bfsvc.exe

File Path: C:\Windows\bfsvc.exe
Description: Boot File Servicing Utility

Hashes

Type	Hash
MD5	`A17AFEF5F12F299A512CE2BC773358EB`
SHA1	`FD7B75D56383B1480CF65EDFC134221999894746`
SHA256	`03B0693DEE8473ED806B8A4E8E872638E1996A7F67FB0EC06A7B1B24C0E63AEF`
SHA384	`217229E977E522469BE7667BE96397EAB36640AD3FA59C289C7551E7FFC28376C12A38B428707E9DAC98FE27B91CCA9D`
SHA512	`320DD7B8AF219E9EF22AD446834BB6DF5530FD0C4058A2FC1C829A75C951DF1CFC8BDBFB41C5E5B6B7D0616D6AB6AE2614308BF3AC8DCE380338DBC0144DE0A8`
SSDEEP	`1536:GqADigBLfAx6v44MEX3p5L5h1zJz8RI+V2K1ODVtwPPae7TgU3VQ:2DRAB4h15h1zJz8RnV2QurevE`
IMP	`8B51D86B3A8B3FBDCAE4C7D096A8D89A`
PESHA1	`AC810D751B975C2A3602462938075D01F7B9D514`
PE256	`5BE707B0E2F54F277318F5D057573BBF1DF1BDA0CD29A9975226E24A3872188C`

Runtime Data

Usage (stderr):

BFSVC Error: Failed to get partition name. Status = 0xc0000452
BFSVC Error: Failed to get system partition! Last Error = 0x3bc3
BFSVC Error: ServicingBootFiles failed. Error = 0x3bc3

Loaded Modules:

Path
C:\Windows\bfsvc.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: bfsvc.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/67
VirusTotal Link: https://www.virustotal.com/gui/file/03b0693dee8473ed806b8a4e8e872638e1996a7f67fb0ec06a7b1b24c0e63aef/detection/