BitLockerDeviceEncryption.exe
BitLocker Device Encryption Tool file version info
Program on Windows 4 known copies with hashes
Is it the real BitLockerDeviceEncryption.exe?
C:\Windows\system32\4 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\BitLockerDeviceEncryption.exe · signed by Microsoft Windows
cc9e55174803e74cdbe423d8797aa35dcf331fe084d9746b7d43be2241e1df1310.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\BitLockerDeviceEncryption.exe · signed by Microsoft Windows
5971a73a8f2cd428c456303a92ffe60fa71883ce524634cda3ea5a3ba0feaaaa10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\BitLockerDeviceEncryption.exe · signed by Microsoft Windows
777c576288e43a1332d7f0b985bb788a6dcc9369102579c604711cae1b12ea2710.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\BitLockerDeviceEncryption.exe · signed by Microsoft Windows
20532ad7c8c8fedb31be3852eeea7e532f9d71709dfa4c21ae8d00ad15c4101fFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.