From b06ff63c5fffbc3479bc44f9a00637661b09eca9 Mon Sep 17 00:00:00 2001
From: Ryan O'Horo <10855297+ryanohoro@users.noreply.github.com>
Date: Fri, 8 Mar 2024 18:51:47 -0600
Subject: [PATCH] Pin yara-python to 4.3.1 in Poetry

---
 poetry.lock    | 270 +++++++++++++++++++++++++++++++++----------------
 pyproject.toml |   1 +
 2 files changed, 184 insertions(+), 87 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index 5f10e91e..fdab5dba 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,9 +1,10 @@
-# This file is automatically @generated by Poetry 1.7.1 and should not be changed by hand.
+# This file is automatically @generated by Poetry and should not be changed by hand.
 
 [[package]]
 name = "aplib"
 version = "0.6"
 description = "Module for decompressing aPLib compressed data"
+category = "main"
 optional = false
 python-versions = ">=2.7"
 files = [
@@ -15,6 +16,7 @@ files = [
 name = "arc4"
 version = "0.0.4"
 description = "A small and insanely fast ARCFOUR (RC4) cipher implementation of Python"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -36,6 +38,7 @@ files = [
 name = "asn1crypto"
 version = "1.5.1"
 description = "Fast ASN.1 parser and serializer with definitions for private keys, public keys, certificates, CRL, OCSP, CMS, PKCS#3, PKCS#7, PKCS#8, PKCS#12, PKCS#5, X.509 and TSP"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -47,6 +50,7 @@ files = [
 name = "async-timeout"
 version = "4.0.3"
 description = "Timeout context manager for asyncio programs"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -58,6 +62,7 @@ files = [
 name = "attrs"
 version = "23.2.0"
 description = "Classes Without Boilerplate"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -77,6 +82,7 @@ tests-no-zope = ["attrs[tests-mypy]", "cloudpickle", "hypothesis", "pympler", "p
 name = "backoff"
 version = "2.2.1"
 description = "Function decoration for backoff and retry"
+category = "main"
 optional = false
 python-versions = ">=3.7,<4.0"
 files = [
@@ -88,6 +94,7 @@ files = [
 name = "beautifulsoup4"
 version = "4.12.2"
 description = "Screen-scraping library"
+category = "main"
 optional = false
 python-versions = ">=3.6.0"
 files = [
@@ -106,6 +113,7 @@ lxml = ["lxml"]
 name = "boltons"
 version = "23.0.0"
 description = "When they're not builtins, they're boltons."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -117,6 +125,7 @@ files = [
 name = "boto3"
 version = "1.28.60"
 description = "The AWS SDK for Python"
+category = "main"
 optional = false
 python-versions = ">= 3.7"
 files = [
@@ -136,6 +145,7 @@ crt = ["botocore[crt] (>=1.21.0,<2.0a0)"]
 name = "botocore"
 version = "1.31.85"
 description = "Low-level, data-driven core of boto 3."
+category = "main"
 optional = false
 python-versions = ">= 3.7"
 files = [
@@ -155,6 +165,7 @@ crt = ["awscrt (==0.19.12)"]
 name = "brotli"
 version = "1.1.0"
 description = "Python bindings for the Brotli compression library"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -247,6 +258,7 @@ files = [
 name = "brotlicffi"
 version = "1.1.0.0"
 description = "Python CFFI bindings to the Brotli library"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -286,6 +298,7 @@ cffi = ">=1.0.0"
 name = "capstone"
 version = "5.0.1"
 description = "Capstone disassembly engine"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
 files = [
@@ -303,6 +316,7 @@ files = [
 name = "certifi"
 version = "2024.2.2"
 description = "Python package for providing Mozilla's CA Bundle."
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -314,6 +328,7 @@ files = [
 name = "certvalidator"
 version = "0.11.1"
 description = "Validates X.509 certificates and paths"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -329,6 +344,7 @@ oscrypto = ">=0.16.1"
 name = "cffi"
 version = "1.16.0"
 description = "Foreign Function Interface for Python calling C code."
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -393,6 +409,7 @@ pycparser = "*"
 name = "charset-normalizer"
 version = "3.3.2"
 description = "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet."
+category = "main"
 optional = false
 python-versions = ">=3.7.0"
 files = [
@@ -492,6 +509,7 @@ files = [
 name = "chaskey"
 version = "0.0.1"
 description = "Pure Python Chaskey LTS implementation"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = []
@@ -507,6 +525,7 @@ resolved_reference = "2fd80f732dd9422a9e92556758180ceee3b5b4ec"
 name = "colorama"
 version = "0.4.6"
 description = "Cross-platform colored terminal text."
+category = "main"
 optional = false
 python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,!=3.5.*,!=3.6.*,>=2.7"
 files = [
@@ -518,6 +537,7 @@ files = [
 name = "colorclass"
 version = "2.2.2"
 description = "Colorful worry-free console applications for Linux, Mac OS X, and Windows."
+category = "main"
 optional = false
 python-versions = ">=2.6"
 files = [
@@ -529,6 +549,7 @@ files = [
 name = "construct"
 version = "2.10.68"
 description = "A powerful declarative symmetric parser/builder for binary data"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -542,6 +563,7 @@ extras = ["arrow", "cloudpickle", "enum34", "lz4", "numpy", "ruamel.yaml"]
 name = "cryptography"
 version = "42.0.5"
 description = "cryptography is a package which provides cryptographic recipes and primitives to Python developers."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -596,6 +618,7 @@ test-randomorder = ["pytest-randomly"]
 name = "cssselect2"
 version = "0.7.0"
 description = "CSS selectors for Python ElementTree"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -615,6 +638,7 @@ test = ["flake8", "isort", "pytest"]
 name = "decorator"
 version = "5.1.1"
 description = "Decorators for Humans"
+category = "main"
 optional = false
 python-versions = ">=3.5"
 files = [
@@ -626,6 +650,7 @@ files = [
 name = "deprecated"
 version = "1.2.14"
 description = "Python @deprecated decorator to deprecate old python classes, functions or methods."
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
 files = [
@@ -643,6 +668,7 @@ dev = ["PyTest", "PyTest-Cov", "bump2version (<1)", "sphinx (<2)", "tox"]
 name = "dncil"
 version = "1.0.2"
 description = "The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -657,6 +683,7 @@ dev = ["black (==22.12.0)", "dnfile (==0.12.0)", "hexdump (==3.3.0)", "isort (==
 name = "dnfile"
 version = "0.14.1"
 description = "Parse .NET executable files."
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -671,6 +698,7 @@ pefile = ">=2019.4.18"
 name = "docker"
 version = "6.1.3"
 description = "A Python library for the Docker Engine API."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -692,6 +720,7 @@ ssh = ["paramiko (>=2.4.3)"]
 name = "donut-decryptor"
 version = "0.0.1"
 description = "Decryptor for files containing Donut shellcode"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = []
@@ -713,6 +742,7 @@ resolved_reference = "5a0f9f87094efe6e8d131d3fa4abf23f31123784"
 name = "dotnetfile"
 version = "0.2.4"
 description = "Library to parse the CLR header of .NET assemblies"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -727,6 +757,7 @@ pefile = "*"
 name = "easygui"
 version = "0.98.3"
 description = "EasyGUI is a module for very simple, very easy GUI programming in Python.  EasyGUI is different from other GUI generators in that EasyGUI is NOT event-driven.  Instead, all GUI interactions are invoked by simple function calls."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -738,6 +769,7 @@ files = [
 name = "editorconfig"
 version = "0.12.4"
 description = "EditorConfig File Locator and Interpreter for Python"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -748,6 +780,7 @@ files = [
 name = "eml-parser"
 version = "1.17.5"
 description = "Python EML parser library"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -772,6 +805,7 @@ test = ["coverage", "pytest"]
 name = "entropy"
 version = "0.11"
 description = "extension module for calculating entropy fast"
+category = "main"
 optional = false
 python-versions = "*"
 files = []
@@ -787,6 +821,7 @@ resolved_reference = "a49f1addccb88d54115832a6d1982b957a56f329"
 name = "esprima"
 version = "4.0.1"
 description = "ECMAScript parsing infrastructure for multipurpose analysis in Python"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -797,6 +832,7 @@ files = [
 name = "et-xmlfile"
 version = "1.1.0"
 description = "An implementation of lxml.xmlfile for the standard library"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -808,6 +844,7 @@ files = [
 name = "exceptiongroup"
 version = "1.2.0"
 description = "Backport of PEP 654 (exception groups)"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -822,6 +859,7 @@ test = ["pytest (>=6)"]
 name = "filelock"
 version = "3.13.1"
 description = "A platform independent file lock."
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -838,6 +876,7 @@ typing = ["typing-extensions (>=4.8)"]
 name = "fonttools"
 version = "4.49.0"
 description = "Tools to manipulate font files"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -908,6 +947,7 @@ woff = ["brotli (>=1.0.1)", "brotlicffi (>=0.8.0)", "zopfli (>=0.1.4)"]
 name = "formulas"
 version = "1.2.6"
 description = "Parse and compile Excel formulas and workbooks in python code."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -932,6 +972,7 @@ plot = ["Pygments", "docutils", "flask", "graphviz", "jinja2", "regex"]
 name = "googleapis-common-protos"
 version = "1.56.1"
 description = "Common protobufs used in Google APIs"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -949,6 +990,7 @@ grpc = ["grpcio (>=1.0.0)"]
 name = "grpcio"
 version = "1.62.0"
 description = "HTTP/2-based RPC framework"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1015,6 +1057,7 @@ protobuf = ["grpcio-tools (>=1.62.0)"]
 name = "html5lib"
 version = "1.1"
 description = "HTML parser based on the WHATWG HTML specification"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*"
 files = [
@@ -1036,6 +1079,7 @@ lxml = ["lxml"]
 name = "idna"
 version = "3.6"
 description = "Internationalized Domain Names in Applications (IDNA)"
+category = "main"
 optional = false
 python-versions = ">=3.5"
 files = [
@@ -1047,6 +1091,7 @@ files = [
 name = "importlib-metadata"
 version = "6.0.1"
 description = "Read metadata from Python packages"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1066,6 +1111,7 @@ testing = ["flake8 (<5)", "flufl.flake8", "importlib-resources (>=1.3)", "packag
 name = "inflate64"
 version = "1.0.0"
 description = "deflate64 compression/decompression library"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -1133,6 +1179,7 @@ test = ["pyannotate", "pytest"]
 name = "inflection"
 version = "0.5.1"
 description = "A port of Ruby on Rails inflector to Python"
+category = "main"
 optional = false
 python-versions = ">=3.5"
 files = [
@@ -1144,6 +1191,7 @@ files = [
 name = "iniconfig"
 version = "2.0.0"
 description = "brain-dead simple config-ini parsing"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1155,6 +1203,7 @@ files = [
 name = "jmespath"
 version = "1.0.1"
 description = "JSON Matching Expressions"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1166,6 +1215,7 @@ files = [
 name = "jsbeautifier"
 version = "1.14.9"
 description = "JavaScript unobfuscator and beautifier."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1180,6 +1230,7 @@ six = ">=1.13.0"
 name = "jsonschema"
 version = "4.21.1"
 description = "An implementation of JSON Schema validation for Python"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -1201,6 +1252,7 @@ format-nongpl = ["fqdn", "idna", "isoduration", "jsonpointer (>1.13)", "rfc3339-
 name = "jsonschema-specifications"
 version = "2023.12.1"
 description = "The JSON Schema meta-schemas and vocabularies, exposed as a Registry"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -1215,6 +1267,7 @@ referencing = ">=0.31.0"
 name = "libarchive-c"
 version = "5.0"
 description = "Python interface to libarchive"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1226,6 +1279,7 @@ files = [
 name = "lief"
 version = "0.13.2"
 description = "Library to instrument executable formats"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -1258,6 +1312,7 @@ files = [
 name = "lxml"
 version = "4.9.3"
 description = "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API."
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, != 3.4.*"
 files = [
@@ -1365,6 +1420,7 @@ source = ["Cython (>=0.29.35)"]
 name = "lznt1"
 version = "0.2"
 description = "Python module for LZNT1 compression/decompression"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1375,6 +1431,7 @@ files = [
 name = "m2crypto"
 version = "0.39.0"
 description = "M2Crypto: A Python crypto and SSL toolkit"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1385,6 +1442,7 @@ files = [
 name = "mscerts"
 version = "2024.2.28"
 description = "Python package for providing Microsoft's CA Bundle."
