Dhruv Chaturvedi
www.TechDhruv.com
About 5% of users remove it
SkinPack Grey Skinpack  by Dhruv Chaturvedi
About 8% of users remove it
SkinPack iOS10  by SkinPack
About 3% of users remove it
SkinPack iOS7-win7-ver1  by SkinPack
This is a SkinPack which is designed to customize Windows and enhance the appearance of the desktop, icons as well as other user-interface features.
About 1% of users remove it
SkinPack IronMan  by SkinPack
About 7% of users remove it
SkinPack league of legends  by SkinPack
About 5% of users remove it
SkinPack Mavericks-win8-ver2  by SkinPack
About 7% of users remove it
 
Latest 20 of 10 programs
Powered by Should I Remove It?

The file uxstyle_sep23_x86_x64.exe has been seen being distributed by the following URL.

https://mega.nz/temporary/.../VlpxECpb

Scan uxstyle_sep23_x86_x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.