GPO2PolicyRules.exe

  • File Path: C:\PolicyAnalyzer_40\GPO2PolicyRules.exe
  • Description: Convert GPO backup(s) to Policy Analyzer .PolicyRules file
  • Comments: Created by Aaron Margosis

Hashes

Type Hash
MD5 C106DBE5E05146A30D1E905499896562
SHA1 D59F2C46DFB6256E87EDF98DB0F8019A1601E26E
SHA256 29F0173F255B115F107B0899F90F05A4A9E77D28A3DCB0FD66AB3FDB2F6A6200
SHA384 87324CE76F4617F3658589E1A669DAD40DE7B53B4B29C57FF9014EE6A27F8CC4DCA1680953C2032D106CB5B9C3C89B66
SHA512 209B4FED605632F9EE92BCC0C034BE1DDA2619A32EE2CB7CAC46330464A2361B4345CE06A0C5AF1CE34A91C1005CFAAE14118F5774DAABF8222AE3081185FBB6
SSDEEP 384:T2Po51SclQtGuX/35JOUDJoXAts/3o8rdKQcCgOjoW1owcyHRN7rx+5DKl9I1YlB:T2PdXBEE2wmlr3cy8gY5DMEm
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 5CC19DD2D5D4BD9F490F79BD62DBF79E6062F3FD
PE256 F68CBD451A4C0B8B4BBE66FB9ECB9E0BDEDFA24B5DC8B06760F71A6BA989B412

Runtime Data

Usage (stderr):


GPO2PolicyRules.exe - Convert GPO backup(s) to Policy Analyzer .PolicyRules file
Version 4.0.2004.13001
Copyright (C) 2009-2020 Microsoft Corporation
Security Compliance Toolkit - https://www.microsoft.com/download/details.aspx?id=55319

Invalid command line parameters:
  1: C:\temp\strontic-xcyclopedia\notepad.exe

Syntax:
  GPO2PolicyRules.exe  GPO-root-path  OutputFile

Example:
  GPO2PolicyRules.exe  C:\BaselinePackage\GPOs  .\Baseline.PolicyRules

Loaded Modules:

Path
C:\PolicyAnalyzer_40\GPO2PolicyRules.exe
C:\Windows\System32\KERNEL32.dll
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\MSCOREE.DLL
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001529B409F5056997588000000000152
  • Thumbprint: 711AF71DC4C4952C8ED65BB4BA06826ED3922A32
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: GPO2PolicyRules.exe
  • Product Name: GPO2PolicyRules.exe
  • Company Name: Microsoft Corporation
  • File Version: 4.0.2004.13001
  • Product Version: 4.0.200413001
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/29f0173f255b115f107b0899f90f05a4a9e77d28a3dcb0fd66ab3fdb2f6a6200/detection/

File Similarity (ssdeep match)

File Score
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe 27
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe 27

MIT License. Copyright (c) 2020-2021 Strontic.