Version info OriginalFileName does not match executable file name

ID PE164 Level INFO Category Configuration

Description

Version info OriginalFileName string does not match the actual executable file name. This may be a configuration error.

Mitigation

  • Make sure that the OriginalFileName string of the StringFileInfo VERSIONINFO block matches the name of the executable.

Arguments

This rule has the following output arguments:

  • string_lcid - Affected VERSIONINFO StringFileInfo block language integral code
  • string_lcid_tag - Affected VERSIONINFO StringFileInfo block language tag (e.g. en, nl-NL or en-US)
  • string_lcid_location - Affected VERSIONINFO StringFileInfo block language location (e.g. Spain, neutral or process_default)
  • string_cpid - Affected VERSIONINFO StringFileInfo block code page integral code
  • string_cpid_name - Affected VERSIONINFO StringFileInfo block code page name (e.g. windows-1251 or utf-8)
  • entity_name - Executable file name
  • original_file_name - OriginalFileName string value