Gridinsoft Logo
File Icon

The SnowRunner.exe (SnowRunner) File Analysis

Updated 3 days ago
Checked by Malaware Check
SnowRunner.exe

Technical Analysis

File Name SnowRunner.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-01 16:00:26 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
46,189,296
File Size (bytes)
2025-06-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
135540ec55552b98742edad257dddb08
SHA1
ee4030e98030b3d6dfeee13f4086faed9ded0f60
SHA256
e2e1db04fe1700ada75aae0e6336619ceb2b621b06e752402a99c2c8d6dfd371
SHA512
6dc305316e89c1c8cf8f2817e236f90abeb887e44783620dcb075dbba142f8ce72566568e5b9bc20b2cf1f87ebfe9dbc2a9ecbabbf7caffd5c27f9f06c9d2a96
ImpHash
0bd7bfd6e41e2a6203d2d1d484f0d47a

PE Analysis

Basic Information

▼
Icon
Hash: 650e3e65b44116a8e4d92f469a152aa6
Fuzzy: dcda4784bc175ab1988ee28df2e065e5
dHash: 0e1f13273332328d
Image Base 0x140000000
Entry Point 0x141e36f78
Compilation Time 2025-03-13 16:35:52
Checksum 0x02c115d6 (Actual: 0x02c115d6)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path SnowRunner.pdb
Digital Signature OK
Imports 46 libraries
Exports 371 functions
Resources 16 Resources
Sections 7 Sections

Version Information

▼
CompanyName Focus Home Interactive
FileDescription SnowRunner
FileVersion 1.0.0.0
InternalName SnowRunner
LegalCopyright 2020 (c) Saber Interactive. All rights reserved.
OriginalFilename SnowRunner.exe
ProductName SnowRunner™
ProductVersion 1.663329.SNOW_DLC_15
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 35,115,391 bytes 35,115,520 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 36C72C073C8C1EFADFBEA69F71E21BAB
.rdata 0x0217f000 8,175,638 bytes 8,176,128 bytes 5.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BCC898DCD165FA4C9CD3B12856EF4C48
.data 0x0294c000 2,155,744 bytes 728,064 bytes 4.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5D05BA9AFA9F8BC52DB2901381C0A27B
.pdata 0x02b5b000 1,859,100 bytes 1,859,584 bytes 7.02 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 28837A23B407A8B4FC0DE924928E1F02
_RDATA 0x02d21000 37,424 bytes 37,888 bytes 7.28 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E9A4ED3E7AEA0D64CFF06BAF0E886CB1
.rsrc 0x02d2b000 43,488 bytes 43,520 bytes 6.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0588D7309B84A1B20F4D8F0A41DA0F0A
.reloc 0x02d36000 216,648 bytes 217,088 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A29708075937BB4226C5006CCFF62DF5
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 16 (42,468 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 2 8,536 bytes
20.1%
RT_ICON 5 17,952 bytes
42.3%
RT_DIALOG 3 1,240 bytes
2.9%
RT_RCDATA 1 13,806 bytes
32.5%
RT_GROUP_CURSOR 2 40 bytes
0.1%
RT_GROUP_ICON 2 82 bytes
0.2%
RT_VERSION 1 812 bytes
1.9%

Certificate Chain Analysis

▼
Certificate Information
Product SnowRunner™
Description SnowRunner
File Version 1.0.0.0
Original Name SnowRunner.exe
Signing Date 06:50 AM 03/14/2025 (83 days ago)
Verification Status Signed
Signers Focus Entertainment SA; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name SnowRunner
Copyright 2020 (c) Saber Interactive. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2024 #4 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
Focus Entertainment SA #5 Chain
Validity Period: 2023-04-20 00:00:00 → 2026-04-19 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A AB 03 1B F1 01 D4 57 1F B0 35 7A 77 FA D2 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware