missidentify-1.0-1.el7>  HLk|V  > `~6/lpi4^0:r!"B:f% ^9V9LMݾ9b032222fd739dcb084a6badad584034351cda4ckȉV  > `F@`!6 VrP2w$EZ-{1W,GR)nuePKY|0#ћXR/C~,.;Kl|foUTކ?1Rփ, E02Otmql̑B)OYö^WCĖ|"y|7$s"wlgKT ]) [x?v $^VKvO)%$7 ISj vC%%˲9:~vP! x>:d?Td  18<EI k       (  1  < `    8  1 ( S8 \9 x: F*GX H| I XY\ ] ^Jbd1e6f9l;tT ux vw x y(z@PCmissidentify1.01.el7Find Win32 applicationsMiss Identify is a program to find Win32 applications. In its default mode it displays the filename of any executable that does not have an executable extension (i.e. exe, dll, com, sys, cpl, hxs, hxi, olb, rll, or tlb). The program can also be run to display all executables encountered, regardless of the extension. This is handy when looking for all of the executables on a drive. Other options allow the user to record the strings found in an executable and to work recursively. See the manual page for more information. Sample output Searching for mislabeled executables C:\> missidentify * C:\missidentify-1.0\sample.jpg Searching for all executables C:\> missidentify -a * C:\missidentify-1.0\sample.jpg C:\missidentify-1.0\missidentify.exe Searching for all executables in an unusual place C:\> missidentify -ar c:\windows\system32 ... C:\WINDOWS\System32\ntdll.dll C:\WINDOWS\System32\ntoskrnl.exe C:\WINDOWS\System32\NEVER-GONNA-CATCH-ME.EXE C:\WINDOWS\System32\ntver.dllS@/lftr-centos-7-x86-64.cs2.cert.orgcert.orgGPLLawrence R. Rogers (lrr@cert.org)Applications/Forensics Toolshttp://missidentify.sourceforge.net/linuxx86_64nX,FRC<KfmA$$$$$$$S@/S@/GWGԪGYGWGUGXS@/f355280297838ea303189090e8362b879d9e1c75ea42acb2fbb46b37d450ffd5f38c01adf106f48454cd84308a6092ef32a1048aaeb9363dc4bb99012c815819231f7edcc7352d7734a96eef0b8030f77982678c516876fcb81e25b32d68564c4d4e052f018596ad9c91bbd17c7aec8cf846819e7ee5c74a978591d4c16688f3c1fa2b53ca2cba5cc647637bf3a187bc01987006c043a403ab90be1327b8cbe7215ab3100583ea0f09d0697316e112d83e3353a6f81f709e5f44423ee94f442c7db703bc73d611a01bedca88f7ff2eb92d0697e4341de6ef7467315f3eff6511f05d5cee5172b081fd94f3dff954fe303d10f93ceeb18f91317d663a29e4e391binbinbinbinbinbinbinbinbinbinbinbinbinbinbinbinbinbinmissidentify-1.0-1.el7.src.rpmmissidentifymissidentify(x86-64)@@@@@   @ libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.11.1GG~G@FwF@FF@Jesse Kornblum Jesse Kornblum Jesse Kornblum Jesse Kornblum Jesse Kornblum Jesse Kornblum Jesse Kornblum * Fixed illegal filename error handling to use Unicode error display function. * Updated packaging and README file * Version bump to 1.0* Completed conversion to allow Unicode filenames. Copied a few more functions from the md5deep project. * Checked code into Subversion repository * Version bump to 0.9 in preparation for release * Cast VERBOSE_DISPLAY_NUM to uint64_t in usage message to avoid crash on OS X. * Added $Id: missidentify.spec,v 1.1 2011/03/04 17:43:17 repoman Exp $ tags to source code* Started conversion to allow Unicode filenames, not finished yet * Moved previous ChangeLog file to NEWS * Fixed potentially fatal error in main.c that called, ironically enough, fatal_error(). * Added counting of number of files processed for displaying current filename being processed* Added -s and -S modes to capture strings* Increased buffer size to 8KB to prevent underreads * Added allowed executable extensions: cpl, hxs, hxi, olb, rll, and tlb.* Fixed basic MZ check to work on little endian systems * Removed fcntl.h from configuration * Fixed typo in man page* Proof of conceptlftr-centos-7-x86-64.cs2.cert.org 1405239343 1.0-1.el71.0-1.el7missidentifymissidentify-1.0AUTHORSCOPYINGChangeLogINSTALLNEWSREADMEmissidentify.1.gz/usr/bin//usr/share/doc//usr/share/doc/missidentify-1.0//usr/share/man/man1/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=0x22749fd5acaa425bbeaef9c62486a7e27989787e, not strippeddirectoryASCII textPascal source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)RRRRRR\BOBaL|0?