home

beservice.exe

Bastian Suter

This is a setup program which is used to install the application. The file has been seen being downloaded from www.battleye.com.
Publisher:
Bastian Suter  (signed and verified)

MD5:
07f0d3af439ca445be3cf3eb4e40b610

SHA-1:
7c4b3b52fad2402dc65f8171ccd490f6b5e83bb7

SHA-256:
9bac9610fe8b0e29135d34fb7e01ddebd30fe84c30fce85d52460b71b75d88a2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:52:56 AM UTC  (today)

File size:
651.9 KB (667,520 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\steam\steamapps\common\arma 2 operation arrowhead\expansion\battleye\beservice.exe

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
3/5/2014 12:00:00 AM

Valid to:
5/13/2015 1:00:00 PM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F01D40307832B7F6747D7AB752213DC

File PE Metadata
Compilation timestamp:
1/27/2015 3:51:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
12288:EuMGIXiZBJYHnN6ZIC0eY3iHuBhSpuEqUB7s4WtNSa00+:Ep8JYHrCF2iOBEs5URszjp+

Entry address:
0xC7324

Entry point:
E9, 94, 98, FA, FF, B8, D1, 41, 44, C2, 6F, 04, 57, 17, 2C, B1, DA, BE, ED, 7A, 8F, D1, 2C, 5F, B8, FA, 49, 62, 7F, 04, D1, 7C, ED, C9, F0, 7D, AA, 86, A1, 09, 48, 8E, 05, 8C, 03, 2E, CA, 8A, 9B, 28, 39, CD, EC, 5C, 71, B3, 38, A5, 93, 6E, 71, F0, F9, F7, 18, A5, AE, 2D, 1E, 0B, E9, F4, 1E, A2, B9, 38, 29, AC, F1, 66, CE, 99, 43, F6, 20, 94, 67, E8, 50, 5E, E2, 8E, 0F, E1, 11, F9, 7C, 6C, 95, DC, 67, 04, 78, 38, 55, CC, A7, A1, 82, 99, 3D, A3, FC, 72, 85, D8, CC, 4F, D6, 6A, D3, 5C, 33, 94, 5F, 72, BE, 19...
 
[+]

Entropy:
7.8453

Packer / compiler:
Xtreme-Protector v1.05

Code size:
68 KB (69,632 bytes)

The file beservice.exe has been seen being distributed by the following URL.

http://www.battleye.com/downloads/.../BEService.exe

Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.