home

conwiz.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from upgrade.samsungmobile.com.
MD5:
f46bfe497185961b4f9d647a6f2d93e9

SHA-1:
33c70f935e72ea8a3f8755cea8024aa01c23a1f1

SHA-256:
70b8f0e7900060adacf3b6ca9a001d05ef264745204974dd30e7866be50fee27

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:21:07 PM UTC  (today)

File size:
270.9 KB (277,371 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\samsung\samsung pc studio 3\update\conwiz.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:f/AnPTiNP/GA6tJB0D2U093jQRaQ9eCCud/fQcVh89:fo7iF/GAcJB0DA9UxemfDh89

Entry point:
50, 4B, 03, 04, 14, 00, 02, 00, 08, 00, C6, 3B, F0, 38, C3, 7A, 11, F8, EB, 3A, 04, 00, 00, D0, 0C, 00, 0A, 00, 11, 00, 43, 6F, 6E, 57, 69, 7A, 2E, 65, 78, 65, 55, 54, 0D, 00, 07, 8B, A3, 7D, 48, 78, 24, 99, 48, 27, 19, 99, 48, EC, 3B, 7F, 74, 54, D5, 99, 77, 92, 17, 78, C1, 81, 0C, 90, 68, 04, AA, F1, 94, 4A, 24, 2C, 86, 5F, 12, 48, 22, 21, E4, 85, 80, 19, 99, 19, 98, 00, 2A, 20, 9A, E0, 24, 92, 40, C9, 44, D1, 12, 17, 1C, 73, CA, E3, 31, FD, 61, E5, 54, B7, 1E, C4, EA, B1, EC, 11, 2B, B6, 48, 09, A5, 36...
 
[+]

The file conwiz.exe has been seen being distributed by the following URL.

http://upgrade.samsungmobile.com/pcstudio3/0413/1/.../ConWiz.exe

Scan conwiz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.