| File Name | Christmas Shopper Simulator.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2025-12-17 22:00:35 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
2f82d090257f6bfbde7a35ebb00ed5c9
|
|
| SHA1 |
d3c97adc38bc075f8c1cf257b3a308895b9ec575
|
|
| SHA256 |
4e8974811b2e7a4f72511c15d64fde39ae1284c9f34432559c642c3e2a88bba7
|
|
| SHA512 |
c71ff877cc839dae02ed50d390e51648da10282ca9ef3808b66b9e4e0697eb669d6faa1f71c4d0834d9189ce1fcc92f1190004ee7e3c7fe3d8c353125b2aa841
|
|
| ImpHash |
924f98f41dfdc13e60df3ce5a25a5b8c
|
| Icon |
Hash: 1244e1e728c6f76d6ead9e282cf5568b
Fuzzy: 0f3cac88a36eae163e29203ce663b89b dHash: 70e8d4f0f0f0f0cc |
| Image Base | 0x00400000 |
| Entry Point | 0x0089e643 |
| Compilation Time | 2014-09-26 14:07:28 |
| Checksum | 0x00000000 (Actual: 0x00b1ced0) |
| OS Version | 5.1 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| PDB Path | C:\BuildAgent\temp\buildTmp\UnityPlayer_Symbols.pdb |
| Digital Signature | No valid SignedData structure was found. |
| Imports | 18 libraries |
| Exports | 60 functions |
| Resources | 17 Resources |
| Sections | 7 Sections |
| FileVersion | 4.6.0.166390 |
| ProductVersion | 4.6.0.166390 |
| Unity Version | 4.6.0b20_a3ecf55f1347 |
| Translation | 0x0409 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
8,770,876 bytes | 8,771,072 bytes | 6.75 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
F8EA752FF64A0EAA9A93D1A9AC0D78DE |
.rdata |
0x0085f000 |
1,676,394 bytes | 1,676,800 bytes | 5.94 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
89938458603DE68C567347D604CCC1C7 |
.data |
0x009f9000 |
836,384 bytes | 189,440 bytes | 5.66 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1CA4B4D77A46CCCF4AA229CB09009088 |
.trace |
0x00ac6000 |
5,236 bytes | 5,632 bytes | 5.18 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E0456C38B97E3EA348AEA8346086F6D8 |
_RDATA |
0x00ac8000 |
1,344 bytes | 1,536 bytes | 4.23 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C00EC57F9D821850BAAA2F2B82288D15 |
.rsrc |
0x00ac9000 |
566,088 bytes | 566,272 bytes | 3.20 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EE0D93CFC829BAD9A4FCB1B28B6A09DF |
.reloc |
0x00b54000 |
378,628 bytes | 378,880 bytes | 5.86 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
A024CFB2CBBD16FEB73538C467C41587 |
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 9 | 562,568 bytes | |
| RT_DIALOG | 5 | 1,372 bytes | |
| RT_GROUP_ICON | 1 | 132 bytes | |
| RT_VERSION | 1 | 424 bytes | |
| RT_MANIFEST | 1 | 601 bytes |
| File Version | 4.6.0.166390 |
✓ This file has been digitally signed and the certificate chain has been verified
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!