Gridinsoft Logo
File Icon

The BoxingWaifu.exe (nwjs) File Analysis

Technical Analysis

File Name BoxingWaifu.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-29 08:00:34 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
2,309,120
File Size (bytes)
2025-12-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5ca3f3a98e146d526d39b664df22325d
SHA1
68ac395239070d277aff425b457abe1fdd62a118
SHA256
98de200b59372ebc1372a197693b4ca1f2bc75f56da5233f3304d0c0a2011818
SHA512
1ea5ef5e1ee4cb281442a8b04cda420e5c33f94f149808ecc1000b9c187e2aa8385d37184c3a2213c2785f7a70d432b0e9ada7bfa1b41f66b8cdc1acddd03faf
ImpHash
614f0bd19a4b46ee120cc9912646f0fd

PE Analysis

Basic Information

Icon
Hash: 5e467097386f0db0c35bc21f9f2d241e
Fuzzy: bd329ec9bf6515148fdb1e7998face63
dHash: 6126e875b0f83198
Image Base 0x140000000
Entry Point 0x140155590
Compilation Time 2020-10-04 05:00:00
Checksum 0x00000000 (Actual: 0x00238f7f)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path E:\nw71_sdk_win64\node-webkit\src\outst\nw\initialexe\nw.exe.pdb
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
nw_elf, KERNEL32, VERSION
Exports 3 functions
Resources 60 Resources
Sections 14 Sections

Version Information

CompanyName The NW.js Community
FileDescription nwjs
FileVersion 0.71.0
InternalName nw_exe
LegalCopyright Copyright 2020, The NW.js community and The Chromium Authors. All rights reserved.
OriginalFilename nw.exe
ProductName nwjs
ProductVersion 0.71.0
CompanyShortName nwjs.io
ProductShortName nwjs
LastChange 62f83a7521ae1f32e563795732dff0c9da1b660d-refs/heads/master@{#812354}
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,631,041 bytes 1,631,232 bytes 6.59 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C1E91468A9D43C3390FAD3D02FB17763
.rdata 0x00190000 337,996 bytes 338,432 bytes 5.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C7273CBB87215FC7FFF21F0C80015FEA
.data 0x001e3000 52,704 bytes 18,432 bytes 3.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B42D2BD7371B544F76E4627E90A446A3
.pdata 0x001f0000 60,120 bytes 60,416 bytes 6.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B6C463222BF593D4F5BE806634C2BD9F
.00cfg 0x001ff000 40 bytes 512 bytes 0.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4EE4FEFBD4BA695BAD80650F3E51C5CA
.gxfg 0x00200000 11,456 bytes 11,776 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6E165298F9AD55FC08C87782A40B0FE4
.retplne 0x00203000 116 bytes 512 bytes 1.12 (Normal) 0x00000000 5B9AE538AE2A6135B6C4750C10AD0A45
.tls 0x00204000 385 bytes 512 bytes 0.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 84A5CC7FDE7AB630DE2A035B64EE65F2
.voltbl 0x00205000 68 bytes 512 bytes 1.14 (Normal) 0x00000000 A596ACE00344A4353F556BC517A7E489
CPADinfo 0x00206000 56 bytes 512 bytes 0.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 60D3EA61D541C9BE2E845D2787FB9574
_RDATA 0x00207000 244 bytes 512 bytes 2.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 16E785FFF73F76EA648ACA912DE8FED2
malloc_h 0x00208000 326 bytes 512 bytes 4.70 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CC3E8834ABA34F2E67E0B921DD3003CD
.rsrc 0x00209000 235,220 bytes 235,520 bytes 6.52 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BA070866FBDB9BC521D2F17668B2F406
.reloc 0x00243000 8,504 bytes 8,704 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D284AB708EFD77754007A8E096C59A14
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 60 (232,061 bytes)
Resource Type Count Total Size Percentage
GOOGLEUPDATEAPPLICATIONCOMMANDS 1 4 bytes
0%
RT_CURSOR 23 56,516 bytes
24.4%
RT_ICON 12 172,967 bytes
74.5%
RT_GROUP_CURSOR 21 448 bytes
0.2%
RT_GROUP_ICON 1 76 bytes
0%
RT_VERSION 1 1,072 bytes
0.5%
RT_MANIFEST 1 978 bytes
0.4%

Certificate Chain Analysis

Certificate Information
Product nwjs
Description nwjs
File Version 0.71.0
Original Name nw.exe
Internal Name nw_exe
Copyright Copyright 2020, The NW.js community and The Chromium Authors. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware