Gridinsoft Logo

The bfsvc.exe (Boot File Servicing Utility) File Analysis

Updated 1 year ago
Checked by Malaware Check
bfsvc.exe

Technical Analysis

File Name bfsvc.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.144.174
Database Version 2023-10-28 11:03:32 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
102,400
File Size (bytes)
2023-10-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
84a90120281d335a3807ebceaf2a3799
SHA1
e5af41120533909cb97487d2aa4acaaf1d705cbf
SHA256
c1d93c403390dcce62f3af4d434a43cd3765b5cac690c4e9bf13a91c660824a1
SHA512
9dad0a61d5b6c710c55cab11cdbcb91b80e9bb5ac94a4fab845026a1086f3c279ee4468b2649abff517d1c42cc124cd08e6d07f14349826508d76089df50ac14
ImpHash
076152a38ca83ca117b6fdb82409f937

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400013d0
Compilation Time 1987-11-21 05:15:07
Checksum 0x00019223 (Actual: 0x00019223)
OS Version 10.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path bfsvc.pdb
Digital Signature The PE file does not contain a certificate table.
Imports 26 libraries
Exports 0 functions
Resources 3 Resources
Sections 6 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Boot File Servicing Utility
FileVersion 10.0.22621.1992 (WinBuild.160101.0800)
InternalName bfsvc.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename bfsvc.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.22621.1992
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 48,976 bytes 49,152 bytes 6.09 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 83117A5F9BD0EC165DB7870CC2D69C17
.rdata 0x0000d000 31,646 bytes 32,768 bytes 4.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 91546EBAF276EAD0FD5E769DC9E60887
.data 0x00015000 1,856 bytes 4,096 bytes 0.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FBFE4BF031DEAC367A701CC03581AA0A
.pdata 0x00016000 1,440 bytes 4,096 bytes 2.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7497BE8473A30FA3B0F8726085683B46
.rsrc 0x00017000 2,072 bytes 4,096 bytes 2.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1FC7FE36AE3DF28C947335729D0A478C
.reloc 0x00018000 64 bytes 4,096 bytes 0.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F7066564BE1FA6CB403FD7E2611FED43

Resource Analysis

▼
Total Resources: 3 (1,822 bytes)
Resource Type Count Total Size Percentage
MUI 1 200 bytes
11%
RT_VERSION 1 924 bytes
50.7%
RT_MANIFEST 1 698 bytes
38.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Boot File Servicing Utility
File Version 10.0.22621.1992 (WinBuild.160101.0800)
Original Name bfsvc.exe
Internal Name bfsvc.exe
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware