1*40427ccaSGordon Tetlow 2*40427ccaSGordon Tetlow 3*40427ccaSGordon Tetlow#------------------------------------------------------------------------------ 4*40427ccaSGordon Tetlow# $File: yara,v 1.2 2017/05/25 20:07:23 christos Exp $ 5*40427ccaSGordon Tetlow# yara: file(1) magic for http://virustotal.github.io/yara/ 6*40427ccaSGordon Tetlow# 7*40427ccaSGordon Tetlow 8*40427ccaSGordon Tetlow0 string YARA 9*40427ccaSGordon Tetlow>4 lelong >2047 10*40427ccaSGordon Tetlow>8 byte <20 YARA 3.x compiled rule set 11*40427ccaSGordon Tetlow# version 12*40427ccaSGordon Tetlow>>8 clear x 13*40427ccaSGordon Tetlow>>8 byte 6 created with version 3.3.0 14*40427ccaSGordon Tetlow>>8 byte 8 created with version 3.4.0 15*40427ccaSGordon Tetlow>>8 byte 11 created with version 3.5.0 16*40427ccaSGordon Tetlow>>8 default x 17*40427ccaSGordon Tetlow>>>8 byte x development version 0x%02x 18