`7zXZ !#, wTZ] b2u i]mX8UL(9V5=2ݣ]gБ5&:p[!GV2c!HAapc8q9fz kdۘ"M 6,bƳ0oe_wtϤğbj„Ĝ[Gk9h m1ZtxtyꁨS UT%ч S(*ڵ'36 yFPs yȐ/ jظrz@<]TLdA"Xj3 @O Y[,W:ᾺVjyiEM¹/y4f&J^YaYҮQLnZ q#i'JjÒ(fhK-H,ዛQfhDT ^< ?%x*p#F CO33ڞ൪hkӗQGݛn\aA\˲b/S{w1@L^57%` u 5dL ZjT[{9 g;R K;t29h~o@3BiHTqp]l$h]m;e)~Zk\9w/u8)?z F> P+,>1]oW&n5>̙<6C,4r5>]Ղz 0d-U J侏Aj8+ءCZ0TKQbtߙN')P~V/q שgjU)DCg?\ASt_]lM`j yE`#.?9+xIظpIdgJWZ*B>|qG!Np3ŊWL]]CÊ<%w6°YȿAG3c@yKйl_کy S+`$N۸a3}&S]pb%!E r.^Sʕf&ƵGE,"?U64TF~mݩӻj6 *"Zw$,͉6o}8#F w r[(/BsU]TN%Z8yau1E2\*Q6o[ ?񨒦ZxHe@TH^>rXІ_ Qm%6CY#ROu~ Yui[r *OaA)chJ_ l; {))4 U|'9 G7d.\;Q:j"=-+HUZbٵ73'W@X+wbT*k6>d諣v^WݪpхѼm? RJ ;XXj4TAVM$:]w"IS+z㷾"⯗2R,yEsfG90('+l0Ș^^ #|SMa_%]T{/o/yz 8e7?ރ1nRLg!n:+%( (TJo]^M3S=oG׳l2cWH[e{Fmhh{<&)G;dX6J% "hB $F ʀQ1lm.-#%O~6q"v\!AxRij>^FOA R;]|mC Һ@{b pZ~(P]jУSǬ{"煉@q}}>Eq Kس& ![450Wۈmۗpy%;5adqov/" OxE?=˦Oȳ~7z?_',f i,9[ |hQI1 YpSP%ۻ}3XvWBzǑzJL 'yQ|'W2U5v'&&jMҲR[8zS60P+5BĿ=_--A=Xt '܆x'ŸP)g0} _SR,OӀ*lUGY}^O< dh2'PpUpVBW0xT؞ ̹ѭK16m<:X]x 6N[t wKQxQhqXmΒKxU-}1v3{?-Io%:*z6þj%,sì1sx8v9Vxuy}ol^VEYEܸ^OLqY/mP h C`)᎑ 0w--UDV'0SE P:UFϬU"OX1q)TtfH% zT,N\,M%ΪIV8<Ρ|Yp̫u'󆥜TqD\XS>dI;A) VgUy\,ս1ZqQom0l1wd_Bu\,YA$õ"<k6ΰPϞ%IF7?+i5Q;|D& m>hbFEC#?U\ᇅa]|PTo=[2vcYȳXW\Ymӡcb)0/8< $vW %jؿؿEJ|y66AM@_.q' 9OVragilփ/-hè뭏k;שGKH~DܕK^n@bҝbE xG:bNvf fL#\2\q:SoBiu`̧i`ﵣȲ=ʍŐYP@z̿7Jy9#>c#i98sCJ#yph:L>`)EFR.k`RĸrRwqfBT485\ I IX%7%o#\*Ȩ;P.'8^~5==aah#e5M5 8"?&J"!#) a௛okJ.4af&B's8p Hi'.I&"-CwA NK1! :X:#Ƥ VFYUN9d6z޵kzqe璞Zl~fGFÂEӟRTJ q` L++Oڛ jGԿ!j#d ;yxa$ÚMxOO^{Aj2-eY #lٰđTB|]5z0qh o]zT ?]O= а}ռ 39u[5Flaw/,-٥$I*[MO6fxKT.|RU\bSzAtB6qw[4 7covSц#>Ef  ;=R%7_:~`07a+BSEgž"ڳ" 1_* 8u8WQ.