0

I was playing with the file command (the command-line utility used to identify file types) and I noticed one of the types it could match was "Suspicious"

What does that actually mean, what kind of files match it? Is there some program called "suspicious" that produces data file can identify? Does it match executable data that's in a file with a non-executable extension?

  • "I noticed one of the types it could match was "Suspicious"" Where and what exactly did you notice? – techraf Jul 29 '16 at 6:22
  • Looking at the results of -file --list on a few arbitrary files, one of the low-strength matches was "Suspicious". – Schilcote Jul 29 '16 at 21:21
2

The magic numbers definitions used by the file command are stored in these files.

The only occurrence of the description Suspicious points to a certain byte in Flash files. It's actually the only occurrence of the string in the whole project.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.