Gridinsoft Logo
File Icon

The Game.exe (nwjs) File Analysis

Updated 2 months ago
Checked by Malaware Check
Game.exe

Technical Analysis

File Name Game.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
393216:M/tx9V6EtFqnsv0pOgtoouWOXEXh0DCuSP4q:M/STscpZoou1EXhCCuc4
Scanner Version 1.0.210.174
Database Version 2025-03-16 20:01:08 UTC
⚠

Suspicious File Detected

Detected by 38 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
53%
Detection Rate
13,949,440
File Size (bytes)
38/72
Engines Detected
2025-03-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6ed9e98d72c3b90c4c53bc494b93f779
SHA1
5b24aad5d1390ac2839fb983d434bc706b8560e3
SHA256
daef8b17f9abd0428591c52b552111c96da6dc7f157706fbcc626e79e4bf97c4
SHA512
02a8e752b7cb303efbfa7575f2da3107e046c97b84aa728718f2c92f0fbdb4016c247ab0a39646b8dc8b2c615fa2580c02e122b85ef0ed784605e9a47ba4dc39
ImpHash
06e92274acfc634954cfaeb76f65dd0d

Security Engines with Detections (38 of 72)

Bkav
W32.Common.E822DD8D Malicious
Lionic
Trojan.Win32.Enigma.4!c Malicious
Elastic
malicious (high confidence) Malicious
MicroWorld-eScan
Trojan.GenericKD.74634072 Malicious
FireEye
Trojan.GenericKD.74634072 Malicious
CAT-QuickHeal
Trojan.Ghanarava.173269711093f779 Malicious
Skyhigh
BehavesLike.Win64.Drixed.tc Malicious
McAfee
Artemis!6ED9E98D72C3 Malicious
Cylance
Unsafe Malicious
VIPRE
Trojan.GenericKD.74634072 Malicious
Sangfor
PUP.Win64.Packed.Vqva Malicious
CrowdStrike
win/malicious_confidence_60% (D) Malicious
BitDefender
Trojan.GenericKD.74634072 Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of Win64/Packed.Enigma.DR Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09KE24 Malicious
Paloalto
generic.ml Malicious
Alibaba
Packed:Win64/Enigma_AGen.b7a96b40 Malicious
Avast
Win64:MalwareX-gen [Trj] Malicious
Emsisoft
Trojan.GenericKD.74634072 (B) Malicious
Zillya
Trojan.EnigmaAGen.Win64.66 Malicious
McAfeeD
ti!DAEF8B17F9AB Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Ikarus
Backdoor.Bedep Malicious
GData
Trojan.GenericKD.74634072 Malicious
Google
Detected Malicious
Varist
W64/ABRisk.MJFT-0445 Malicious
Antiy-AVL
Trojan[Packed]/Win64.Enigma Malicious
Arcabit
Trojan.Generic.D472D358 Malicious
Microsoft
Program:Win32/Wacapew.C!ml Malicious
ALYac
Trojan.GenericKD.74634072 Malicious
Zoner
Probably Heur.ExeHeaderL Malicious
Rising
[email protected] (TAGGANT:JnbrrFTh3HSy1AqEnm5aIA) Malicious
CTX
exe.trojan.enigma Malicious
Fortinet
W32/PossibleThreat Malicious
AVG
Win64:MalwareX-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
VirTool:Win/Wacapew.C9nj Malicious
34 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: c78ea2e284ddc9feb131b0bb9b0335f2
Fuzzy: 359bb7409f6d66c2043431322b378e73
dHash: 70f0b23319aecc70
Image Base 0x140000000
Entry Point 0x141280110
Compilation Time 2018-09-02 05:00:00
Checksum 0x00000000 (Actual: 0x00d59326)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
kernel32, user32, advapi32, oleaut32, gdi32, shell32, version, ole32, nw_elf
Exports 2 functions
Resources 18 Resources
Sections 13 Sections

Version Information

▼
CompanyName The NW.js Community
FileDescription nwjs
FileVersion 0.48.4
InternalName nw_exe
LegalCopyright Copyright 2020, The NW.js community and The Chromium Authors. All rights reserved.
OriginalFilename nw.exe
ProductName nwjs
ProductVersion 0.48.4
CompanyShortName nwjs.io
ProductShortName nwjs
LastChange ac9418ba9c3bd7f6baaffa0b055dfe147e0f8364-refs/branch-heads/3538@{#468}
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00001000 1,433,600 bytes 613,376 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 05D9AAD4114811CB952A88CA656A8199
0x0015f000 307,200 bytes 90,624 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E73186F58C7317A9E612CE528F89B011
0x001aa000 40,960 bytes 2,560 bytes 7.46 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 13D04B054956CF7A4ED2697A29A2E02C
0x001b4000 57,344 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
0x001c2000 4,096 bytes 512 bytes 0.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 16C968039D447F60D9CF5B30B82F63EB
0x001c3000 4,096 bytes 512 bytes 0.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C55F35085DF35CB27ADE7EFB0F06876A
0x001c4000 4,096 bytes 512 bytes 0.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9175A18D462A06AE9D9F4194EC5FDC57
0x001c5000 4,096 bytes 512 bytes 0.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1BC42A57238389902E327621934798A7
0x001c6000 323,584 bytes 512 bytes 0.60 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E37DF0D8F47716B7FFC112755C1A66F3
0x00215000 12,288 bytes 3,584 bytes 7.49 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 104DA88DE128B6536C8432C76DA00AC0
.rsrc 0x00218000 323,584 bytes 321,536 bytes 5.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BC7F4909607C0A7EF94F8B2A2FC6D1BF
0x00267000 13,586,432 bytes 9,605,632 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3568C23F48FF52709433502036813774
0x00f5c000 3,309,568 bytes 3,308,544 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FCC713D74C8F807BC811C672564BE834
Entropy Analysis Alert

4 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 18 (319,900 bytes)
Resource Type Count Total Size Percentage
GOOGLEUPDATEAPPLICATIONCOMMANDS 1 4 bytes
0%
RT_ICON 12 316,655 bytes
99%
RT_GROUP_ICON 3 186 bytes
0.1%
RT_VERSION 1 1,076 bytes
0.3%
RT_MANIFEST 1 1,979 bytes
0.6%

Certificate Chain Analysis

▼
Certificate Information
Product nwjs
Description nwjs
File Version 0.48.4
Original Name nw.exe
Internal Name nw_exe
Copyright Copyright 2020, The NW.js community and The Chromium Authors. All rights reserved.
Certificate Chain Summary
tg167AA03 #1 Primary
Validity Period: 2021-06-10 07:53:18 → 2031-06-10 07:53:18
Signature Algorithm: sha256RSA
Serial Number: 4C 92 18 96 8B 96 0B C3 97 05 82 A5 FA 03 50 A6 4A 08 28 7D
Enigma Protector CA #2 Chain
Validity Period: 2019-02-05 16:34:15 → 2039-02-05 16:34:15
Signature Algorithm: sha256RSA
Serial Number: 2C ED 5C 2C 5D B4 B7 06 CF DF 0F 49 77 45 62 80 4F DC 00 C7

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
38 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware