CmdID

CmdID / Files

fveprompt.exe

BitLocker Drive Encryption file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real fveprompt.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBitLocker Drive Encryption

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fveprompt.exe · signed by Microsoft Windows

3f7f1c6b2154b2278b7cc1138dbc9f136a6cabc86a27513eac5921a9ecd72b56

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\fveprompt.exe · signed by Microsoft Windows

fe5098923f27ef6055e3343a26af9bed62eaa9eddfcb77ab06d2328d8497b112

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fveprompt.exe · signed by Microsoft Windows

c7db20ca716a7defb004917a8aad5baca8b4466a12bb4383129b0cb05a8ddc3d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\fveprompt.exe · signed by Microsoft Windows

4156d60544639cc6b06e229372d61f50b6bef46121040e5bfd31639d9c3aa14b

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\fveprompt.exe · not signed

c3b5827b43eb70cc3d98b12a052d60feccacaa91fa907e76762bf70a6049f8e4

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.