PolicyAnalyzer.exe
- File Path:
C:\PolicyAnalyzer_40\PolicyAnalyzer.exe
- Description: Policy Analyzer
- Comments: Created by Aaron Margosis
Hashes
| Type |
Hash |
| MD5 |
87508D26997D549E56F288153C4AE917 |
| SHA1 |
CBAFE3C43631E82779E24F54B6766972F9EEED17 |
| SHA256 |
5EA8F6CE569E6B03374D5B92875383286DFD833A389015C7D6C5A03E7B0844D8 |
| SHA384 |
DD0EF6C6BC0D52710C8FF2E5C7C8A9EB5241D345A096A833B1C6D331677DEC9E87331E1F598C56AA26180C425625991B |
| SHA512 |
921C4E9AE7CBD7796631C928A7EB40BFB78E1CB13A7489ACC806568727F0DB475243E88D3AEBD1233FDAF953DE91D5AB8006280AA75A407C6D4BFFE71B9C25F1 |
| SSDEEP |
3072:q/6eGxnzhG1xoWSUqRHiHPuaeeKUd8wtUg3bSbfNhfl0TdcwKae2idAs7X73Y1cQ:9L7sPxKUDUg3bSbf5YOX7o1c6z |
| IMP |
F34D5F2D4577ED6D9CEEC516C1F5A744 |
| PESHA1 |
E56FB92BE65815F63067DCD3201D7EB94298B993 |
| PE256 |
24ECBB1E04BF9EE678314CC0DC00621396B1A6572EBF591CD676348A12A37188 |
Runtime Data
Window Title:
Policy Analyzer v4.0.2004.13001
Open Handles:
| Path |
Type |
| (R-D) C:\Windows\Fonts\StaticCache.dat |
File |
| (R-D) C:\Windows\System32\en-US\user32.dll.mui |
File |
| (R-D) C:\Windows\System32\en-US\winnlsres.dll.mui |
File |
| (RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.488_none_4238de57f6b64d28 |
File |
| (RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21 |
File |
| (RW-) C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_faefa4f37613d18e |
File |
| (RW-) C:\xCyclopedia |
File |
| ...\Cor_SxSPublic_IPCBlock |
Section |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\Cor_Private_IPCBlock_v4_9120 |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
| \Sessions\1\BaseNamedObjects\windows_shell_global_counters |
Section |
| \Sessions\1\Windows\Theme2547664911 |
Section |
| \Windows\Theme3854699184 |
Section |
Loaded Modules:
| Path |
| C:\PolicyAnalyzer_40\PolicyAnalyzer.exe |
| C:\Windows\System32\ADVAPI32.dll |
| C:\Windows\System32\KERNEL32.dll |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\SYSTEM32\MSCOREE.DLL |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
Signature
- Status: Signature verified.
- Serial:
33000001529B409F5056997588000000000152
- Thumbprint:
711AF71DC4C4952C8ED65BB4BA06826ED3922A32
- Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: PolicyAnalyzer.exe
- Product Name: Policy Analyzer
- Company Name: Microsoft Corporation
- File Version: 4.0.2004.13001
- Product Version: 4.0.200413001
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/5ea8f6ce569e6b03374d5b92875383286dfd833a389015c7d6c5a03e7b0844d8/detection/
MIT License. Copyright (c) 2020-2021 Strontic.