home

mzap_cmd.exe

Korzh.com

Publisher:
Korzh.com  (signed and verified)

MD5:
59f295acd256f60c8d57da5d129e40c6

SHA-1:
2eceb8d7be1dc54848add471b80c6ce76ccf3aad

SHA-256:
cb6d976f65fce6001d177fa23efbfa9a0618afe546c0c509dc25283f111eeab5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 8:49:03 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
21196

File size:
90.1 KB (92,296 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\multi room audio player\mzap_cmd.exe

Digital Signature
Signed by:
Korzh.com

Authority:
The USERTRUST Network

Valid from:
10/30/2009 1:00:00 AM

Valid to:
10/31/2014 12:59:59 AM

Subject:
CN=Korzh.com, O=Korzh.com, STREET="Lisoviy ave. 35, 196", L=Kyiv, S=Kyiv, PostalCode=02166, C=UA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
6DF1F1B8FAA553D8A09BEDF8209864E9

File PE Metadata
Compilation timestamp:
4/13/2013 12:49:10 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.25

CTPH (ssdeep):
1536:EoLL8dOf8ATRnSbFp3J4/QrF1muLHEOPzy5GBbGHiTg0RyMl4/bIV:EoLL8dOfvRnRYqaXkHiTg0EMluk

Entry address:
0x111A0

Entry point:
55, 8B, EC, 83, C4, E4, 53, 56, 57, 33, C0, 89, 45, E4, 89, 45, E8, A1, AC, 2D, 41, 00, C6, 00, 01, B8, 58, F4, 40, 00, E8, 19, 7A, FF, FF, 33, C0, 55, 68, 90, 13, 41, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, 1C, 13, 41, 00, 64, FF, 30, 64, 89, 20, B8, 7C, 7E, 41, 00, E8, 47, 4B, FF, FF, E8, 0E, 2D, FF, FF, 85, C0, 7E, 42, 89, 45, EC, C7, 05, 78, 7E, 41, 00, 01, 00, 00, 00, FF, 35, 7C, 7E, 41, 00, 8D, 55, E8, A1, 78, 7E, 41, 00, E8, 4A, 2D, FF, FF, FF, 75, E8, 68, AC, 13, 41, 00, B8, 7C, 7E, 41, 00, BA...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
65 KB (66,560 bytes)

Scan mzap_cmd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.