python-yara-3.4.0-5.1>t  DH`pX61/=„b:[>we? (?Q9: aF6c10 104}.ԏN%'469: K^\+r~V9>3ٓ5Q@5])Y2|=dYY3u v"}c p2gGh0B'XP Otp2=>hf8O@fXg"6C۫[(h+uČfzZ%Sk ۵|ԵoR+@-5Dhk5a=yd=Ć@_aE ս-iJҀN%S7*J#~Q@YYk#k[v>uR1I 3 Vzsj|N@!¡SUfF^O--ݣO(׃D':Tz4>K Ŭ Va܌$Cn;.ӥX>:?d  X %DJTp ~   o xD p n (89:VF_GtHIXY\]^Pbc;defluvwtxyzCpython-yara3.4.05.1Python bindings to support the yara malware identification toolYARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns contained on samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. Let's see an example:X6%lamb12yopenSUSE Leap 42.3openSUSEApache-2.0http://bugs.opensuse.orgDevelopment/Libraries/Pythonhttp://plusvic.github.io/yara/linuxx86_64(3,] #큤A큤X6#X6#X6$UȳUȳUȳUȳ1db3acd37b9adf6fc3415ab1402dd396fea9849ff489acb1219e3ad1da2d22762204a7f7e86fea045978ad97f369a032a0d9e4ee919be51d63546a9515298cd7175792518e4ac015ab6696d16c4f607eee3987c1679c573f6bdd3e61c696c5bdrootrootrootrootrootrootrootrootrootrootrootrootrootrootyara-3.4.0-5.1.src.rpmpython-yarapython-yara(x86-64)yara.so()(64bit)@@@@@@@   libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libpthread.so.0()(64bit)libpython2.7.so.1.0()(64bit)libyara.so.3()(64bit)pythonpython(abi)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)2.73.0.4-14.0-14.4.6-14.11.2U@T%U@T"@O;@O8@O3@O1@Greg.Freemyer@gmail.comGreg.Freemyer@gmail.comGreg.Freemyer@gmail.comGreg.Freemyer@gmail.comGreg.Freemyer@gmail.commeissner@suse.comGreg.Freemyer@gmail.com- add yara.pc to the libyara subpackage - remove sed command previously needed to properly link Yara and libyara. No longer needed with latest upstream source. - update to v3.4.0 * Short-circuit evaluation for conditions * New yr_rules_save_stream/yr_rules_load_stream APIs. * load() and save() methods in yara-python accept file-like objects * Improvements to the PE and ELF modules * Some performance improvements * New command-line option --print-module-data * Multiple bug fixes. - v3.3.0 * Added support for negative integers and floating point numbers * Implemented operators >,<, >=, <= for strings * Implemented word boundary anchors (\b, \B) in regular expressions * New features in PE module * Math module * New --print-namespace command line argument * Better error handling in low memory conditions * BUGFIX: "at" operator not working with certain strings containing wildcards * BUGFIX: precedence of bitwise operators was incorrect * BUGFIX: incorrect imphash result for certain PE files