The game exe (nwjs) The NW js Community File Malware Analysis

The game.exe (nwjs) File Analysis

Updated 1 month ago

Checked by Malware Check

game.exe

Hash Type	Value	Action
MD5	7956bd80ab334bd015799b72c45d65c7
SHA1	eb6c079f6bcf29c517dcf8fbd7ca9ab0a634f746
SHA256	e1107da892eebe597f349324e82f2fff7049b4514cac1b3df6c90427928bf0bb
SHA512	393b35eed5bde72d7a13260d0988d425881d3ff9f73836753d4bfee2d4ef51bdb2b61826268b138fc1c72945a7bbfa43e085adc46a9f0305d86ecf7111205b1d
ImpHash	c6b4245ae224ede7ea8cbc47fd22f217

Hash Type

Value

Action

MD5

7956bd80ab334bd015799b72c45d65c7

SHA1

eb6c079f6bcf29c517dcf8fbd7ca9ab0a634f746

SHA256

e1107da892eebe597f349324e82f2fff7049b4514cac1b3df6c90427928bf0bb

SHA512

393b35eed5bde72d7a13260d0988d425881d3ff9f73836753d4bfee2d4ef51bdb2b61826268b138fc1c72945a7bbfa43e085adc46a9f0305d86ecf7111205b1d

ImpHash

c6b4245ae224ede7ea8cbc47fd22f217

PE Analysis

Basic Information

▼

Icon	Hash: c78ea2e284ddc9feb131b0bb9b0335f2 Fuzzy: 359bb7409f6d66c2043431322b378e73 dHash: 70f0b23319aecc70
Image Base	`0x140000000`
Entry Point	`0x1401339f0`
Compilation Time	2020-10-04 05:00:00
Checksum	0x00000000 (Actual: 0x00214678)
OS Version	5.2
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`nw.exe.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	3 libraries nw_elf, KERNEL32, VERSION
Exports	2 functions
Resources	18 Resources
Sections	10 Sections

Version Information

▼

CompanyName	The NW.js Community
FileDescription	nwjs
FileVersion	0.49.2
InternalName	nw_exe
LegalCopyright	Copyright 2020, The NW.js community and The Chromium Authors. All rights reserved.
OriginalFilename	nw.exe
ProductName	nwjs
ProductVersion	0.49.2
CompanyShortName	nwjs.io
ProductShortName	nwjs
LastChange	62f83a7521ae1f32e563795732dff0c9da1b660d-refs/heads/master@{#812354}
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	1,451,081 bytes	1,451,520 bytes	6.56 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B8080E022527EA9A6A7171B2124772BC`
`.rdata`	`0x00164000`	306,860 bytes	307,200 bytes	5.61 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FB81B53087F9FE7269825B1460C03CB6`
`.data`	`0x001af000`	38,136 bytes	14,848 bytes	3.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C1EE7A1E04270F6E56D67D147F834D86`
`.pdata`	`0x001b9000`	54,552 bytes	54,784 bytes	5.99 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`86B782914F34CB4EBD07EF60933D8A77`
`.00cfg`	`0x001c7000`	16 bytes	512 bytes	0.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7BBAF74A9C27EA01E0206847EE2916A5`
`.retplne`	`0x001c8000`	12 bytes	512 bytes	0.22 (Normal)	`0x00000000`	`BCDEE87F658A7BF4080188F07DB97CA9`
`.tls`	`0x001c9000`	305 bytes	512 bytes	0.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`9AA06F145D2598570C21005B86668587`
`CPADinfo`	`0x001ca000`	56 bytes	512 bytes	0.12 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`60D3EA61D541C9BE2E845D2787FB9574`
`.rsrc`	`0x001cb000`	320,176 bytes	320,512 bytes	5.17 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9853493BABEF06D9F32DEDDF237ABA03`
`.reloc`	`0x0021a000`	8,860 bytes	9,216 bytes	5.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`011B3B334D48E0893C8DB10FE095108A`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 18 (318,985 bytes)

Resource Type	Count	Total Size	Percentage
GOOGLEUPDATEAPPLICATIONCOMMANDS	1	4 bytes	0%
RT_ICON	12	316,655 bytes	99.3%
RT_GROUP_ICON	3	186 bytes	0.1%
RT_VERSION	1	1,072 bytes	0.3%
RT_MANIFEST	1	1,068 bytes	0.3%

Certificate Chain Analysis

▼

Certificate Information

Product	nwjs
Description	nwjs
File Version	0.49.2
Original Name	nw.exe
Internal Name	nw_exe
Copyright	Copyright 2020, The NW.js community and The Chromium Authors. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	game.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-05 05:00:22 UTC

The game.exe (nwjs) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification