Explain file version block

(imported topic written by Bjowah91)

Hi,

can someone explain the inspector type “file version block” to me.

For example why can I write

language of version block of file “C:\Program Files\Windows NT\Accessories\wordpad.exe” as string

but not

ProductName of version block of file “C:\Program Files\Windows NT\Accessories\wordpad.exe” as string

instead of

value “ProductName” of version block of file “C:\Program Files\Windows NT\Accessories\wordpad.exe” as string

is their any way to extract all values from a file like "values of version block 1 of file “C:\Program Files\Windows NT\Accessories\wordpad.exe” as string?

to be more specific I’m looking to extract the “description” of a file, but can’t find that in the inspector search

Best regards

/Björn

(imported comment written by BenKus)

Hi Bjorn,

The “file version block” is part of the file that has some fixed values and some arbitrary values. See http://support.bigfix.com/cgi-bin/inspectorsearch/inspector_search.cgi?type=file+version+block&win=WinSkip&lin=LinSkip&hpux=HPUXSkip&mac=MacSkip&aix=AIXSkip&sol=SolSkip&client=1&core=1&session=1&regex=1 for more information on which inspectors are built in (language, codepage, id).

You can’t iterate through all the file block values with inspectors, but if you right-click on a file and go to properties, you can see information about the values in a file block… (It seems that sometimes if there is a space in the value in the file properties dialog, you need to remove it)… For instance:

q: value “FileDescription” of version block of file “C:\Program Files\Windows NT\Accessories\wordpad.exe” as string
A: Windows Wordpad Application

(imported comment written by Bjowah91)

Great, thanks Ben.

Is there any differens between “version block 1” and “version block”?

/Björn

(imported comment written by BenKus)

Hey Bjorn,

It is possible for files to have multiple version blocks. In my experience, this is rare and thus both “version block” and “version block 1” are the same (note you can also say "version block

s

".

Ben

(imported comment written by Bjowah91)

Thanks Ben