# VS_VERSIONINFO Structure Extractor
This package parses a VS_VERSIONINFO structure and returns a JSON string. Certain szKey members in this struct and its children are compared with the expected and the structs are marked non-standard if the strings are not as expected. Data returned from this parser is meant for malware analysis.
If you need to isolate the RT_VERSION resource for input into this extractor, try [this](https://gist.github.com/utkonos/86585b85a313a2e41d33471c22cc26c6) Jupyter Notebook.
## Usage
### Native Python Dictionary Output
```python
versioninfo.parser.get_versioninfo(data)
```
### JSON Output
```python
versioninfo.parser.to_json(data)
```
#### Bugs
If the parsing fails or there are any other problems, please provide the file that caused the problem in addition to opening a Github issue.
Raw data
{
"_id": null,
"home_page": "https://github.com/malwarology/versioninfo",
"name": "versioninfo",
"maintainer": "",
"docs_url": null,
"requires_python": ">=3.11.0",
"maintainer_email": "",
"keywords": "",
"author": "Malwarology LLC",
"author_email": "",
"download_url": "https://files.pythonhosted.org/packages/2a/24/d60511a5bc98168f854337b5768647e50b5107a40adb407d8e1a94ed64c3/versioninfo-1.1.2.tar.gz",
"platform": null,
"description": "# VS_VERSIONINFO Structure Extractor\n\nThis package parses a VS_VERSIONINFO structure and returns a JSON string. Certain szKey members in this struct and its children are compared with the expected and the structs are marked non-standard if the strings are not as expected. Data returned from this parser is meant for malware analysis.\n\nIf you need to isolate the RT_VERSION resource for input into this extractor, try [this](https://gist.github.com/utkonos/86585b85a313a2e41d33471c22cc26c6) Jupyter Notebook.\n\n## Usage\n\n### Native Python Dictionary Output\n\n```python\nversioninfo.parser.get_versioninfo(data)\n```\n\n### JSON Output\n\n```python\nversioninfo.parser.to_json(data)\n```\n\n#### Bugs\n\nIf the parsing fails or there are any other problems, please provide the file that caused the problem in addition to opening a Github issue.\n",
"bugtrack_url": null,
"license": "",
"summary": "Parse PE VS_VERSIONINFO structure and return JSON string.",
"version": "1.1.2",
"split_keywords": [],
"urls": [
{
"comment_text": "",
"digests": {
"md5": "138b0b232c368042ce764007dc7c7426",
"sha256": "0dedd2d3387cfe9b9fe9cd343796752712faf2da43c1ad9a53bf845400e51830"
},
"downloads": -1,
"filename": "versioninfo-1.1.2-py3-none-any.whl",
"has_sig": false,
"md5_digest": "138b0b232c368042ce764007dc7c7426",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.11.0",
"size": 6878,
"upload_time": "2022-12-02T05:55:20",
"upload_time_iso_8601": "2022-12-02T05:55:20.474423Z",
"url": "https://files.pythonhosted.org/packages/7a/bd/dd8203b474becbece868938ba4ce127b13003c58c0c6673552f79a390322/versioninfo-1.1.2-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"md5": "c0bf90a3b783a7f8f91d62385a4fc611",
"sha256": "7432e32920a8637685ffe78f8049b71053344537e390ffc441a8de3aa485bde0"
},
"downloads": -1,
"filename": "versioninfo-1.1.2.tar.gz",
"has_sig": false,
"md5_digest": "c0bf90a3b783a7f8f91d62385a4fc611",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.11.0",
"size": 6387,
"upload_time": "2022-12-02T05:55:21",
"upload_time_iso_8601": "2022-12-02T05:55:21.832942Z",
"url": "https://files.pythonhosted.org/packages/2a/24/d60511a5bc98168f854337b5768647e50b5107a40adb407d8e1a94ed64c3/versioninfo-1.1.2.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2022-12-02 05:55:21",
"github": true,
"gitlab": false,
"bitbucket": false,
"github_user": "malwarology",
"github_project": "versioninfo",
"travis_ci": false,
"coveralls": false,
"github_actions": false,
"lcname": "versioninfo"
}