home

beservice.exe

Bastian Suter

This is a setup program which is used to install the application. The file has been seen being downloaded from battleye.com.
Publisher:
Bastian Suter  (signed and verified)

MD5:
0031b3320c69be196b5aec4a68adc182

SHA-1:
d0d34c7294843c35748e1d1778e11e6efb737d5d

SHA-256:
e361711581168f5670444c75bc1680b7500a26aee85a2106f9bd516f603df0c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 7:16:08 PM UTC  (today)

File size:
631.9 KB (647,040 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\beservice.exe

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
3/4/2014 9:00:00 PM

Valid to:
5/13/2015 9:00:00 AM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F01D40307832B7F6747D7AB752213DC

File PE Metadata
Compilation timestamp:
1/6/2015 5:54:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
12288:2G30o1wQaSusHudmO1jiCZcK4Bya04UWxGna6xw4cASzEC89kG0MHqoL1r:2GEo+QDudj9ZcKSWA8a6xSgckvJr

Entry address:
0x10074B

Entry point:
68, E0, 04, B8, 03, E9, DB, E4, FA, FF, 0F, 8E, 2D, A6, F7, FF, E8, FE, 8F, F7, FF, 84, EF, E9, B3, BF, FA, FF, 31, C0, E9, 85, B9, F6, FF, 85, FF, E8, 1E, F2, F7, FF, 68, 9F, E4, 78, 21, 43, 3D, 31, 9C, 57, 49, 06, F5, 0A, C5, 2C, 7E, DF, 52, 3B, 9C, 28, 95, 38, F8, F7, CE, 76, FD, 3E, A9, 47, CE, 25, C1, EB, 1B, D2, 33, 8F, 6E, 3F, 51, BE, 61, 98, 3C, 24, C1, 28, DD, E2, C0, AC, 6F, 28, D2, 9C, 44, D8, D1, 2A, 52, F7, B6, B1, 0B, E4, 30, 44, 4D, FF, 53, C1, 6E, 2D, C5, A6, F0, 01, 8C, 13, 77, 44, 5B, F0...
 
[+]

Code size:
64 KB (65,536 bytes)

The file beservice.exe has been seen being distributed by the following URL.

http://battleye.com/downloads/.../BEService.exe

Scan beservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.