The steam api dll (Steam Client API (buildbot winslave007@WUS)) Valve Corporation File Malware Analysis
Gridinsoft Logo

The steam_api.dll (Steam Client API (buildbot_winslave007@WUS)) File Analysis

Technical Analysis

File Name steam_api.dll
File Type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-24 22:00:27 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
255,776
File Size (bytes)
2025-11-24
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e9ecb1d50df1e8b2fe379d52b9d6ba92
SHA1
875accf111e112c72a4c7aa2233bff788b5ca1f4
SHA256
d1757479242125561628f75864eaef3118f7bf5b6b136cf3681c21e2da612b48
SHA512
2a2bac4608ed3498497e27419165cdaf07f60e5c8d177e1a012993998e602bcd1537de40919042b0991bef72ee2b44734d98eaf872497ff4351064024accd8a0
ImpHash
06e305bee2daaee7e460215e3cec08cf

PE Analysis

Basic Information

Image Base 0x10000000
Entry Point 0x100ad570
Compilation Time 2016-12-12 17:11:03
Checksum 0x00042fe0 (Actual: 0x00042fe0)
OS Version 6.0
PEiD Signatures PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Digital Signature Chain verification from CN=WUS! (serial:-157436603549159170985849493119660995033, sha1:48b9df1f1627813464bcbb80a26e791e348501c0) failed: The X.509 certificate provided is self-signed - "Common Name: WUS!"
Imports 8 libraries
KERNEL32, ADVAPI32, ntdll, PSAPI, SHELL32, SHLWAPI, USER32, WS2_32
Exports 88 functions
Resources 2 Resources
Sections 3 Sections

Version Information

LegalCopyright Copyright (C) NisCkxU544c
InternalName Steam Client API
FileVersion 01.0.1.07
CompanyName Valve Corporation
ProductVersion 01.00.00.01
FileDescription Steam Client API (buildbot_winslave007@WUS)
Source Control ID 1337110
OriginalFilename steam_api.dll
ProductName Steam Client API
Translation 0x0409 0x04b0
CompanyName Valve Corporation
FileDescription Steam Client API
FileVersion 1, 0, 0, 1
InternalName Steam Client API
LegalCopyright Copyright (C) 2007
OriginalFilename steam_api.dll
ProductName Steam Client API
ProductVersion 1, 0, 0, 1
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
WUS0 0x00001000 458,752 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
WUS1 0x00071000 249,856 bytes 247,808 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AF153EFE706CDAC9AF9144303380BF2C
.rsrc 0x000ae000 8,192 bytes 5,632 bytes 4.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE ED830080ABC708C04CC3531A65E6C4ED
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

Total Resources: 2 (1,640 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 2 1,640 bytes
100%

Certificate Chain Analysis

Certificate Information
Product Steam Client API
Description Steam Client API (buildbot_winslave007@WUS)
File Version 01.0.1.07
Original Name steam_api.dll
Verification Status A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
Signers WUS!
Internal Name Steam Client API
Copyright Copyright (C) NisCkxU544c
Certificate Chain Summary
WUS! #1 Primary
Validity Period: 2014-06-30 22:00:00 → 2087-12-31 22:00:00
Signature Algorithm: 1.3.14.3.2.29
Serial Number: 89 8E D0 26 8C 72 58 97 42 F9 55 0B FE 73 CE 27

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

Chain verification from CN=WUS! (serial:-157436603549159170985849493119660995033, sha1:48b9df1f1627813464bcbb80a26e791e348501c0) failed: The X.509 certificate provided is self-signed - "Common Name: WUS!"

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware