» beclient.dll
Overview
Analysis
File Details
Downloads (7)

beclient.dll

BattlEye Innovations e.K.

File name:

beclient.dll

Publisher:

BattlEye Innovations e.K. (signed and verified)

MD5:

674fa6d50f82efe7bf572f5c51225f30

SHA-1:

752988ba3af48da6ac036b35d9a02ee7e8643f02

SHA-256:

6b789098820261fc5ede15f3308590a64993f48eb0a55340d04e25d40017c995

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/13/2025 1:39:38 PM UTC (today)

File size:

579.5 KB (593,440 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\steam\steamapps\common\dayz\battleye\beclient.dll

Digital Signature

Signed by:

BattlEye Innovations e.K.

Authority:

DigiCert Inc

Valid from:

11/9/2015 6:00:00 PM

Valid to:

11/14/2018 6:00:00 AM

Subject:

CN=BattlEye Innovations e.K., O=BattlEye Innovations e.K., L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0F5A57726999506B6F93FD9A150B88FA

File PE Metadata

Compilation timestamp:

1/8/2016 5:06:26 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:im96MIkF8KrOELRbBTZShVrcxSGwbivaSHElD5lKNHAxhd:iJNELBvShV8SEaSklDHKpEd

Entry address:

0x121435

Entry point:

9C, 9C, 9C, FF, 34, 24, C7, 44, 24, 0C, 42, F4, 10, 5C, 60, E9, 6B, 09, F8, FF, 58, 8B, 44, 24, 34, E8, 52, B5, F7, FF, 68, 2F, AA, 6B, CF, 8D, 64, 24, 24, 0F, 83, BC, 95, FE, FF, 89, E9, 89, C3, 66, 0F, A4, C9, 0F, 89, C7, 66, 0F, AC, D9, 05, 52, D3, D1, B9, 04, 01, 00, 00, 66, 0F, A3, CE, 30, C0, 68, 92, 57, 4E, D9, FF, 34, 24, 84, D6, F2, AE, E9, 43, 98, FE, FF, 34, 9C, E8, CB, 85, F8, FF, C5, 71, 07, E0, 2E, B1, 5A, 18, 35, FC, EC, 74, E9, 9A, 20, 9B, D9, 0A, 00, 34, 5A, 5A, E0, D8, 0E, C5, DB, 1C, 32... 
[+]

Entropy:

7.8531 (probably packed)

Code size:

136 KB (139,264 bytes)

The file beclient.dll has been seen being distributed by the following 7 URLs.

https://downloader.disk.yandex.com/disk/5ce25cec534a5e9649ce56443c766d4b164423aa7947a2177330aee1a14d8427/5697cebf/zfs84FaH-rjxodvllBp_UGcI-JraFXypbJkenH23PRYnFAwQkMnVHwhFGQSB-JhaZu-FQOGPhvRTgwZz5-xzAA==?uid=0&filename=BEClient.dll&disposition=attachment&hash=SLtCDrNN2SKZ/iYSX711 MC b7Q8OwMoK L/.../x-msdownload&fsize=114688&hid=62f40f4930669a1d7cae66d150f7aa96&media_type=executable&tknv=v2

https://www.battleye.com/downloads/.../BEClient.dll

q=http://www.battleye.com/downloads/.../BEClient.dll&redir_token=nRlGANO07WpIPHhh-1cfY9NTipp8MTQ1Mjk0NjQ0MEAxNDUyODYwMDQw

https://www.battleye.com/downloads/.../BEClient.dll

http://www.battleye.com/downloads/.../BEClient.dll

Scan beclient.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.