| File Name | steamclient_loader.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.229.174 |
| Database Version | 2025-11-19 02:00:24 UTC |
Malware family: GenericMC
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
ec93cfd90257e91a5590e1812aae9113
|
|
| SHA1 |
540a4962d904e7a43400eafba882a3f4cc751a62
|
|
| SHA256 |
dc9720d7e2bf6d9588283fa298ce1501f25e6f9b1e2ac1e2f39de744e08fb976
|
|
| SHA512 |
d33113630575759c1018a8a0ac0f50b62bae0e3dcd53adef0d9a236c80564331dfa3c4de8f9fc311e16e678004922ad621883dfca67d9cc569fbde6480291df5
|
|
| ImpHash |
32b975e2085afab52d42e49073b45886
|
| Image Base | 0x00400000 |
| Entry Point | 0x00401b34 |
| Compilation Time | 2020-05-26 14:50:30 |
| Checksum | 0x00000000 (Actual: 0x0001aaca) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Digital Signature | No valid SignedData structure was found. |
| Imports |
3 libraries
ADVAPI32, USER32, KERNEL32 |
| Exports | 0 functions |
| Resources | 0 Resources |
| Sections | 5 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
45,780 bytes | 46,080 bytes | 6.62 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8B95CCB501BF97A19305B8A7B584A9D4 |
.rdata |
0x0000d000 |
23,566 bytes | 24,064 bytes | 4.90 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
7CAC62D4696CC284C717DBF1C1822725 |
.data |
0x00013000 |
5,040 bytes | 2,560 bytes | 1.81 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BFBFC54D41DD5C042A36711C3A57C892 |
.gfids |
0x00015000 |
176 bytes | 512 bytes | 0.91 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
FE5333A12DEB60503B2726DE55026454 |
.reloc |
0x00016000 |
3,668 bytes | 4,096 bytes | 6.23 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
563B2B399EC289037ED98C8CDE108A82 |
1 section(s) with elevated entropy (≥6.5) - possible compression
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win32.GenericMC.cc without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!