fvewiz.dll

  • File Path: C:\Windows\system32\fvewiz.dll
  • Description: BitLocker Drive Encryption Wizard

Hashes

Type Hash
MD5 F8D9467A087A79B4BA307D9D9C29A692
SHA1 6D2FCE8AF6DEED372FB03D1915559C2455E5364A
SHA256 F6DDAD58E65360B5A272097D0822969A0C87B08915FF5B2A8C21AC579F988848
SHA384 E6FBEACDA648A5C1328991FBFE2F62B9700BF1406FCB6D31FA416DFF97F7EB91991E6026E8EFB6B5F7D3642277B74B69
SHA512 ADF3535F72D756F1BB3509E2C2AED52EDC7854D129F7658718F6A72C4D401A228A1ACFF74E1422021D5C748702B395B74C5D9DE166FD59D145065BF6DA9A83C8
SSDEEP 24576:G8VIDSsRma8NGJEx36hhJX1yqPaH+ADWd:JSDhyH+ADW
IMP 9984C490F422C097FE1420B114B09098
PESHA1 9383ED3AEDE27D633E3D4477EB735B30D17F5A2D
PE256 102BD27846F3D35F9D5DDD21B1F594D76FBBF30F90E87407D4C223A0F75B9956

DLL Exports:

Function Name Ordinal Type
VolumeFveStatus::IsPartiallyConverted 32 Exported Function
VolumeFveStatus::IsOsVolume 31 Exported Function
VolumeFveStatus::IsPaused 33 Exported Function
VolumeFveStatus::IsRoamingDevice 35 Exported Function
VolumeFveStatus::IsPreProvisioned 34 Exported Function
VolumeFveStatus::IsEncrypting 27 Exported Function
VolumeFveStatus::IsEncrypted 26 Exported Function
VolumeFveStatus::IsLocked 28 Exported Function
VolumeFveStatus::IsOsCriticalVolume 30 Exported Function
VolumeFveStatus::IsOn 29 Exported Function
VolumeFveStatus::IsSecure 36 Exported Function
VolumeFveStatus::GetLastConvertStatus 8 Exported Function
VolumeFveStatus::operator 5 Exported Function
BuiVolume::NO_DRIVE_LETTER 39 Exported Function
VolumeFveStatus::GetStatusFlags 9 Exported Function
VolumeFveStatus::GetExtendedFlags 7 Exported Function
VolumeFveStatus::IsWiping 38 Exported Function
VolumeFveStatus::IsUnknownFveVersion 37 Exported Function
VolumeFveStatus::NeedsRestart 40 Exported Function
VolumeFveStatus::operator 4 Exported Function
BuiVolume::operator 3 Exported Function
VolumeFveStatus::HasPassphraseProtector 12 Exported Function
VolumeFveStatus::HasExternalKey 10 Exported Function
VolumeFveStatus::HasPBKDF2RecoveryPassword 11 Exported Function
VolumeFveStatus::HasRecoveryData 14 Exported Function
VolumeFveStatus::HasPinProtector 13 Exported Function
FveuiWizard 41 Exported Function
FveuipClearFveWizOnStartup 42 Exported Function
VolumeFveStatus::VolumeFveStatus 1 Exported Function
VolumeFveStatus::FailedDryRun 6 Exported Function
VolumeFveStatus::VolumeFveStatus 2 Exported Function
VolumeFveStatus::HasRecoveryPassword 15 Exported Function
VolumeFveStatus::IsDecrypted 22 Exported Function
VolumeFveStatus::IsDEAutoProvisioned 21 Exported Function
VolumeFveStatus::IsDecrypting 23 Exported Function
VolumeFveStatus::IsEDriveVolume 25 Exported Function
VolumeFveStatus::IsDisabled 24 Exported Function
VolumeFveStatus::HasStartupKeyProtector 17 Exported Function
VolumeFveStatus::HasSmartCardProtector 16 Exported Function
VolumeFveStatus::HasTpmProtector 18 Exported Function
VolumeFveStatus::IsCsvMetadataVolume 20 Exported Function
VolumeFveStatus::IsConverting 19 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: FveWiz.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/f6ddad58e65360b5a272097d0822969a0c87b08915ff5b2a8c21ac579f988848/detection/

MIT License. Copyright (c) 2020-2021 Strontic.