home

beservice.exe

Bastian Suter

This is a setup program which is used to install the application. The file has been seen being downloaded from www.battleye.com.
Publisher:
Bastian Suter  (signed and verified)

MD5:
52ee5d4a65fca6701b2bacfc0e33454f

SHA-1:
aa76d910be0b4986efd4745a026e953b2c610fc4

SHA-256:
a97d6c5e031769cffa77f4ce781306088c2f0bc49f52e96b8d1baa54ddb64d33

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:59:38 PM UTC  (today)

File size:
639.9 KB (655,232 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\steam\steamapps\common\arma 2 operation arrowhead\expansion\battleye\beservice.exe

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
3/4/2014 4:00:00 PM

Valid to:
5/13/2015 5:00:00 AM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F01D40307832B7F6747D7AB752213DC

File PE Metadata
Compilation timestamp:
1/20/2015 3:58:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
12288:55JiiVAvhsvKlP44kV5DqqAKlpsqLUep/mUqNGT90uozeyu3ApqW4:55JiiVAJsyl1cVZUepFh+ecpp4

Entry address:
0x10380E

Entry point:
E9, 64, 9B, F6, FF, 66, A1, EB, CD, F8, 29, 61, D4, 68, D9, FB, 5F, DE, B9, 1B, 7C, 66, DF, 78, E8, 08, 38, 2F, E0, 76, A3, D1, 33, 14, AD, 7D, 16, 7F, 2D, E6, D5, 59, D5, 16, EC, 68, 6D, 79, 1A, 88, 4C, 87, 79, 6D, 6D, 42, 7D, 9C, D3, F4, C9, 3B, 0E, 21, 5A, 0F, 55, 3C, 4E, 43, F7, 1B, 0B, 3C, E2, DB, FE, 6D, F5, 9D, 06, 85, B5, E1, 01, C1, 0E, BA, 10, 0A, BD, 33, 05, 27, E0, B9, 1C, B5, 14, BE, 10, A1, 62, 01, FB, 84, 06, C4, F8, FE, 68, 05, 3E, A5, 14, 2F, BD, 11, BB, D3, D0, 0C, 99, 29, 4F, 47, C2, 95...
 
[+]

Entropy:
7.8370

Packer / compiler:
Xtreme-Protector v1.05

Code size:
68 KB (69,632 bytes)

The file beservice.exe has been seen being distributed by the following URL.

http://www.battleye.com/downloads/.../BEService.exe

Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.