baaupdate.exe

  • File Path: C:\Windows\system32\baaupdate.exe
  • Description: BitLocker Access Agent Update Utility

Hashes

Type Hash
MD5 A5BCC0E852AC6B17F3D0E6C9F95E95D4
SHA1 8591856DBAF1D2EE1604CE7698471531B6DAF91A
SHA256 9F2251424D855579C2E2CA78486FF4DD1DF807E6F02FD5E513065225E44AD4C6
SHA384 7ED2C3D01C8EFB95F8B6605826B1C0FCD927FA6A952387ED0D3555FB9A5025ABE8A1EFAC96D720E6BD6EA0A401FCCA0D
SHA512 E0C6837FB84B4D0757FDA0022F9F6B21026D6F0E505DEBE7BFCD2F7BAD50B02A3829BD5920774A7B6DCAC6EFBE51855C6F907E778CBCE7A4B908F3F314BB7EE2
SSDEEP 3072:u4/Tt39wnVS570M9kdatGCO+xmBc+hMPhPsx:TteVs7nyatGt+SYF
IMP EEDA0083C7D468FE0C97DE8B9FCD7FF8
PESHA1 839E7E00D7F3243016B69AC231B84807C63D1700
PE256 4E3A0473B80BC1AFF01BA4DAA1144110971F67E572887DCD636AD1E0286E0783

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\system32\baaupdate.exe
C:\Windows\System32\bcrypt.dll
C:\Windows\system32\BDEUI.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll
C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21\COMCTL32.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: BAAUPDATE.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/9f2251424d855579c2e2ca78486ff4dd1df807e6f02fd5e513065225e44ad4c6/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\baaupdate.exe 88
C:\WINDOWS\system32\baaupdate.exe 82
C:\windows\system32\baaupdate.exe 80
C:\WINDOWS\system32\baaupdate.exe 88
C:\WINDOWS\system32\BdeHdCfg.exe 72
C:\Windows\system32\BdeHdCfg.exe 72
C:\WINDOWS\system32\BdeHdCfg.exe 72
C:\Windows\system32\BdeHdCfg.exe 74
C:\windows\system32\BdeHdCfg.exe 79
C:\Windows\system32\bdeunlock.exe 40
C:\Windows\system32\bdeunlock.exe 44
C:\WINDOWS\system32\bdeunlock.exe 40
C:\WINDOWS\system32\bdeunlock.exe 44
C:\windows\system32\bdeunlock.exe 49
C:\Windows\system32\bdeunlock.exe 41
C:\WINDOWS\system32\BitLockerWizard.exe 85
C:\Windows\system32\BitLockerWizard.exe 88
C:\windows\system32\BitLockerWizard.exe 88
C:\WINDOWS\system32\BitLockerWizard.exe 88
C:\Windows\system32\BitLockerWizard.exe 85
C:\Windows\system32\BitLockerWizard.exe 91
C:\Windows\system32\BitLockerWizardElev.exe 85
C:\Windows\system32\BitLockerWizardElev.exe 83
C:\WINDOWS\system32\BitLockerWizardElev.exe 85
C:\Windows\system32\BitLockerWizardElev.exe 83
C:\windows\system32\BitLockerWizardElev.exe 94
C:\WINDOWS\system32\BitLockerWizardElev.exe 83
C:\Windows\system32\fvecpl.dll 40
C:\Windows\system32\fvenotify.exe 69
C:\WINDOWS\system32\fvenotify.exe 55
C:\windows\system32\fvenotify.exe 74
C:\WINDOWS\system32\fvenotify.exe 71
C:\Windows\system32\fvenotify.exe 68
C:\WINDOWS\system32\fveprompt.exe 75
C:\Windows\system32\fveprompt.exe 72
C:\Windows\system32\fveprompt.exe 66
C:\WINDOWS\system32\fveprompt.exe 74
C:\windows\system32\fveprompt.exe 74
C:\Windows\system32\fveui.dll 52
C:\WINDOWS\system32\manage-bde.exe 55
C:\Windows\system32\manage-bde.exe 50
C:\Windows\system32\manage-bde.exe 49
C:\WINDOWS\system32\manage-bde.exe 46
C:\windows\system32\manage-bde.exe 63
C:\Windows\system32\repair-bde.exe 75
C:\WINDOWS\system32\repair-bde.exe 79
C:\WINDOWS\system32\repair-bde.exe 75
C:\windows\system32\repair-bde.exe 74
C:\Windows\system32\repair-bde.exe 74

MIT License. Copyright (c) 2020-2021 Strontic.