CmdID

CmdID / Files

PolicyRulesFileBuilder.exe

Utility program used by Policy Analyzer file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real PolicyRulesFileBuilder.exe?

file version info and known copies
Installed inC:\PolicyAnalyzer_40\
Signed byMicrosoft Corporation
ProductPolicy Analyzer, Microsoft Corporation
DescriptionUtility program used by Policy Analyzer

1 known copy

4.0.2004.13001 · C:\PolicyAnalyzer_40\PolicyRulesFileBuilder.exe · signed by Microsoft Corporation

5af2bd3fa6c923960a65eb04f0db15c8ec5da002c57ed64ec6cbf3aa503f2da7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.