+0e;SybAJ_Wr(Zuȗw0{Ձ&bXr6q9G>{P+ &-`AcCnŊw,qqlTyFj)Jdoݗ ~' O}uGS6JVrNoj]J,-mCWmF1X8ھ3BL0?ekʏuXt}qn$~ $HU}ƈE| $@!gu H}&p[(`JM_F3'𻓿Ғ5HrN= X4D7켈vЂRkԀsgIOUs*,6B`U~70&wxlSYA1i{u|=>g[7 f |eZ.<@]-Z-ه).ek~ Z- ap6RiW~cy)j왱Kį%݂81ipmۃj,D添QR}R{C/`^i\cnO1P'aj-ea3BDa*P`Jκ0D-;qgMp+vMٜBm-%X{[< N4s$نo IPx[װ>>סJr}4Ӕ_?w!O,NUy~#uO9 YHKk=*\ A\eD]*|^F.NWh6/2\\mJb'7Tp |R?&׫<(bS)>A"Q% Qw6az5eZYKh*V8i4lC'Cѧ:0SOHdCCR? > +Yx/ơY+]xIp`NŸAT#{D X!霬KxwdI_ ^92\ U~vZ!#G2I\+Ux0SJRSGzFdham|i>A hCbL;v1$?UuAf:P4+-s0:ݾV~m8V,xxJw""Of 5E(VvWAyEԫ?*7r*U7p!\ixcel!ArsP*#0P;:*@Ogxym$DVMKziM֕GGސnrFh b m(ۀàحᥤة/(Z2A T$Ԉ Oq>WVJnivahgzb!}bS&F~?*Ί9, fsI 97*/"\ Xfn-G >HNr<^9k=7ҸV6tf-x 0EΗؘfع3bcR (ϟW_\㫳*1ɵ7=4^ jp@R6X@3\Q9O1tr"27 ЭZAjF(dLy 9!Ǵi\i7[pg7fO(4O;N/4}b3{ɸh}iCxsi@{F-v؀C׿X4#J2JQ&[-.lּhg%M(MٙҧwG?w<m㧬^x531RCKP7flD s_=Z>ҦUWڱҊP9yJT(B0id SN'bL\/UYo&Hhas /sZecpo¹ {Q5SΪk$3UvweOrE|ꍙn{Ȭl!MEqoOjSobV (FW;Vr+~R)[{7ǛlT&ptC>2S>Y:RLs=0컏uƨ=1蠇7(5I^S5!-mLLvλ0P^=1bwQ?Mb];N}v:rcmгБxAf֞XMhE ;TIIbshClw5Ja zTtMQ+2@<LN!n<^ e\, yt X3^@ʑb>IO )i@p;57:W#Ka[[)dC% dC x*od pT~Vtž1e/˛SnuzgDKwnt˄aL^ab|B3LZq /+ T%!LJ-_oB/sl%tl 1NzBoQ)kK[;+ycHIL^0eYT0Ҋ8@݋$G*'n~bH\^|f/~VS$FU(]iaj+ ˨cՆ:.ژi|]M`^0==(m`CWroՌ!!-CkUMWCF afݏJu XwmJrO~glJ,8Kb?m \o>/|!Zp^+b'_SCƒNpvF آx%.>ټF횹r^^ b}U$zW8hE~u'= 2 Lғ#"ۅ#8įN9u} fZ.w` ..)v!Ngb|wl]BZ-oQjKV+3ʾkh`X<-vn |ZghdG/S; ~M2N[u+ﶥVt LI8i tq2&v+! `xGo:ى9R@npS<{+8u ,chC#8ۄD]r8]aA`Xι(.l91'jLc^5yLe!{L*Z gUf>}2{Oz=N3?"1B.`jE]YS$m`: ppA1lXzp*j3>pQ^( ߮PO 5[`$j[<`o|4ח>fv[E8qWǯD2Yuv-Z=H 6se9m<)#[ܭ}2!:Rd}-"#6]MLOew4Q?;osOkXUL vUXTA`Lܨs;ۛ){^.wN(=ݝc,X$ܲ* I]4*{/Zg|5p̼'sz'PJ愩 G V?l@ȧ |R۟ Cs.0F;3 kry/[fE S#_8v,{n+P< 2DŽw 㫠TRof #WEq2㫨 )XʼDh..12Ht`SUV=G W[G&`' $3HRIBt.ɳ_$aQr5(fa4`RY|&uk OSr1 6S,뵿 ce)b=I[Hqj+:0ѡې%mzK ՟'UqZtWM75iLWu߳2ZIjC `\@gp.t"Gs838 UޱW^6iWa8gGdw;mK(OPkrApIfp2ҏb'@r&†a[x6rSkp~lyI 4Xa(Ǝj2WO@XE`Mڲ[xh" *hKʖ,hл1-b͎i/ڧuEOנ^?%Nq@c€PN#ɵEbYeBN` ,lc8+}O7*Gh}\5Ͱ@ن`.S_tW"rlj)OQ1aX^}j{wDٶ2Sy`_\d\(E_P 긚05; abP?`,HD"7 tF Y4\e2B `oX:j"8w6㒋e` :+h5LJ,k-c7'1хt.vk/>Gm@ZsA8WdPlw[PF Sǧ/2ߜʜɁw1i74WhOcpf@_tdGnHvAMFʲ]96{[;Mn5@0 ?eI]iHW z_tm{HZs j"d{66\Dݿ!B>㚒vzZƱ_wG3>np4}sC]3 .&VV_ӑw|42F6!]K5o{!Q,9UaGc{cO´S5Hb'gİwf mV׾"8ȘҟwTc3{cRZlouF.kZ%EH9p"6?}suiO]?sr9In\x['NpmѪ6i4Vʃ'0D{W &ǯdѱPݑ-vlVvVӈOOʠi:;B@`QXKυXNO^x;hc ARܷ;{͞EA4&u645ad3aCdjwF]D@ǞMt3;:h;ZuVEޟ%ZSS{F%Y; R.r|x7²' Vbr3C)0-,Bq8l8Q$\~Ξ> Ώ٘ M^-D'2boWM5{hNwyЍT%JO-#-~iU_6ΦP,]b}iV4XoNa^XuwJ$8Dlcۥm/Wp-k:,Iw=r$=Kn/5`'oȇ$B[rt 3>@v{;X i>ZBI9HlY:^gDJǻլ$>IúB{.Gم8{see[IK1a%D%oLOҋ Nr16@-۲5C lZ ~"0ąpM9rѳ~. b@A1K1Ey.sv5'fRKj%#YtCr{o{lf.?m "4kKދK"|O"!D4OzZ=BXjb\8֮Ds.SSֆօ-yz\jq4| [~^) HށU̖l-1e_3DVYhw^R(߀:0#~Z؟ PV|}Ðd^L:0l #il`8ǷG ;vmu| ' :g{7J̣#nxih԰kvJIT!П/2cʠm&*d9Yn/ !cz3rYӭϮm#oO)|>TKS%ڄjtB ҶUҙ, ,VB@d*>8ю"(j&6x l%W[Oz|w`֬t+DނI>y+1ϻTRǽ~p? 1!b`Y4V7uJ_L<cHv.({[_hZCqh.S,-k82܀g&Zm͘nG;wT0/ku8aȱbpyW;"yGSEBrʠ2I}#Qiv|Gmo e&!7 $4^>ⷍdUfiߥЂy0eޤ$SUQ<( 9-81]%3 Y}}N}# kmicް#َ%ڦ-ؑ<:P:Ddcsf7J0(3{yڿĞLG@mTyCl#p*s)V vc6/7:P6XI '8˜VoʏkxWMI rFǿY [cV'݈:KDq Rk2(.-<ɗ m-h̪hQ36&2vJs^ 'pEDLaZO6/8d :YBDj}g﯆k?O77?Iuh |{U?7Bw!@TtWtBW?TsB>ǚȡ{v=\Sf2d7u6hMbhz l]nɦf?Fmj.lT@EH?$]р JaFzۖf'(hJ%hm}waWw;N1w;TF!CcP1VZH$rdz$R]Z%(D["$7ـycGlba0/*eꇥ'l4.[ w=/HO2"gI}t%aHks.0ԚGQ>_I˸$[:!3n{򔌯|Uh=\Jeј(>9vowVqNw)2~(Rk/oK{#|,⤭ Laˋ& U,|^؆ E`yS AKPgNnUBCgK|fEms?6+41b͈i0p}'Mb?>NP{Y}]<;l+B"kP0(( {Agݏk6, _(] %w7.C֧\$NzLC3@1O"oRkh&#$RrgwVyn.޻[8AQݼTPc/A\E[+Zyήxb?:Dr )vd8qĖH\W@h;R;<_hJ颜&hkcTPW9bNFq%4<\vzcPP[Q&Sn}qx5IqHl*]\wų%qE´a%kq,i=ױxo %}3j{0ߠ4儑FmhSC D?>$JL-e6yퟧb5\SS|,Fd^ft5ܻ:9 0p gMQ#Pgr e;M3̛T,z"II?tvM*k=˧IFY6o84~ `o|w)ka%7q2^ƒhCtޛ ~!Mg¥7ȸWa>fH z!rn5d")Tcz+΁ej NN}X`+p04}K!6~OKg=޶ BDT?Jk6CS{ݮkMKߤ4q*H! :͑Qoʤ*9cqm [uڪ1sG&~A]zl}{%g7Xtr +/@ YS*㣳! $ɠC!