steamservice.exe

Steam Client Service

Valve Corporation

The executable steamservice.exe has been detected as malware by 7 anti-virus scanners. It runs as a separate (within the context of its own process) windows Service named “Steam Client Service”.
Publisher:
Valve Corporation

Product:
Steam Client Service

Version:
02.10.92.36

MD5:
c26067b8f6252e1a7f98b45a11f02ef7

SHA-1:
fd144fa9b79f581fca0f54ef6f1a8e3ae3c792e7

SHA-256:
208386c442879f981bb1b8f2a06671120eec99e3b45befcf5e423ea4c64762fd

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
4/23/2024 11:09:56 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Patched.Gen
7.11.30.172

avast!
Win32:Sality
141023-1

AVG
Win32/Sality
2015.0.3312

Bkav FE
W32.HfsAutoA
1.3.0.4959

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.28.2.62841

Qihoo 360 Security
Malware.QVM10.Gen
1.0.0.1015

VIPRE Antivirus
Threat.4758034
33706

File size:
555.3 KB (568,598 bytes)

Product version:
01.00.00.01

Copyright:
Copyright (C) 2007

Original file name:
SteamSer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\steam\steamservice.exe

File PE Metadata
Compilation timestamp:
2/8/2014 6:19:46 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
12288:sh2GhaXU65iCX6F/aSErbwh+e+ZnPvwbC/dCAJ7k4gw386S+Ltd:sh2GaXy/sbwhH+dPv3dCAJ7k4gr6SEj

Entry address:
0x3DC4A

Entry point:
E8, 31, 9B, 00, 00, E9, 95, FE, FF, FF, 3B, 0D, A4, 60, 47, 00, 75, 02, F3, C3, E9, B8, 9B, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 56, 8B, 44, 24, 14, 0B, C0, 75, 28, 8B, 4C, 24, 10, 8B, 44, 24, 0C, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 08, F7, F1, 8B, F0, 8B, C3, F7, 64, 24, 10, 8B, C8, 8B, C6, F7, 64, 24, 10, 03, D1, EB, 47, 8B, C8, 8B, 5C, 24, 10, 8B, 54, 24, 0C, 8B, 44, 24, 08, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 14, 8B, C8, 8B, 44, 24, 10, F7...
 
[+]

Code size:
356 KB (364,544 bytes)

Service
Display name:
Steam Client Service

Description:
Steam Client Service monitors and updates Steam content

Type:
Win32OwnProcess


Remove steamservice.exe - Powered by Reason Core Security