PolicyAnalyzer.exe

  • File Path: C:\PolicyAnalyzer_40\PolicyAnalyzer.exe
  • Description: Policy Analyzer
  • Comments: Created by Aaron Margosis

Hashes

Type Hash
MD5 87508D26997D549E56F288153C4AE917
SHA1 CBAFE3C43631E82779E24F54B6766972F9EEED17
SHA256 5EA8F6CE569E6B03374D5B92875383286DFD833A389015C7D6C5A03E7B0844D8
SHA384 DD0EF6C6BC0D52710C8FF2E5C7C8A9EB5241D345A096A833B1C6D331677DEC9E87331E1F598C56AA26180C425625991B
SHA512 921C4E9AE7CBD7796631C928A7EB40BFB78E1CB13A7489ACC806568727F0DB475243E88D3AEBD1233FDAF953DE91D5AB8006280AA75A407C6D4BFFE71B9C25F1
SSDEEP 3072:q/6eGxnzhG1xoWSUqRHiHPuaeeKUd8wtUg3bSbfNhfl0TdcwKae2idAs7X73Y1cQ:9L7sPxKUDUg3bSbf5YOX7o1c6z
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 E56FB92BE65815F63067DCD3201D7EB94298B993
PE256 24ECBB1E04BF9EE678314CC0DC00621396B1A6572EBF591CD676348A12A37188

Runtime Data

Window Title:

Policy Analyzer v4.0.2004.13001

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\user32.dll.mui File
(R-D) C:\Windows\System32\en-US\winnlsres.dll.mui File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.488_none_4238de57f6b64d28 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_faefa4f37613d18e File
(RW-) C:\xCyclopedia File
...\Cor_SxSPublic_IPCBlock Section
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\Cor_Private_IPCBlock_v4_9120 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme2547664911 Section
\Windows\Theme3854699184 Section

Loaded Modules:

Path
C:\PolicyAnalyzer_40\PolicyAnalyzer.exe
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\KERNEL32.dll
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\MSCOREE.DLL
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001529B409F5056997588000000000152
  • Thumbprint: 711AF71DC4C4952C8ED65BB4BA06826ED3922A32
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PolicyAnalyzer.exe
  • Product Name: Policy Analyzer
  • Company Name: Microsoft Corporation
  • File Version: 4.0.2004.13001
  • Product Version: 4.0.200413001
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/5ea8f6ce569e6b03374d5b92875383286dfd833a389015c7d6c5a03e7b0844d8/detection/

MIT License. Copyright (c) 2020-2021 Strontic.