ڙh>7vL={`&\t:ٸlM$zxcorz,n=4e:._ɉL3փ)G%~XRnCwM!2P܎4Zy3Onƽ/"N^]\'(O.0]Wvwų]ac=^v%|xCq߉C*dL:Hɔfg00cCj暑Iö\{b `BbLH?3(wdy\C6Vչxk4EBuZ2t=gb:+(?e1K<\ݳ(G##ޘRM.jĜebF'  6-#hCv4qggsTx]1ؙm2qrwu,rJ3; Kn}YEab΢y]4yTٰ78yk39ۗĉNcYq0/|t0{[HteHb$Q(g\xBʥMaY7* n/2O7P';ШuE>]Ev`+'h=2o6Gt3p^6uAA6 SϠ,S?1+u>yOb b;xU3mFK *N>v^e&To3abM_}̒Raw$ӡ5]QUEG/ebt}i, [ ]tW~]WEwǯX BdjVwro[l@M&m@_Q0_j2+mKEl3&%J d "1F;d]ԮS(̸K@qzQ#?&" ٰ׏Iᅍ̙DcD{IZ(_#PJю)^7e=rVUvs P8rJ!oym;-k^i;U3$ںVƩ(F!{*ch٠\OqD ی30zdva}6ƒ߭4O+t9V;Z"=SKMgAva#}awR=Ah6LZ1']V`=z[(/S/36Pu4WLOY&$jOt };G5dP?XLq=; 4~pTV>C>_JFs*cn$Q|$&L@RFsFX8uZPT74bSy (d7DO΃J)/%샂Ï4\lN7:S@Qv5oM ZG+鰥hfI kc.V`>>//j: zf^?.0j+f $vĂއ>k0 /y_r:opJ,jÀ L-Y_ @gܢ1=qVN҅Y%dY'/f@h~YsA W6rVCd5F g2׬M_Nяl ?W3QfL%B骣cYpmӝJRU۾?;&G`46#gg` p=7al(CsyUɶ9{~ z2~8ݧmü)MX^4pѫu_S \9T:}3yNu*P(dO;.+՛m!q O3k?{:-x(S8f-mU5zI\+F_@9@@$K@soː;A̓_}V Oh'0j6iT jPzr)w/ ᜕7Z F,a!7=wtסK5GMKn}Iw%FvKDWZo,&Bjx;4]ͅ 3{GF=7 5,֗y r:3xKHr;:K}}v.È5ZjHmm /W5A{ inuXDgK>} xGܑSdM0B{/ u7,@],˯ӣuy}vy8!"MΓ.}gss=C"5HO6 ?xqEb,&za ~8ZVM[86gRK#I$k[D֚b>R@& B٤IPsYd mx.{@YWj RtٳK3?y)u@|T%rg@ ]{ahJKE|<,`rgQY_I%Ti~Ob|1?C0,sJh7!D|k:oSHc5'ܧu#頇 E˷;زug=J/Vs/lv i-u7m~XC(\QR^!£Ro> ߱NWX;ʀIm$C>/X''``/FB # $VAWX%9)GdDMy敏* 5E7֑K- _/_"vAM jMRGL+/XNYd?3B#D7637vQ8U!5,[DjA"z'"5ב] w9Gu'D%Q]msU@@HzX,NEsKJ|أ@_n( 2)Vw{l[YwyY/Nx^S.Rn 2m˰p]k]`t}O6 =Ua\ak}ur(hAhc?-&_f[p~Nb5H"EznZ[PW8"ڰPjYA)t7}_y^Yȓp_tuŌ~~\*-0L)F?C.x7*;sӾ@N\o\ = Y,,W|x8f9u/|v|ٳ j\ZceYn=tV˝ q}c\~/TC t#=r}Z}嫎r$$.#(1 ?;"PGV ͉@ aLݑ/!ؽ=|~^bPa89iQ(ĸ*6l`tq|cNe ?6w.L^ FD0@lqKf$4]sapHNaN=mka:Xv<+Wc96c{`˟#QA8і.ܱ,: %fθ~qըLLyȚ+sux4nvCNЫE[7➋p*7nW0<٣i'#oGd`z+āl= b{W~J-%9G#A_qqIڊbNY 7cw-׋9WޟQbj Twhz L/ "'Rub (27Z;23,87ՉZV{cRC?hzK넠XFC#vpEXG]0 h3u8] }MZO ӁiZ ȱdZk/-!E3Wn8cdH_rmz+7gB@{:S CdqmE PS;=뤃rMjixU>{iO fD*4sjx;˅&X`qe=.ŗឬ$77.GhuY5W*d!ׅzJ_-# bZǼqHS^(~tO<9CgOAN "O4 S2reWh6rHI!j!*.mO޲ H/[(Kك|2+峚c8lg mљ+ϧ+ـq&9!A/vAlhCޠtpf9JurVGAXANj" %,>&nۡ;V/+GCM}B9/;tJzMGGr_ʀ OSΩ`W~ Q7VV͋XMIp}_M$?z%ľ)cbrIf}qG|NN7~@},&+X0 sa"Xq;udϕi;2ҕ\V}=~ q+`'0քELe0-4h\0Ź YZ