The steam转服工具箱 exe (steamweb exe) File Malware Analysis
Gridinsoft Logo
File Icon

The steam转服工具箱.exe (steamweb.exe) File Analysis

Updated 3 days ago
Checked by Malware Check
steam转服工具箱.exe

Technical Analysis

File Name steam转服工具箱.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
393216:ss9tTiR7KbxCnv2azd4rBUDPD9ncOGwZd8yh5:ssnsOFe2Sd8BEvZd8
Scanner Version 1.0.223.174
Database Version 2025-08-26 14:00:39 UTC
⚠

Suspicious File Detected

Detected by 47 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
65%
Detection Rate
13,594,112
File Size (bytes)
47/72
Engines Detected
2025-08-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e3374a4f4f8b835cd1ac812dd718c548
SHA1
6ede65bb8d310c7da90582878f4468aa258860cc
SHA256
30a0bfa5ea4bfe76867e243af1c3bd7030fcf63dfa0ee351e0fb9a00152b0060
SHA512
7535bcb7c701dfbbf1897ca73d5095bf7c2552fd1a1653d0452c93cbd0b793526859419a27423fcc871049e4b0c215d3c6fd8f32ad2e6f52a8b26fe00f4e1909
ImpHash
dbddda14b2c5952f66b165aa2aa59eaa

Security Engines with Detections (47 of 72)

Bkav
W64.AIDetectMalware Malicious
Lionic
Trojan.Win32.Agent.Y!c Malicious
AVG
Win64:MalwareX-gen [Trj] Malicious
MicroWorld-eScan
Gen:Variant.Mikey.180852 Malicious
CAT-QuickHeal
Trojan.Ghanarava.175598950518c548 Malicious
Skyhigh
BehavesLike.Win64.Trojan.rc Malicious
ALYac
Gen:Variant.Mikey.180852 Malicious
Cylance
Unsafe Malicious
VIPRE
Gen:Variant.Mikey.180852 Malicious
K7AntiVirus
Trojan ( 005c91a31 ) Malicious
K7GW
Trojan ( 005c91a31 ) Malicious
CrowdStrike
win/malicious_confidence_100% (W) Malicious
VirIT
Trojan.Win64.Agent.IOH Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Elastic
malicious (high confidence) Malicious
ESET-NOD32
Python/Agent.BGV Malicious
Cynet
Malicious (score: 99) Malicious
APEX
Malicious Malicious
Paloalto
generic.ml Malicious
Kaspersky
Trojan.Win64.Agent.smepfd Malicious
BitDefender
Gen:Variant.Mikey.180852 Malicious
Avast
Win64:MalwareX-gen [Trj] Malicious
Rising
Trojan.Agent!8.B1E (CLOUD) Malicious
Emsisoft
Gen:Variant.Mikey.180852 (B) Malicious
F-Secure
Trojan.TR/Drop.Agent.arqmb Malicious
TrendMicro
TROJ_GEN.R002C0DHN25 Malicious
McAfeeD
ti!30A0BFA5EA4B Malicious
CTX
exe.trojan.generic Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
Trojan.Win64.Agent Malicious
GData
Gen:Variant.Mikey.180852 Malicious
Jiangmin
Trojan.Agent.fdpl Malicious
Varist
W64/ABTrojan.PFKE-2462 Malicious
Avira
TR/Drop.Agent.arqmb Malicious
Arcabit
Trojan.Mikey.D2C274 Malicious
Microsoft
Trojan:Win32/Malgent!MSR Malicious
Google
Detected Malicious
AhnLab-V3
Trojan/Win.Generic.R718491 Malicious
Malwarebytes
Malware.AI.3901086811 Malicious
Panda
Trj/PhxBzA.A Malicious
TrendMicro-HouseCall
TROJ_GEN.R002C0DHN25 Malicious
Tencent
Malware.Win32.Gencirc.149bd069 Malicious
TrellixENS
Artemis!E3374A4F4F8B Malicious
MaxSecure
Trojan.Malware.410138675.susgen Malicious
Fortinet
W32/PossibleThreat Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Trojan:Python/Mikey.Gen Malicious
25 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 44000d15a4585e52424408bb9ea67707
Fuzzy: e87e8418a822cf16dc8ff3a66d1b06b6
dHash: 70e4e4d3f2bcc8f0
Image Base 0x140000000
Entry Point 0x14000d894
Compilation Time 2025-08-11 03:54:57
Checksum 0x00000000 (Actual: 0x00d02f2e)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 2 libraries
SHELL32, KERNEL32
Exports 0 functions
Resources 5 Resources
Sections 6 Sections

Version Information

▼
ProductName steamweb
ProductVersion 0.0.0.229
FileVersion 0.0.0.229
OriginalFilename steamweb.exe
InternalName steamweb
FileDescription steamweb.exe
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 144,368 bytes 144,384 bytes 6.51 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 525BC0CD7A645074F78EA599AEA85982
.rdata 0x00025000 52,066 bytes 52,224 bytes 5.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7054DB533261D75BD39F1DC0EB5ADA7B
.data 0x00032000 167,552 bytes 3,072 bytes 1.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C8B02EF18C8E684F2C300CDB3762CD07
.pdata 0x0005b000 6,240 bytes 6,656 bytes 5.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C428284E365A77C103E0EF715364D310
.rsrc 0x0005d000 13,384,688 bytes 13,384,704 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 84A605B3F54014A9AC4BD54657D5FAE0
.reloc 0x00d21000 1,680 bytes 2,048 bytes 4.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3272AF9FDD0AA51F457F989D1FDB6467
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 5 (13,384,312 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 16,936 bytes
0.1%
RT_RCDATA 1 13,365,512 bytes
99.9%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 568 bytes
0%
RT_MANIFEST 1 1,276 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product steamweb
Description steamweb.exe
File Version 0.0.0.229
Original Name steamweb.exe
Internal Name steamweb

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
47 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware