CmdID

CmdID / Files

fvenotify.exe

BitLocker Drive Encryption Notification Utility file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real fvenotify.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBitLocker Drive Encryption Notification Utility

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fvenotify.exe · signed by Microsoft Windows

02460b95ea4f2cb5c425ee6896fd4012892f6f86f7f197e4d6a70a44513acac7

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\fvenotify.exe · signed by Microsoft Windows

b7fd898228effc5c80349b74175337486e43f327782b3cf37cc6c81ff5f934c5

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fvenotify.exe · signed by Microsoft Windows

aa3cc04a5a3c0e986e54d50eb73be618780a8bbbcf2cf650a7838b347b6e140f

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\fvenotify.exe · signed by Microsoft Windows

f0cddba84ac1da81b4f340b7b14193ff85e80b6444febe5f7686de6061ed7c67

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\fvenotify.exe · not signed

1cef495a546decd0b58ac9eb9b297cbf9bb311b6d49b54a352f714fddf3a63d1

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.