home

IPv6RExUI.EXE

FLET'S IPv6リゾルバサービス （IPv6RExUI)

NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IPv6Resolver Services UI’.
Publisher:
東日本電信電話株式会社  (signed by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION)

Product:
FLET'S IPv6リゾルバサービス （IPv6RExUI)

Version:
1, 2, 0, 0

MD5:
3ade5c682a642927648dab5cf393d9f1

SHA-1:
6ef5a31b7d20857656a19e3196b564662050f471

SHA-256:
d3d6d94a31aa5b3e668590ae67797bcca8fbd2194649ff36292bd1ded18e87ca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:26:50 PM UTC  (today)

File size:
33.4 KB (34,232 bytes)

Product version:
1, 2, 0, 0

Copyright:
Copyright (C) 2007 東日本電信電話株式会社

Trademarks:
FLET'S IPv6リゾルバサービス

Original file name:
IPv6RExUI.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\fletsnet\ipv6rexui.exe

Digital Signature
Signed by:
NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION

Authority:
VeriSign, Inc.

Valid from:
1/23/2008 9:00:00 AM

Valid to:
1/23/2009 8:59:59 AM

Subject:
CN=NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION, OU=Consumer Business Headquarters Broadband Service Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION, L=Shinjuku-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1E59F39A5A6D58DB8A8E551E35AFDDFA

File PE Metadata
Compilation timestamp:
7/8/2008 10:35:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:8nmMTwBKYZ8DwEvA4D+1IMT9geWvnuj5w2+GuYJLWlTbyG:83TwBdA/Y4snZgeWvnt2D3LObyG

Entry address:
0x26A0

Entry point:
55, 8B, EC, 6A, FF, 68, 90, 36, 40, 00, 68, 26, 28, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 0C, 32, 40, 00, 59, 83, 0D, C0, 46, 40, 00, FF, 83, 0D, C4, 46, 40, 00, FF, FF, 15, 08, 32, 40, 00, 8B, 0D, B4, 46, 40, 00, 89, 08, FF, 15, 04, 32, 40, 00, 8B, 0D, B0, 46, 40, 00, 89, 08, A1, 00, 32, 40, 00, 8B, 00, A3, BC, 46, 40, 00, E8, 16, 01, 00, 00, 39, 1D, D0, 45, 40, 00, 75, 0C, 68, 22, 28, 40, 00, FF, 15, FC, 31...
 
[+]

Entropy:
4.9829

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
8 KB (8,192 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IPv6Resolver Services UI

Command:
C:\Program Files\fletsnet\ipv6rexui.exe


Scan IPv6RExUI.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.