Gridinsoft Logo

The bfsvc.exe (Boot File Servicing Utility) File Analysis

Updated 3 days ago
Checked by Malaware Check
bfsvc.exe

Technical Analysis

File Name bfsvc.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-02 15:00:23 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
122,880
File Size (bytes)
2025-06-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
80635ab0140747ecd11e6a8b3f8f531e
SHA1
9a60795d31a3bb9040bfaa0e695e91b421bb4809
SHA256
15261a878719df65f3836686812781b665566e2a9d2037d65ea235fe82476490
SHA512
52562ec82d97df71076f749cb8fce73d862eaa14d332c8484147c1158020654a9d64bbd357bf8af06cc26f0bd7f0f32d5535b730faa97639849c4117df55ed88
ImpHash
deeb68ad955aa8748e381cc669cb7c72

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140001620
Compilation Time 2090-12-03 02:34:42
Checksum 0x0002a708 (Actual: 0x0002a708)
OS Version 10.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path bfsvc.pdb
Digital Signature No valid SignedData structure was found.
Imports 30 libraries
Exports 0 functions
Resources 3 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Boot File Servicing Utility
FileVersion 10.0.26100.4202 (WinBuild.160101.0800)
InternalName bfsvc.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename bfsvc.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.4202
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 56,464 bytes 57,344 bytes 6.05 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C72C1AEA377EB3FE9A16ED13725E9A82
fothk 0x0000f000 4,096 bytes 4,096 bytes 0.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F01924121979D176CFBFEEA2F9C0B121
.rdata 0x00010000 37,060 bytes 40,960 bytes 3.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D207707C12FF1AD7D5A61AD53B85CC5D
.data 0x0001a000 2,112 bytes 4,096 bytes 0.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C89E4766082A779BA65703577D2C3AF3
.pdata 0x0001b000 1,572 bytes 4,096 bytes 2.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A655AC6C6475BF11524E459F661DE61C
.rsrc 0x0001c000 2,072 bytes 4,096 bytes 2.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4D645D832713DE36E47BDB2492CFA629
.reloc 0x0001d000 160 bytes 4,096 bytes 0.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7FA76A694C7BB26F1FF3882424C46DCE

Resource Analysis

▼
Total Resources: 3 (1,822 bytes)
Resource Type Count Total Size Percentage
MUI 1 200 bytes
11%
RT_VERSION 1 924 bytes
50.7%
RT_MANIFEST 1 698 bytes
38.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Boot File Servicing Utility
File Version 10.0.26100.4202 (WinBuild.160101.0800)
Original Name bfsvc.exe
Internal Name bfsvc.exe
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware