Parents (Total: 191)

The searched file hash is included in 191 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	12686
MD5	EA8C59C780BB43DAE3F9FF241A5B027F
PackageDescription	help to identify and classify malwares (Python bindings) YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns contained on samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. This is useful in forensics analysis. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . Are examples of the organizations and services using YARA: . - VirusTotal Intelligence (https://www.virustotal.com/intelligence/) - jsunpack-n (http://jsunpack.jeek.org/) - We Watch Your Website (http://www.wewatchyourwebsite.com/) - FireEye, Inc. (http://www.fireeye.com) - Fidelis XPS (http://www.fidelissecurity.com/network-security-appliance/ \ Fidelis-XPS) . The Volatility Framework is an example of the software that uses YARA. . This package provides Python 2 bindings.
PackageMaintainer	Debian Forensics <forensics-devel@lists.alioth.debian.org>
PackageName	python-yara
PackageSection	python
PackageVersion	3.1.0-2+deb8u1
SHA-1	0166A8313D510F438F285547C7883C321FD3184E
SHA-256	F54D7543D50155E21114066AF937E9C2215FB59457DD746285506C36C6F0584B

Key	Value
FileSize	126996
MD5	80A70C9CC9E87408643AA10037DC8520
PackageDescription	YARA development libraries and headers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . This package provides development libraries and headers.
PackageMaintainer	Debian Forensics <forensics-devel@lists.alioth.debian.org>
PackageName	libyara-dev
PackageSection	libdevel
PackageVersion	3.5.0+dfsg-9
SHA-1	02193379C557DB76F32835376ECA17DAAEE24020
SHA-256	1C131B7D78C77DB8BA6B155AEB5EE97BAAC34CB95B88096DFB7BE6FFF175A16B

Key	Value
FileSize	184776
MD5	C8E6B2C8B77B3FFB772CEEFA2E7C8645
PackageDescription	YARA development libraries and headers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . This package provides development libraries and headers.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	libyara-dev
PackageSection	libdevel
PackageVersion	4.0.5-1
SHA-1	03BF49D6814BA2C84CD7A6404717E6B1271F9B85
SHA-256	CCD0DB02F262ED94CE22085EF239C002E1BEC8DA75A7D207B1FA0BF75E75CA9A

Key	Value
FileSize	158604
KnownMalicious	malshare.com
MD5	4C81A36952BC89F730D889D0A26F377B
PackageDescription	Pattern matching swiss knife for malware researchers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	yara
PackageSection	utils
PackageVersion	4.0.5-1
SHA-1	0441918C1DB6F26A12A90BD47A3B3BA594BA7BB4
SHA-256	DB7BD895CFC2B7DD7D459FFADE5FA6807A43F639B2E834670CED35CE08A07DA6
SSDEEP	3072:1F+/P1P1MBKSLTMSL+WKQQHOACPBQRU8LPPIQ8AUVTUIXELBBL5A2VK:1FSP1P1ONMSL1XSOAC4RUMETAUVTBOBQ

Key	Value
FileSize	198576
MD5	AFCBBC7C11682D7280604E124122B2B9
PackageDescription	YARA development libraries and headers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . This package provides development libraries and headers.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	libyara-dev
PackageSection	libdevel
PackageVersion	3.9.0-1
SHA-1	04AB3F2BBEAF031BDCDA32A22126FC5F140B6621
SHA-256	A3D6F7AD7A95784A5641CD9AD63954D32C6F00EE5C1C0C3FF839E50BA2E2172E

Key	Value
FileSize	171404
MD5	396EE821AF4C1BE324E4A15E165AE98A
PackageDescription	YARA shared library YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . This package provides a shared library.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	libyara8
PackageSection	libs
PackageVersion	4.1.2-1
SHA-1	04B38E2966D6D9A466BDE3EC8E63D8F4A0B76E9A
SHA-256	8CC60E9207A9E2A4C4C879F0389056AAF0665FB80ACFC29F9B7C33E1CD15157B

Key	Value
FileSize	12416
MD5	4D385AFFD727196FB2AB464F150A15E1
PackageDescription	help to identify and classify malwares (Python 3 bindings) YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns contained on samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. This is useful in forensics analysis. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . Are examples of the organizations and services using YARA: . - VirusTotal Intelligence (https://www.virustotal.com/intelligence/) - jsunpack-n (http://jsunpack.jeek.org/) - We Watch Your Website (http://www.wewatchyourwebsite.com/) - FireEye, Inc. (http://www.fireeye.com) - Fidelis XPS (http://www.fidelissecurity.com/network-security-appliance/ \ Fidelis-XPS) . The Volatility Framework is an example of the software that uses YARA. . This package provides Python 3 bindings.
PackageMaintainer	Debian Forensics <forensics-devel@lists.alioth.debian.org>
PackageName	python3-yara
PackageSection	python
PackageVersion	3.1.0-2+deb8u1
SHA-1	05549A3997D803634C4C26A26FBA421EE22D3438
SHA-256	7DCFB436F1DEE3750C750DFF8C169B9768B7C633D889C56C6FE60515DC203F42

Key	Value
FileSize	218088
MD5	7298F6EDCC10189C24CBB6618486165D
PackageDescription	YARA development libraries and headers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features. . This package provides development libraries and headers.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	libyara-dev
PackageSection	libdevel
PackageVersion	4.0.2-1~bpo10+1
SHA-1	061A8094DD4E2D2866B56C8D4684E8FC95C500AE
SHA-256	6EFFB4D8B842C3EE7F7A88746630FF9E1372AFA123E200A0E434890D7F0EF0F4

Key	Value
FileSize	144172
MD5	C04662BED3A0E92B7DE3443FCE4953A8
PackageDescription	Pattern matching swiss knife for malware researchers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	yara
PackageSection	utils
PackageVersion	4.0.5-1
SHA-1	0749B2E5269733EFF154E6469B9376FE03EEBA5B
SHA-256	065EF60F5905545CB00D01862E55EF63567945AB98710C30D1E7486E12D03CDB

Key	Value
FileSize	22892
MD5	97FA6EF135D2B0D72C620A10A8DC65D2
PackageDescription	Pattern matching swiss knife for malware researchers YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA, it is possible to create descriptions of malware families based on textual or binary patterns contained in samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. . Complex and powerful rules can be created by using binary strings with wild-cards, case-insensitive text strings, special operators, regular expressions and many other features.
PackageMaintainer	Debian Security Tools <team+pkg-security@tracker.debian.org>
PackageName	yara
PackageSection	utils
PackageVersion	3.8.1-2~bpo9+1
SHA-1	07A3C218D8077DB856BDB37D44FEFEA2062CB9B7
SHA-256	D3EB3B524769E28CBC4991C1B10760586088F36C2AF6FADFF9CE9A89475333A4