bfsvc.exe

File Path: C:\WINDOWS\bfsvc.exe
Description: Boot File Servicing Utility

Hashes

Type	Hash
MD5	`8B8A7ACDF42961B76B05EE980C4E6D48`
SHA1	`2F6B65EBC27BEB0EA5818CA6BB8F997794AB158F`
SHA256	`48030AE86A728453F427952DD7827A34FD2DBD087E52B62B3A09030B3C3EBAFD`
SHA384	`E986E4AB814AACEF5C0054F81CC75206DD0252F2F9E2F94C38746C5BD00F4C1A4A54A7BB058295D1D09FC6905E7E121D`
SHA512	`4D90BC7CBA3520C3C46A997C6301DD4D1CE0173D80E48B5E71F248650D2B3A7D6EE8AC3901FD648D8CD751B9DD1BF3599ED96EBD8473CE64A0FCB20F8EBB68E7`
SSDEEP	`3072:k6pSTiYjRDhZqghLR+NVsiVryVeuJmPNs:5pSxRDhZqghLgsiVrOJKN`
IMP	`38D4E7A62C8E3D83DB7A1E792B5162B4`
PESHA1	`B4DD65CCF07F1BBD5D721DBCBBAFC2B18C6DE0D7`
PE256	`AA88AC3374DF5B1E8E8F8399BB76D0EDD435EDCD88C96101380F1F57A3034AC8`

Runtime Data

Usage (stderr):

BFSVC Warning: Failed to determine source OS version.
BFSVC Error: Failed to validate boot manager checksum (help\EFI\bootmgfw.efi)! Error code = 0xc1
BFSVC Error: ServicingBootFiles failed. Error = 0xc1

Loaded Modules:

Path
C:\WINDOWS\bfsvc.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: bfsvc.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/48030ae86a728453f427952dd7827a34fd2dbd087e52b62b3a09030b3c3ebafd/detection