importing functions by ordinal * BUGFIX: handle and memory leaks * BUGFIX: multiple segfaults - v3.2.0 * ELF module * Hash module * New features in PE module * Big-endian version of intXX and uintXX functions * Modules can declare dictionary objects * Modules accept overloaded functions * Performance improvements * BUGFIX: "and" operator not working properly with integer operands * BUGFIX: False positive with strings declared as "fullword wide ascii" * BUGFIX: False positive with "wide fullword" strings shorter than 5 bytes * BUGFIX: Functions declared in a structure array not working properly * BUGFIX: "contains" operator causing segfault if operand is an undefined string- split off a -doc sub-project- update to v3.1.0 * Yara now supports plugin modules * Numerous major improvements. See README.md in the documentation folder for details - update License to Apache 2.0 - build with cuckoo and magic modules (cuckoo only for factory and newer) - major specfile cleanup * add soname as a variable and use it appropriately * add /usr/bin/yarac and associated man file * update Url and Source fields * add libtool build requirement * delete no longer needed patch, now upstream: yara-fixes.patch * add ./bootstrap.sh call to %build section as recommended by upstream * add +%{_includedir}/yara to -devel since it is full of yara related header files * use default naming for devel sub-project * remove *.a and *.la files from the devel sub-project * incorporate python-yara as a sub-project- Release should have a value of zero in OBS. It is handled automatically via OBS.- use %{__make} macro- built with default compile flags, fixed 2 small issues- Initial submission A malware identification and classification toollamb12 14897782133.4.0-5.13.4.0-5.1yara.soyara_python-3.4.0-py2.7.egg-infopython-yaraAUTHORSCONTRIBUTORSCOPYINGREADME.md/usr/lib64/python2.7/site-packages//usr/share/doc/packages//usr/share/doc/packages/python-yara/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:Leap:42.3/standard/8f3f395dbb0aa1794a1a543b2a0ad60f-yaracpiolzma5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e731c7a359971288a9e06391c2475be7468a7c3, strippedASCII textdirectoryPRRRRRRRc&x/%?`] crv9ugQH~rgFNfBG8P;QDJVT\yXw[!r 3[V%I!^ŠB*c*9} Bִ@Ê[E>;"< G/"A:CO^P:VTBTƁY|FcFp[-8K0p1*H~Apl5`,L~a{̀Ec0r TM`UKsŗǞٕжHx2\g^[1 K:]^((žGSI#"j|ʿ͵(Nmxq6?k+KdfJ|yH-X>~nou䉦roW O G[T[GJ:MOЌyDXϞڍ4*&4ڗ)7ŕߌhj6 ~a~tO@&ͰT,Db#ӇbS2CvQ|hnFR)8T)Џ!;q5ӮbSXg:'iY dfNi;̍8Df=%\.FxAx(J@S&۸'+ \GT2b1P{ ݧ'N@Q,k{-}uc{ S aZrNe)!t­ ~҃\ZIyr5lsj޶Πru`$?nP$4 \$qsx< 8F%wQCY;vFaF ?