bfsvc.exe

File Path: C:\Windows\bfsvc.exe
Description: Boot File Servicing Utility

Hashes

Type	Hash
MD5	`820B97429E4153A743708B376807EE69`
SHA1	`824E6C83C079073139211CC8E77D40B372156D27`
SHA256	`57A0279E3B6B158404CFBF5070E33B41963E288A7BB230382B1D3F6116299C75`
SHA384	`53056D6256C67A64AB53CDB1E71C69CE343FC47019A00CC3468DB9155AB38A19F473A67A779CC0FEDFB64457117A1FCD`
SHA512	`8E94216AC0CC489F8EF44705DC4BD7072FD921EB2D49AD0FEE9A5EAA7DC71801B58172FE48F2AD3BE7AE136FE2CEEB5717936231AAA04C1393B435200DFD304E`
SSDEEP	`1536:yyMKEiD7X/799wTrzNevR/i6bjCUl5JOF4PaeuO2gngGt:2e7XJe5evR/i6b+aOqieuO2+gq`
IMP	`B186CF092213B0C5BC18DB8274AB6DA4`
PESHA1	`639C987581ACFBE52CA8B285B9DDE58DB2841829`
PE256	`938A5073AAF858C50F7CE76188A53F4D4B2BC32AF7FFA0C50E9A9FBB60B60F11`

Runtime Data

Usage (stderr):

BFSVC Error: Failed to get partition name. Status = 0xc0000452
BFSVC Error: Failed to get system partition! Last Error = 0x3bc3
BFSVC Error: ServicingBootFiles failed. Error = 0x3bc3

Loaded Modules:

Path
C:\Windows\bfsvc.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: bfsvc.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/57a0279e3b6b158404cfbf5070e33b41963e288a7bb230382b1d3f6116299c75/detection