| File Name | PL2W.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.226.174 |
| Database Version | 2025-09-29 14:00:27 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
86e19f63cee42a5636e8e1dfd7bd9846
|
|
| SHA1 |
f8c6a5c62bb815732f09794e51572bf986f1a9a1
|
|
| SHA256 |
77e964b2a95208c29533a7d50f4068d1fc375281d4a335850374e0eac7d7ad1c
|
|
| SHA512 |
3aaecb58a6308a08df4021d876181050abf0239292382b73f9b96651cad7cb54707ad08445ac33b54f186803ead7fa64481c60160053371ac194f116f1930776
|
|
| ImpHash |
89ae5de6b0adf448a53ce320efa1b3fc
|
| Icon |
Hash: c289d7730c45f2643ab5f0eb5e758c7a
Fuzzy: d7ef07693c924dd96e7adb95c7c2187a dHash: 867968e4a0c454a8 |
| Image Base | 0x00400000 |
| Entry Point | 0x00a45b4f |
| Compilation Time | 2025-07-01 12:53:10 |
| Checksum | 0x00b1a7db (Actual: 0x00b1a7db) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| PDB Path | MyBuff.pdb |
| Digital Signature | OK |
| Imports | 34 libraries |
| Exports | 0 functions |
| Resources | 9 Resources |
| Sections | 5 Sections |
| FileVersion | 0.0.876 |
| FileDescription | PL2W |
| ProductVersion | 0.0.876 |
| ProductName | PL2W |
| Translation | 0x0000 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
6,654,989 bytes | 6,655,488 bytes | 6.50 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
547D1B05547370B4139F62D90989AC8B |
.rdata |
0x0065a000 |
4,647,084 bytes | 4,647,424 bytes | 7.36 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A23822B20BFD565308AF7197575E07A6 |
.data |
0x00ac9000 |
40,312 bytes | 32,768 bytes | 4.30 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BADA5E78CC5E39C8C50D55D11FAF61D3 |
.rsrc |
0x00ad3000 |
42,864 bytes | 43,008 bytes | 7.87 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C7DCC4EF467BA35C56EF8DF4EA2ACB5D |
.reloc |
0x00ade000 |
235,876 bytes | 236,032 bytes | 6.70 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
32D6E930A3D83805296E97D023E61F89 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
3 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 6 | 41,230 bytes | |
| RT_GROUP_ICON | 1 | 90 bytes | |
| RT_VERSION | 1 | 416 bytes | |
| RT_MANIFEST | 1 | 553 bytes |
| Product | PL2W |
| Description | PL2W |
| File Version | 0.0.876 |
| Signing Date | 12:53 PM 07/01/2025 (192 days ago) |
| Verification Status | Signed |
| Signers | BYTEINFO PTE. LTD.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert |
| Counter Signers | DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert |
0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D90B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 040F E8 54 4A 8F EA 57 D2 6E CB 8F 1D 37 0E 3D C8✓ This file has been digitally signed and the certificate chain has been verified
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!