bfsvc.exe

File Path: C:\Windows\bfsvc.exe
Description: Boot File Servicing Utility

Hashes

Type	Hash
MD5	`49D0AD393AE0B1EE7F3A3DD81B54BFBF`
SHA1	`9765249443D6F1D8B846338A66CEFF751A7007FF`
SHA256	`D271499CC7039391130509E21F8E1BA7A9E8A49FEF71528B94A0448224DFC186`
SHA384	`BABA97F0E4FA9ACB6BF49703A91A2C8FE6C03853F8ED0B8182B35E7D76C9B6681DCA661D1C5ADD0F2B8264D784C593F1`
SHA512	`021C4C6F8C3C1C0E5C40D8E1BF40EA5EAE08CC8551E86015BEC4896468383444E51EE252CCA98EA7F35374C82455F35D5155D7BEE67625267F6ECC014C4049B1`
SSDEEP	`1536:Qc6e7U9ENdy1qvblmlg7YgEXrP4lqRm3EWuCgzJ9vFLewg2b:Q8E8vblwjXjtm3SvFzewl`

Runtime Data

Usage (stderr):

BFSVC Warning: Failed to determine source OS version.
BFSVC Error: Failed to validate boot manager checksum (help\PCAT\bootmgr)! Error code = 0xc1
BFSVC Error: ServicingBootFiles failed. Error = 0xc1

Loaded Modules:

Path
C:\Windows\bfsvc.exe
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 33000001C422B2F79B793DACB20000000001C4
Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: bfsvc.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.17763.1 (WinBuild.160101.0800)
Product Version: 10.0.17763.1
Language: English (United States)