ˊF[lP0kj2Z2> %f[²<8ƶVok|l+FڈD^h`YyѸUeVmIWi|_8'!#MvU8+wޫz2t4QƭsZYpX=Vr{Fz鞝&"8,Z=G@ pvMBɼ&ҁwSeJHO@[n!"eL܎__ID7\@5:02L:*+B&вYn21OAlg{5 m~7.`+&2uKU9.BvŸzOc?q5{Ȅ.PeMRTxw~]a/nc^sm3RhCWkD<q̿8Zţ~_OCF6G[fZyjR-'<΅ۍNr֋; fe`6RziYRk2 )~>%:"Jf)=9w8)o̤wJ 6qñuX%nZ =Q;4Rֳ,ak/s8#@ďD/$Ƣ[B??̳^5Ö(PU=y(-\-=sh\I)}z73Qǐ-eq> xXS7:FY,xmӵϳ_Tt`mYG =W:-Lǥ$ޓzq'd}od E<:h5_]\WHp,FC0%ǎ[bb8_{!XѶ4ԴI$yϗ~/s4s{!,6_wU?eo%%Yo-J!HA$6FL ̉3IΩo]7I&B6I]y?-vA%w0qWnB.g>Ƅu_R Ǥغ?*#j:?W[F檣R,^ӭ1l}R%T'3]p ׀ůHHa^=ٵ=ţJ-ҳZȍr.Mn1i€IJo_D}ܣ3ep m`~XM0;eVo.UhIQ/1qG}_ m4QO+c14GP.YV{%t™#P%=.q  f(:W\  0L{7pX0S$|kV,Q2?Ò䤯Va[(j?QF-̃}7#$_r=^Hn0, wiFfܚ:H}N͕tI2<&PodeM _#~28FЋRej*8 8TX^C16 "~JCF1UkXA\q"b<1TrS̊wk7|D%18iƭ;餟qv4-zFH(~WS?|Vir߇37IOtB5,i H֕Wky0au{ܔ69ƒA޿껂݊bؗ6%e;6sX>Qy+HaP:Ϳa@s>@!4S ōVK@}Kfb:bߌJ0F=nW[lmz],&־D! S s(<='E^crkL@iE+(aBx+*/6]F6e%~,K-)(bo't]1K<+ djK_Y+ bHIaLj 4- mM'+泽ByGc@?o:YNq%m6I{^,(OK9YRO4>͢%,}}NEZ3oqi#1}&оΘU@[sVA|78;q_~U/j(ׄ$ Y@O~{d2;Ѻz}ZW_s,-4$%clB~7@Px3@pTsLvs@Ob|7 $Y0}QR9j@xېC{ UL͓ $#o. MFCҍCM_+[C2Yv:[c!HEXUޢ=Ȝ=k~tYtY$n&wG쌜C\NwT~:Vz`܀ &m+t+A\(8Ut883GkJR++;B*hɒWȕޣ,9d :d$ҭ`c>pz/>B'~%rE ֹu6G:fe @kU k*0ީ-m^FvBs&(ѦX͔f:]@rفW5PXP+Ty;^N"irJ KG:K-TM^r^e4"`ؤpKC.~>t!Pa |7 F40O&Tâ hI5h#C|VZ:>9 Gfؐ(]U~=szXW "lYx&nh"oTm{o^+GM"h9X8dJ9W]^d)kjȆOX hDͲ'j?t0CyFy%SZ4z.,K5Հh:a8Ӈ jj=!vMnT%g*X6C3 =ي("4oPh]~^3B`vT(n R"6^*!Ii¤]A"Aml? J?UGp4MUoLHPڙ`:*v~bR"E"uB)4!O_A'q8dEuk 4pZή]C YPy @h+l*q&nU` j^;>ԚS6ˑM|;2BGǚPdfeؾGg @VF)0ý]JZG[sS^%-g DUnjL.T0Gш@RveqPV.] unq^H@5yARZX LHVF=wBE2+gS߲ ͣ1? +33Wr _q1$s ^*@f]Bd}|T R[lLo>MJmG;!?¯Amg/#u*f#wT`؛}?gF9u9ZXv_}^]R+j,ֈ"L{L~H`}Ut@dٴ9iB(_2"ډFNHx$i581H&|>{BIg)jrS-TvTʿ &w_7MA䢘" 7zESY10΃;U:cwp-TJ5U <92[ұ@9 +7ӫV4AFG 1kDs]Jɬq}[?XZ\y XP3/{-b?qzeCLeZwvG۪K.ݚgƌT옒VPV;N4xۃ3[<.U&s 3"Fhff=֞e`uMl@I5\P·iRL0pI17( |3aː2VK7'|~RE$@h,~,͊ vu=gL?<&wb,?srx%tȵ^vr- ,_iNr3Nvy7'9eRĸWAOWךU2dN.N EdzE{W$ko{T_RZΖ̥ КpTIzv_P[裨!O$/R2CۻW1wU7`@Hzȴ\,jUd]gD&vVKMؽ=k[_zD+[2ٴtPr@%Qރo칃H<%7&80">i9~8I_rb;B "4 ̜o)E8CoA9;R+6Y\.ny&`a?,^OD$NHAe"la dHf–._n f=[)5W=H}.4ba ZOjАsr4/۩-kh FEb9@ƆeiIz+eN`KߍM5v=Q-:j5 *CG7 `Q[ܯ\'.4.ӿH#М/ˎ=̽Z^=^h-OD%#9p XZ~E[T%d}oeHU<}v;Aeޮ-k1n)Yy&J"_*hV(t©_J9n"Q4ۧm'q&6 f3{ 0.ubZ)C?\J.׫d_哨 !˃ou'"i͍_ p@.K暩5#c"NB]޹LmtQY9S2#@Uxet2";']@ l=i#3']h3.A( u شr֑2H?7Tٻ/=gȚ9I(GP]n{O҉=lrn#Mn17 u؋wiqǺab+q{ߣ׬<֨glaKUރZIV-(PlWV v|@("l܅-Ԃ.4 #h,M'"_x6mԍ vcoڬr8}䤤h+*V7$CPQbA}tEs)FzGNbdeM@-/ڊ5 p@J`_v[ aB@<3! 5W=1H3:u!:}jݸTp9O =QPc&y2s*t~\Rx؉&ULN_g^1O6+=Vn^cIUFdò\L[\4.