home

beservice.exe

Bastian Suter

It runs as a separate (within the context of its own process) windows Service named “BattlEye Service”.
Publisher:
Bastian Suter  (signed and verified)

MD5:
355af7fa50f817fd8896d67ee6b01036

SHA-1:
39a3054581f04cc60d22f4e9e247866f4147f3da

SHA-256:
520d515790b09d8ca02fce134cad7e3e2ce60cf6a790e0ad970749d3aa465362

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 11:40:51 AM UTC  (today)

File size:
1.1 MB (1,115,136 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\common files\battleye\beservice.exe

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
4/19/2015 8:00:00 PM

Valid to:
6/13/2018 8:00:00 AM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0CEC25760619513A72214FB3C86C376D

File PE Metadata
Compilation timestamp:
7/4/2015 12:00:33 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:ywh4qRgIOOft6I5rHa9qbAsaedGjQ6+uzZQY:y+bRgc/rcqbvxGQMzZR

Entry address:
0xCCED1

Entry point:
E9, DD, E7, FF, FF, 68, 86, 0B, 22, 6B, F1, CF, 04, F6, 0A, 1A, 9A, D8, A1, 17, 79, 87, 39, CD, A3, 16, 97, E2, D7, 8E, 4F, BA, 05, 13, 28, AE, 5F, 7A, E9, AB, 8E, DC, 90, 3B, 13, A6, 25, 50, A1, EF, F7, 85, 34, E9, 18, D4, 75, 78, A4, 43, D6, 7D, A7, 94, 41, 1B, 92, CA, 53, 09, A8, 85, E8, 74, 69, F3, E6, 47, 9A, 93, 62, FA, BB, A1, D8, 55, B0, AC, 1D, 10, 65, F7, 06, 56, 67, F5, 20, 3C, 7D, B0, 11, 1C, 75, B8, 98, 55, 9A, D0, 74, 77, A9, A8, 82, 57, 98, 71, D6, 9C, 21, CA, 67, 47, 23, 24, 5F, 7C, B7, 09...
 
[+]

Entropy:
7.8723

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
109.5 KB (112,128 bytes)

Service
Display name:
BattlEye Service

Service name:
BEService

Type:
Win32OwnProcess


Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.