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -1399,6 +1457,7 @@ stlupdate = ["asn1crypto", "requests", "signify"]
 name = "msoffcrypto-tool"
 version = "5.3.1"
 description = "Python tool and library for decrypting MS Office files with passwords or other keys"
+category = "main"
 optional = false
 python-versions = ">=3.8,<4.0"
 files = [
@@ -1414,6 +1473,7 @@ olefile = ">=0.46"
 name = "multivolumefile"
 version = "0.2.3"
 description = "multi volume file wrapper library"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -1430,6 +1490,7 @@ type = ["mypy", "mypy-extensions"]
 name = "nested-lookup"
 version = "0.2.25"
 description = "Python functions for working with deeply nested documents (lists and dicts)"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1443,6 +1504,7 @@ six = "*"
 name = "numpy"
 version = "1.26.0"
 description = "Fundamental package for array computing in Python"
+category = "main"
 optional = false
 python-versions = "<3.13,>=3.9"
 files = [
@@ -1484,6 +1546,7 @@ files = [
 name = "numpy-financial"
 version = "1.0.0"
 description = "Simple financial functions"
+category = "main"
 optional = false
 python-versions = ">=3.5"
 files = [
@@ -1498,6 +1561,7 @@ numpy = ">=1.15"
 name = "olefile"
 version = "0.46"
 description = "Python package to parse, read and write Microsoft OLE2 files (Structured Storage or Compound Document, Microsoft Office)"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
 files = [
@@ -1508,6 +1572,7 @@ files = [
 name = "oletools"
 version = "0.60.1"
 description = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1518,7 +1583,7 @@ files = [
 [package.dependencies]
 colorclass = "*"
 easygui = "*"
-msoffcrypto-tool = {version = "*", markers = "platform_python_implementation != \"PyPy\" or python_version >= \"3\" and (platform_system != \"Windows\" and platform_system != \"Darwin\")"}
+msoffcrypto-tool = {version = "*", markers = "platform_python_implementation != \"PyPy\" or python_version >= \"3\" and platform_system != \"Windows\" and platform_system != \"Darwin\""}
 olefile = ">=0.46"
 pcodedmp = ">=1.2.5"
 pyparsing = ">=2.1.0,<3"
@@ -1530,6 +1595,7 @@ full = ["XLMMacroDeobfuscator"]
 name = "opencv-contrib-python"
 version = "4.8.1.78"
 description = "Wrapper package for OpenCV python bindings."
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -1544,15 +1610,19 @@ files = [
 
 [package.dependencies]
 numpy = [
+    {version = ">=1.21.2", markers = "python_version >= \"3.10\""},
+    {version = ">=1.21.4", markers = "python_version >= \"3.10\" and platform_system == \"Darwin\""},
     {version = ">=1.23.5", markers = "python_version >= \"3.11\""},
-    {version = ">=1.21.4", markers = "python_version >= \"3.10\" and platform_system == \"Darwin\" and python_version < \"3.11\""},
-    {version = ">=1.21.2", markers = "platform_system != \"Darwin\" and python_version >= \"3.10\" and python_version < \"3.11\""},
+    {version = ">=1.19.3", markers = "python_version >= \"3.6\" and platform_system == \"Linux\" and platform_machine == \"aarch64\" or python_version >= \"3.9\""},
+    {version = ">=1.17.0", markers = "python_version >= \"3.7\""},
+    {version = ">=1.17.3", markers = "python_version >= \"3.8\""},
 ]
 
 [[package]]
 name = "opencv-python"
 version = "4.8.1.78"
 description = "Wrapper package for OpenCV python bindings."
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -1567,15 +1637,19 @@ files = [
 
 [package.dependencies]
 numpy = [
+    {version = ">=1.21.2", markers = "python_version >= \"3.10\""},
+    {version = ">=1.21.4", markers = "python_version >= \"3.10\" and platform_system == \"Darwin\""},
     {version = ">=1.23.5", markers = "python_version >= \"3.11\""},
-    {version = ">=1.21.4", markers = "python_version >= \"3.10\" and platform_system == \"Darwin\" and python_version < \"3.11\""},
-    {version = ">=1.21.2", markers = "platform_system != \"Darwin\" and python_version >= \"3.10\" and python_version < \"3.11\""},
+    {version = ">=1.19.3", markers = "python_version >= \"3.6\" and platform_system == \"Linux\" and platform_machine == \"aarch64\" or python_version >= \"3.9\""},
+    {version = ">=1.17.0", markers = "python_version >= \"3.7\""},
+    {version = ">=1.17.3", markers = "python_version >= \"3.8\""},
 ]
 
 [[package]]
 name = "openpyxl"
 version = "3.0.10"
 description = "A Python library to read/write Excel 2010 xlsx/xlsm files"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -1590,6 +1664,7 @@ et-xmlfile = "*"
 name = "opentelemetry-api"
 version = "1.17.0"
 description = "OpenTelemetry Python API"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1606,6 +1681,7 @@ setuptools = ">=16.0"
 name = "opentelemetry-exporter-jaeger"
 version = "1.17.0"
