home

cfgwiz.exe

Norton AntiVirus

Symantec Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NAV CfgWiz’.
Publisher:
Symantec Corporation  (signed and verified)

Product:
Norton AntiVirus

Description:
Norton AntiVirus Configuration Wizard

Version:
8.00.58

MD5:
97a2ad35e05a31b9b113fa1d36028557

SHA-1:
24d49d232d219a9608f3bb703097e76f9bb8cff4

SHA-256:
eec38abbd77d9e73643d83b0efaf705d9f6ac9f315a8bc68f8fd79e78c8f5fde

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 9:52:41 AM UTC  (today)

File size:
313.1 KB (320,592 bytes)

Product version:
8.00.58

Copyright:
Copyright (c) 2000-2001 Symantec Corporation. All rights reserved.

Original file name:
NAVCFGWZ.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\norton systemworks\norton antivirus\cfgwiz.exe

Digital Signature
Signed by:
Symantec Corporation

Authority:
VeriSign, Inc.

Valid from:
11/17/2000 1:00:00 AM

Valid to:
11/18/2001 12:59:59 AM

Subject:
OU=Symantec Research Labs, CN=Symantec Corporation, L=Santa Monica, S=California, C=US, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU="www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)96", OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Issuer:
OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Serial number:
155AF1A4D9A71D5214A27EF69C0F9A6A

File PE Metadata
Compilation timestamp:
8/24/2001 10:54:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:3otyuTbkirEMXHq+5KD7INtDYem5mN67IcY9SYFLkvKR/lw0kaDEmohUM8aSaTu4:8yuvpKqKOLRlw0XE8Bspv00lv

Entry address:
0x5428

Entry point:
55, 8B, EC, 6A, FF, 68, E0, 73, 40, 00, 68, CA, 55, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 74, 61, 40, 00, 59, 83, 0D, 74, 9D, 40, 00, FF, 83, 0D, 78, 9D, 40, 00, FF, FF, 15, 70, 61, 40, 00, 8B, 0D, 6C, 9D, 40, 00, 89, 08, FF, 15, 6C, 61, 40, 00, 8B, 0D, 68, 9D, 40, 00, 89, 08, A1, 68, 61, 40, 00, 8B, 00, A3, 70, 9D, 40, 00, E8, 60, 01, 00, 00, 39, 1D, 28, 95, 40, 00, 75, 0C, 68, F4, 55, 40, 00, FF, 15, 64, 61...
 
[+]

Entropy:
7.4170

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
20 KB (20,480 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NAV CfgWiz

Command:
C:\Program Files2\norton~1\norton~1\cfgwiz.exe \r


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.