CmdID

CmdID / Files

GPO2PolicyRules.exe

Convert GPO backup(s) to Policy Analyzer .PolicyRules file file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real GPO2PolicyRules.exe?

file version info and known copies
Installed inC:\PolicyAnalyzer_40\
Signed byMicrosoft Corporation
ProductGPO2PolicyRules.exe, Microsoft Corporation
DescriptionConvert GPO backup(s) to Policy Analyzer .PolicyRules file

1 known copy

4.0.2004.13001 · C:\PolicyAnalyzer_40\GPO2PolicyRules.exe · signed by Microsoft Corporation

29f0173f255b115f107b0899f90f05a4a9e77d28a3dcb0fd66ab3fdb2f6a6200

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.