home

beservice.exe

Bastian Suter

It runs as a separate (within the context of its own process) windows Service named “BattlEye Service”.
Publisher:
Bastian Suter  (signed and verified)

MD5:
5a8b1477b59137bea45c05e7d3d5f235

SHA-1:
32fa9e47e37a1e3a8b9de393757d9ef9c027889e

SHA-256:
9f54be22d79ffa5a37f3a72f6ff5b736bc3a7aadb1cfd9998d6f7e9c8aa5bc4f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 11:11:06 PM UTC  (a few moments ago)

File size:
1.1 MB (1,122,968 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\common files\battleye\beservice.exe

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
4/20/2015 10:00:00 AM

Valid to:
6/13/2018 10:00:00 PM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert SHA2 High Assurance Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
081F05011E1F57B6020B3EA1A83D981A

File PE Metadata
Compilation timestamp:
7/12/2015 12:38:39 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:XZUCWX+c/Yvsumeb3lx9IL57TLd9acl3Pze41irvVRT0eKSc9SAVmmBD:JvWX335oBIL53+Ar3g7jT05Sc9SOBD

Entry address:
0xE7E98

Entry point:
E9, D3, 52, 00, 00, B0, 2E, E9, C1, 2B, FE, FF, E9, DB, FB, FF, FF, 57, 49, 4E, 54, 52, 55, 53, 54, 2E, 64, 6C, 6C, 00, DA, 14, 54, BE, 7C, 3C, 18, 1A, 3D, 3C, 31, 86, E2, 33, 11, D2, EC, 1C, DF, CB, 93, 39, A4, BC, 9F, 85, 7B, B2, EC, F5, 97, 7B, 3F, 74, B7, 8C, 0F, 4C, AF, EB, 4F, D3, D7, 94, 37, DC, 63, CA, 14, 5C, FF, 33, 77, BB, F3, 31, 1D, B7, F0, 7E, D4, 8F, A9, AD, 72, B4, 8D, 85, 4F, C1, 6B, 4B, 2E, D5, CB, 0C, 48, C6, 6C, 66, AC, 3D, D9, B2, F2, 69, 4B, 5F, AF, 25, A9, 59, 3F, 39, 29, AD, AB, 80...
 
[+]

Entropy:
7.8755

Packer / compiler:
Xtreme-Protector v1.05

Code size:
110 KB (112,640 bytes)

Service
Display name:
BattlEye Service

Service name:
BEService

Type:
Win32OwnProcess


Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.