fvenotify.exe

  • File Path: C:\Windows\system32\fvenotify.exe
  • Description: BitLocker Drive Encryption Notification Utility

Screenshot

fvenotify.exe

Hashes

Type Hash
MD5 EE3C814D1035CDCDF48E232742D6FA43
SHA1 D5259D58DBECC420DDFCCC5498D98BEEE0FA8840
SHA256 F0CDDBA84AC1DA81B4F340B7B14193FF85E80B6444FEBE5F7686DE6061ED7C67
SHA384 0AFA4989D15D55828B409222234002B8C69228D8E1BF998BCEEA19175EAE468BB115EFB42F4BC4B8D01D0835B9AFD70E
SHA512 B5BC313347F7060F41C56660F6FDE7CF6FAF84678CAE73C91C924014E3D50BC24869A7DDE93D5D5B3DE162A20107F39D9AEC818FADED3A88C5BB40382E535D33
SSDEEP 3072:zfzagc1/UX3bqxEMb4XH86rvkAXX5wnVS570M9kdatGCO+xmBc+hMPhPsx:j+t1/ubqyM8Xxrv6Vs7nyatGt+SYF

Runtime Data

Window Title:

BitLocker Drive Encryption

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\duser.dll.mui File
(R-D) C:\Windows\System32\en-US\fvenotify.exe.mui File
(R-D) C:\Windows\System32\en-US\imageres.dll.mui File
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui File
(R-D) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.1397_en-us_f4818e157fed07c9\comctl32.dll.mui File
(RW-) C:\Users\user\Documents File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.1397_en-us_f4818e157fed07c9 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.1397_none_de7645305346d5dc File
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme4283305886 Section
\Windows\Theme1956823608 Section

Loaded Modules:

Path
C:\Windows\system32\fvenotify.exe
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: FVENOTIFY.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\baaupdate.exe 68
C:\WINDOWS\system32\baaupdate.exe 68
C:\windows\system32\baaupdate.exe 66
C:\WINDOWS\system32\baaupdate.exe 63
C:\Windows\system32\baaupdate.exe 68
C:\WINDOWS\system32\BdeHdCfg.exe 63
C:\Windows\system32\BdeHdCfg.exe 61
C:\WINDOWS\system32\BdeHdCfg.exe 65
C:\Windows\system32\BdeHdCfg.exe 63
C:\windows\system32\BdeHdCfg.exe 65
C:\Windows\system32\bdeunlock.exe 38
C:\Windows\system32\bdeunlock.exe 40
C:\WINDOWS\system32\bdeunlock.exe 38
C:\WINDOWS\system32\bdeunlock.exe 47
C:\windows\system32\bdeunlock.exe 50
C:\Windows\system32\bdeunlock.exe 40
C:\WINDOWS\system32\BitLockerWizard.exe 69
C:\Windows\system32\BitLockerWizard.exe 68
C:\windows\system32\BitLockerWizard.exe 69
C:\WINDOWS\system32\BitLockerWizard.exe 69
C:\Windows\system32\BitLockerWizard.exe 66
C:\Windows\system32\BitLockerWizard.exe 65
C:\Windows\system32\BitLockerWizardElev.exe 69
C:\Windows\system32\BitLockerWizardElev.exe 66
C:\WINDOWS\system32\BitLockerWizardElev.exe 65
C:\Windows\system32\BitLockerWizardElev.exe 68
C:\windows\system32\BitLockerWizardElev.exe 68
C:\WINDOWS\system32\BitLockerWizardElev.exe 66
C:\Windows\system32\fvecpl.dll 40
C:\Windows\system32\fvenotify.exe 63
C:\WINDOWS\system32\fvenotify.exe 44
C:\windows\system32\fvenotify.exe 60
C:\WINDOWS\system32\fvenotify.exe 63
C:\WINDOWS\system32\fveprompt.exe 63
C:\Windows\system32\fveprompt.exe 60
C:\Windows\system32\fveprompt.exe 61
C:\WINDOWS\system32\fveprompt.exe 60
C:\windows\system32\fveprompt.exe 61
C:\Windows\system32\fveui.dll 46
C:\WINDOWS\system32\manage-bde.exe 50
C:\Windows\system32\manage-bde.exe 47
C:\Windows\system32\manage-bde.exe 49
C:\WINDOWS\system32\manage-bde.exe 49
C:\windows\system32\manage-bde.exe 57
C:\Windows\system32\repair-bde.exe 65
C:\WINDOWS\system32\repair-bde.exe 65
C:\WINDOWS\system32\repair-bde.exe 61
C:\windows\system32\repair-bde.exe 61
C:\Windows\system32\repair-bde.exe 60

MIT License. Copyright (c) 2020-2021 Strontic.