BitLockerWizard.exe

  • File Path: C:\WINDOWS\system32\BitLockerWizard.exe
  • Description: BitLocker Drive Encryption Wizard

Hashes

Type Hash
MD5 6B919B72E58391B39A09EE388FA89BBB
SHA1 91C11C24163DC644BB25D777790CBF162078FD3C
SHA256 55E42024DE2EB71766FEC591C9F1F4827B367C958FA9F28AA4A8B8D128FE1FAF
SHA384 528ADE0BC8FEC1E3C804EAB34FE2CED272AEFF6E759D493368CF3C96901137CF9008CD26BB91B33CB6BE96649C6333D2
SHA512 4E92E654A16A793E78460769305FB096BBF774823FDCEFFA51E5021C03C96D7F37F7B29008A78669FCCA878D321B140C97A6B15671670E5CA8A84618468AB1CA
SSDEEP 3072:b6CtwnVS570M9kdatGCO+xmBc+hMPhPsx:GLVs7nyatGt+SYF

Runtime Data

Usage (stderr):

Bitlocker Wizard Launcher
    	Usage: BitlockerWizard X: <P|R|S|T>
    	    P is mapped to  FVEUI_AFTER_TPM_PPI_NO_REBOOT
    	    R is mapped to  FVEUI_AFTER_TPM_PPI_REBOOT
    	    S is mapped to  FVEUI_MODE_CREATE_NO_REBOOT
    	    T is mapped to  FVEUI_MODE_CREATE_AFTER_REBOOT
    	    U is mapped to  FVEUI_MODE_DUPLICATEKEY
    	    V is mapped to  FVEUI_MODE_RESUME
    	    W is mapped to  FVEUI_AFTER_REPARTITION
    	    X is mapped to  FVEUI_PARAM_AFTER_REPARTITION_TPM_PPI
    	    Y is mapped to  FVEUI_PARAM_SAVE_RECOVERY
    	    Z is mapped to  FVEUI_PARAM_PASSPHRASE
    	    K is mapped to  FVEUI_PARAM_STARTUPKEY
    	    J is mapped to  FVEUI_PARAM_CHANGE_PIN
    	    I is mapped to  FVEUI_PARAM_STARTUP_UNLOCK

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: BitLockerWizard.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\baaupdate.exe 85
C:\WINDOWS\system32\baaupdate.exe 86
C:\windows\system32\baaupdate.exe 82
C:\WINDOWS\system32\baaupdate.exe 88
C:\Windows\system32\baaupdate.exe 88
C:\WINDOWS\system32\BdeHdCfg.exe 74
C:\Windows\system32\BdeHdCfg.exe 75
C:\WINDOWS\system32\BdeHdCfg.exe 75
C:\Windows\system32\BdeHdCfg.exe 75
C:\windows\system32\BdeHdCfg.exe 77
C:\Windows\system32\bdeunlock.exe 43
C:\Windows\system32\bdeunlock.exe 44
C:\WINDOWS\system32\bdeunlock.exe 46
C:\WINDOWS\system32\bdeunlock.exe 46
C:\windows\system32\bdeunlock.exe 49
C:\Windows\system32\bdeunlock.exe 43
C:\WINDOWS\system32\BitLockerWizard.exe 88
C:\Windows\system32\BitLockerWizard.exe 93
C:\windows\system32\BitLockerWizard.exe 90
C:\Windows\system32\BitLockerWizard.exe 91
C:\Windows\system32\BitLockerWizard.exe 88
C:\Windows\system32\BitLockerWizardElev.exe 88
C:\Windows\system32\BitLockerWizardElev.exe 86
C:\WINDOWS\system32\BitLockerWizardElev.exe 88
C:\Windows\system32\BitLockerWizardElev.exe 90
C:\windows\system32\BitLockerWizardElev.exe 91
C:\WINDOWS\system32\BitLockerWizardElev.exe 91
C:\Windows\system32\fvecpl.dll 44
C:\Windows\system32\fvenotify.exe 69
C:\WINDOWS\system32\fvenotify.exe 61
C:\windows\system32\fvenotify.exe 74
C:\WINDOWS\system32\fvenotify.exe 69
C:\Windows\system32\fvenotify.exe 69
C:\WINDOWS\system32\fveprompt.exe 71
C:\Windows\system32\fveprompt.exe 71
C:\Windows\system32\fveprompt.exe 69
C:\WINDOWS\system32\fveprompt.exe 72
C:\windows\system32\fveprompt.exe 71
C:\Windows\system32\fveui.dll 54
C:\WINDOWS\system32\manage-bde.exe 57
C:\Windows\system32\manage-bde.exe 50
C:\Windows\system32\manage-bde.exe 54
C:\WINDOWS\system32\manage-bde.exe 49
C:\windows\system32\manage-bde.exe 60
C:\Windows\system32\repair-bde.exe 82
C:\WINDOWS\system32\repair-bde.exe 77
C:\WINDOWS\system32\repair-bde.exe 77
C:\windows\system32\repair-bde.exe 77
C:\Windows\system32\repair-bde.exe 74

MIT License. Copyright (c) 2020-2021 Strontic.