home

beservice.exe

BattlEye Innovations e.K.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.battleye.com.
Publisher:
BattlEye Innovations e.K.  (signed and verified)

MD5:
3957fea9df3026c9c7887723b601111e

SHA-1:
fdf42885e3acb658a3af5b9965223cfa8899774e

SHA-256:
3e18b2db75092ed62a602e2a5edd6037814bfa9236a8be35d10f6b7f7496a62e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:45:20 AM UTC  (today)

File size:
1 MB (1,056,288 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\steam\steamapps\common\dayz\battleye\beservice.exe

Digital Signature
Signed by:
BattlEye Innovations e.K.

Authority:
DigiCert Inc

Valid from:
11/9/2015 2:00:00 PM

Valid to:
11/14/2018 2:00:00 AM

Subject:
CN=BattlEye Innovations e.K., O=BattlEye Innovations e.K., L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F5A57726999506B6F93FD9A150B88FA

File PE Metadata
Compilation timestamp:
1/14/2016 1:26:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:QiYDsz6XnTjnZ8SJ6nVRCYrjUYYgAJA66WCDSkPTpMoDrK7Z:sFt8SJ6fCY/uF2SkLi7

Entry address:
0xC252B

Entry point:
E9, 8D, 20, 09, 00, C0, C0, 03, E9, 80, CF, FF, FF, 60, 8D, 64, 24, 40, 0F, 82, AD, 09, 00, 00, E9, 55, CF, FF, FF, 8D, 64, 24, 54, 0F, 84, 0F, 7F, 00, 00, 52, 01, F8, F9, 39, D0, E8, 6E, 48, 00, 00, 60, C7, 44, 24, 40, A8, E1, 4B, 00, 9C, E8, 49, 1B, 00, 00, 66, 89, 54, 24, 04, 88, 64, 24, 18, 8D, 64, 24, 58, 0F, 87, 52, 85, 00, 00, 60, E9, B3, F6, FF, FF, B5, A1, DB, 73, 14, 02, F4, F7, CA, F4, FF, CD, F6, 2C, E7, 2D, 69, 44, EE, AA, A1, 83, E3, 55, 6E, 48, 33, 96, C2, 0B, 00, 3E, 35, FB, D8, 4D, C4, 9C...
 
[+]

Entropy:
7.8450

Packer / compiler:
Xtreme-Protector v1.05

Code size:
100 KB (102,400 bytes)

The file beservice.exe has been seen being distributed by the following URL.

http://www.battleye.com/downloads/.../BEService.exe

Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.