» XPRESTOR.EXE
Overview
Analysis
File Details
Programs (1)

XPRESTOR.EXE

Mediafour XPlay

Mediafour Corporation

This is installed with XPlay 3.

File name:

XPRESTOR.EXE

Publisher:

Mediafour Corporation (signed and verified)

Product:

Mediafour XPlay

Description:

XPlay iPod Restore Wizard

Version:

3.0.0.3

MD5:

bddfe3196487da474df3eba4a708b912

SHA-1:

67918a0c5a631c8f695da50ffbf7135e2f79aa2a

SHA-256:

df9584d987d22e7af539b12c2c2031b82336bdbf3d29e536440c1b92b75bda1a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 10:02:56 PM UTC (today)

File size:

351.1 KB (359,544 bytes)

Product version:

3.0.0

Original file name:

XPRESTOR.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\mediafour\xplay 3\xprestor.exe

Digital Signature

Signed by:

Mediafour Corporation

Authority:

VeriSign, Inc.

Valid from:

7/12/2007 8:00:00 PM

Valid to:

9/8/2010 7:59:59 PM

Subject:

CN=Mediafour Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mediafour Corporation, L=West Des Moines, S=Iowa, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

20B6C0BFEAEE9A994EDDBAA33016984E

File PE Metadata

Compilation timestamp:

1/31/2008 10:22:20 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:8BUpeJourCa6sPMBQQQyhgS4t4mBIi9GZbY42beZssTB7d7Yd0DS:QUpqouV7Ft4mBIi90H2MssTVd7s0u

Entry address:

0x2F3B6

Entry point:

E8, 85, 70, 00, 00, E9, 17, FE, FF, FF, 2D, A4, 03, 00, 00, 74, 22, 83, E8, 04, 74, 17, 83, E8, 0D, 74, 0C, 48, 74, 03, 33, C0, C3, B8, 04, 04, 00, 00, C3, B8, 12, 04, 00, 00, C3, B8, 04, 08, 00, 00, C3, B8, 11, 04, 00, 00, C3, 53, 55, 56, 57, BD, 01, 01, 00, 00, 8B, F0, 55, 33, FF, 8D, 5E, 1C, 57, 53, E8, 99, C9, FF, FF, 89, 7E, 04, 89, 7E, 08, 89, 7E, 0C, 33, C0, 8D, 7E, 10, AB, AB, AB, B8, 98, D0, 44, 00, 83, C4, 0C, 2B, C6, 8A, 0C, 18, 88, 0B, 43, 4D, 75, F7, 8D, 8E, 1D, 01, 00, 00, BE, 00, 01, 00, 00... 
[+]

Entropy:

6.3134

Code size:

236 KB (241,664 bytes)

The file XPRESTOR.EXE has been discovered within the following programs.

XPlay 3 by Mediafour Corporation

www.mediafour.com/products/xplay

36% remove it

Scan XPRESTOR.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.