ɾ;$q9yKCam&ߍjU&1)gs©m҅k6O}ȡC;(~𦾝,OeT M:8jYFZ#sHobAcpqF m?ձ~1=_Mpjfax9>*).3_7`z+Ԋu7QW՞mGv c_6y irPN"7R F'nza4Ɗɀ,\'-A[ݸ]$þrͽn/Gd.D+CEs]Uk.cɗA@,iԴRQ JëTgkudJ81ÚI-7o4}t$КH%uU2Ar[W[.,xNhNV]blQ֠vz:G HbX򚀎B=Iic]A}b+{$Usa+GlsIP~ SPC4H /J1Q"Xj:ߌT-tsR*qXzX?|x9c>YxVC`-%LQ zS\ƨ bkB7u{!6dW/5 )Jף5(n?7@(]NQe$ȶk5Q-~Z~a dͤ;e#QpZ}&ʠ(nUwli;DڲbI1aL77\C)*9ԻV Y̋4Do{QlCi4+烘=M&- h=&&Hv VnGͷE3j{ !BO4JlJ8$!?XX8GlQ'p_ͮwHpƘyz~PklK o~_Υfwu c޷P2֖Aٓ'H zԗFD2g;~ (R^+ܐKw?806t`{$]TԆ[A{6Q)5 g[7THJYVg]d;i?z940kɖ֙{#qdBR p q `֘q/7Zzaz֚Ӽ#;uBŸVh91 D)AsF-J:ݥikgvllr)! vqW;nT@F0(oY1@dPV#%y݄u?|C)"o|JYFЬf s$zi3gpU"[\0/qlTuv?a\NYGs Hy<dY4SZ|47-jygg>Gi%Cdl_Gt_3.gzG{,u~̎<"<\UbX(w`*ҟ xȣoJ5XgjXK&OWtltLD0>쀀;2-x_=#PM b${`6lPɖeø併d'.Rc1Ӭm#QXXb8^ʦ}as UVSEgE$.Sd5Q1M-)v-1%|㰶`R}~-Ej{ɟ1S O4?ݶeTmw"[-al$zVË(3qjuSk"(łA<<Oբq+N@1~WTF̯V1IO zWKzcO@lQ:xqj/h|'m΂k1+1μy*v\_Yz-x)H#te,J|? SDr͔Hwެ|] wmh,Y'A;|7J72gP Vde;K~(\y=b";1@B2 O PL2ee?nH{#W6XA:YO]dtNY$\( ~Š\+j: p9E.[L±.IZAiAoᕘkJŃ]{D:*~̓J&ω~"K[NkvW0~wD k}O!W倍=S % +)2$GPQiJ^h&'q޾~$ ڡ~Y hI5! yT%m\9!"*a+8YӬ4|զVO9e lqxѺ!J@W$Pla}JcP*XA#*&o$YCxJ6x;OY(~ BD;[+rzVQUfUyTpx0GR4GFX_i dpu:ZXR3C9c jI9&^.KqvAx p>A+b7vEÁ)  "NOcZeϤ&YГ]TSBn(+$\T;|YYweڪDT dzfZZjhsĦ׶LdL1 !7f#Fg5m+3&a(D,Į,I$r8hIgbp^d5aGH,NwݕD|d\TF?x !q3BL,qDBCip>8V_"[!. 8wo8>_x;^y,wZW" rn9B8!9v5U3J XŚ-slG:C r!侗)=bDcMTe`c\ R_ fhI+VͩOSZPT뼈,h a?Kkzy^P51r"1OCz17%F=Ϭlv aVt]i A3ԞjTͳp6& !LR- +N x^`#H$y-!\Fĸp d57%iU=%Hj8QHWR,`nB&\L𑟈}E: 3#PІ˿Jz; mJXHG@+⻡{8А\cnBY`g/fz@'" 4þ9;ʫq a{ +Z^NW" ,Q^TXEy]H{- ?3 .’iv֝xƈ7g@ FTb` #٧+n[ү|'7G7787Ut799K&Vj.y g+/Ely(Sd5ǧ:]k>m[~%[z=GɌ9u$#>^e cIRjWuCoVsf٩ނkU] OZ0nPINg'aqT]`Q<;_[y.bV5*x@{iy7(_\b^[Гqosi0(ď8[ᓅPtء^iܑi'd)BgD wUl}e.iA"hNfjHbJ1HR:cFX"W.Uʠ[?HQ+40aYXh+S`-Bѧh!j8F`UUl!Es1Q% ][6Dfd]\f6[e0S]C/5[ >Yv?dʖr?5pՅAB5}l(nDsP#Y@CzRul0cҘq;-vGXbJ_w@U*/)v4f!XvJ5'!n`twO_)-zFI"i >xk- s#4+qKl@,g =pkQΥTEֳlx_]7h5m[NyҾbq V)_)uLBe \Saa;y 1]fŗG35jf"+tZv2[}-37[ S5hk:j}ߗyB5cSL6EL$}nE#o, @ӽMZ~(1ZJsESݲ"xӀG)[hYGǐP"],m4M\|#i3Scʽp8ru3mQc ,F}L"L0L<`Atak1}[<3S m1ޡNzcpr><c6-Bשkj)ճ?.#gdg2cG^+R,#LgV'9DbbpM(sgjrW>3MsdTه78߯+˒˺f(6 E)!@ =+oNʽC@{;v,/mg>`9AR5DjCJ' `KT7+=u^DH(NNde0ns 'UY[epfDw8ih @ѿ^cEle2vݓA;:b:E]7"SF*9veӡzz'P; klo$k  A$MdVNŰd6L %{QVBu BihbUR sJ`T'>DID)E\'Z~6.c~'1孽:$\,7}R8 aޟ֛Д}##k D31ֶW+X/."Sx#u mអTbl'܋2ͦЕJb)([+v.D,!f81˚ 6b x|qK t%;q=ZZFBZ{pվ=U1_˓ A1-<{Œ21]>Cgv6_ 3e?i*|Y'ALUR=L q=Oz\_z}Qh#uW#X#oJ 8|tI`>WkɰPJuX ÂR'0FAX_&KG-t,Y̽Q;7Kՠ̺Uz91$lqAqx=K0'XF,!%$>XngJ0=Tp-H6jfr3L(VhtdzF" <|.lwK[3 "mZq!Q`Ł*Qx/L>=')#<"b#*fP:U9Ql>Xի(, /՞Yxч5*>xՠ+TuWx3`r% ߰EnR<g(