home

beservice.exe

BattlEye Innovations e.K.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.battleye.com and multiple other hosts.
Publisher:
BattlEye Innovations e.K.  (signed and verified)

MD5:
14317292a585afa6faeff421d3c20890

SHA-1:
e8ab94c0b8bd46810e23b0b295abc7036672ec79

SHA-256:
bda8b83000f1d8d1852535cf7178a19c562b421588cd85594d9d9cd58998f183

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:50:46 AM UTC  (today)

File size:
1 MB (1,089,056 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\steam\steamapps\common\dayz\battleye\beservice.exe

Digital Signature
Signed by:
BattlEye Innovations e.K.

Authority:
DigiCert Inc

Valid from:
11/9/2015 6:00:00 PM

Valid to:
11/14/2018 6:00:00 AM

Subject:
CN=BattlEye Innovations e.K., O=BattlEye Innovations e.K., L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F5A57726999506B6F93FD9A150B88FA

File PE Metadata
Compilation timestamp:
2/10/2016 7:48:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:TL7cbv9jhkGKmQ4xjmBvyfczEzu/zPqWsjoVibjpCCby3hVay4a27q:TL7cr9Vp+BvQu/zStSibjYyy3Pay92u

Entry address:
0x1B02B5

Entry point:
60, 60, 54, C7, 44, 24, 40, 24, 55, B9, 70, E9, D6, 0D, 00, 00, 8D, 64, 24, 28, 0F, 87, ED, CC, FF, FF, 68, 14, 69, B5, EF, E8, F6, CC, FF, FF, 9C, AA, F6, D3, E8, 07, B2, FF, FF, 9C, 04, C3, D4, 2F, 85, F4, 05, 35, F3, C4, 7C, A3, 61, 1B, 81, 9E, 86, 9A, 8E, 24, 1D, 78, 3B, 79, 56, 03, C9, A6, 9D, 47, D2, 62, BE, 6A, 65, BF, C5, 46, 1A, DB, 2B, 01, 00, EF, 21, CE, EA, 35, BB, 64, A4, D8, E0, 9C, 14, 0B, 05, B2, 62, BD, 6F, 80, 3C, E4, 14, 0C, EC, 7A, 36, E4, B3, 75, AA, 7E, 7A, 57, 0C, CA, E6, 92, 47, BE...
 
[+]

Entropy:
7.8567  (probably packed)

Code size:
104 KB (106,496 bytes)

The file beservice.exe has been seen being distributed by the following 3 URLs.

http://www.battleye.com/downloads/.../BEService.exe

http://www.battleye.com/downloads/.../BEService.exe

http://www.battleye.com/downloads/.../BEService.exe

Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.