 description = "Jaeger Exporters for OpenTelemetry"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1621,6 +1697,7 @@ opentelemetry-exporter-jaeger-thrift = "1.17.0"
 name = "opentelemetry-exporter-jaeger-proto-grpc"
 version = "1.17.0"
 description = "Jaeger Protobuf Exporter for OpenTelemetry"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1638,6 +1715,7 @@ opentelemetry-sdk = ">=1.11,<2.0"
 name = "opentelemetry-exporter-jaeger-thrift"
 version = "1.17.0"
 description = "Jaeger Thrift Exporter for OpenTelemetry"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1654,6 +1732,7 @@ thrift = ">=0.10.0"
 name = "opentelemetry-exporter-otlp"
 version = "1.17.0"
 description = "OpenTelemetry Collector Exporters"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1669,6 +1748,7 @@ opentelemetry-exporter-otlp-proto-http = "1.17.0"
 name = "opentelemetry-exporter-otlp-proto-grpc"
 version = "1.17.0"
 description = "OpenTelemetry Collector Protobuf over gRPC Exporter"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1691,6 +1771,7 @@ test = ["pytest-grpc"]
 name = "opentelemetry-exporter-otlp-proto-http"
 version = "1.17.0"
 description = "OpenTelemetry Collector Protobuf over HTTP Exporter"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1713,6 +1794,7 @@ test = ["responses (==0.22.0)"]
 name = "opentelemetry-proto"
 version = "1.17.0"
 description = "OpenTelemetry Python Proto"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1727,6 +1809,7 @@ protobuf = ">=3.19,<5.0"
 name = "opentelemetry-sdk"
 version = "1.17.0"
 description = "OpenTelemetry Python SDK"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1744,6 +1827,7 @@ typing-extensions = ">=3.7.4"
 name = "opentelemetry-semantic-conventions"
 version = "0.38b0"
 description = "OpenTelemetry Semantic Conventions"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1755,6 +1839,7 @@ files = [
 name = "oscrypto"
 version = "1.3.0"
 description = "TLS (SSL) sockets, key generation, encryption, decryption, signing, verification and KDFs using the OS crypto libraries. Does not require a compiler, and relies on the OS for patching. Works on Windows, OS X and Linux/BSD."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1769,6 +1854,7 @@ asn1crypto = ">=1.5.1"
 name = "packaging"
 version = "23.2"
 description = "Core utilities for Python packages"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -1780,6 +1866,7 @@ files = [
 name = "pcodedmp"
 version = "1.2.6"
 description = "A VBA p-code disassembler"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1795,6 +1882,7 @@ win-unicode-console = {version = "*", markers = "platform_system == \"Windows\"
 name = "pefile"
 version = "2023.2.7"
 description = "Python PE parsing module"
+category = "main"
 optional = false
 python-versions = ">=3.6.0"
 files = [
@@ -1806,6 +1894,7 @@ files = [
 name = "pgpdump3"
 version = "1.5.2"
 description = "PGP packet parser library"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1817,6 +1906,7 @@ files = [
 name = "pillow"
 version = "10.2.0"
 description = "Python Imaging Library (Fork)"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -1902,6 +1992,7 @@ xmp = ["defusedxml"]
 name = "pillow-avif-plugin"
 version = "1.4.2"
 description = "A pillow plugin that adds avif support via libavif"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -1949,6 +2040,7 @@ files = [
 name = "pillow-heif"
 version = "0.14.0"
 description = "Python interface for libheif library"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -2018,6 +2110,7 @@ tests-min = ["defusedxml", "packaging", "pytest"]
 name = "pluggy"
 version = "1.4.0"
 description = "plugin and hook calling mechanisms for python"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -2033,6 +2126,7 @@ testing = ["pytest", "pytest-benchmark"]
 name = "protobuf"
 version = "4.25.3"
 description = ""
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -2053,6 +2147,7 @@ files = [
 name = "psutil"
 version = "5.9.8"
 description = "Cross-platform lib for process and system monitoring in Python."
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*, !=3.5.*"
 files = [
@@ -2081,6 +2176,7 @@ test = ["enum34", "ipaddress", "mock", "pywin32", "wmi"]
 name = "publicsuffixlist"
 version = "0.10.0.20240303"
 description = "publicsuffixlist implement"
+category = "main"
 optional = false
 python-versions = ">=2.6"
 files = [
@@ -2096,6 +2192,7 @@ update = ["requests"]
 name = "py-tlsh"
 version = "4.7.2"
 description = "TLSH (C++ Python extension)"
+category = "main"
 optional = false
 python-versions = ">=2.7"
 files = [
@@ -2106,6 +2203,7 @@ files = [
 name = "py7zr"
 version = "0.20.2"
 description = "Pure python 7-zip library"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2136,6 +2234,7 @@ test-compat = ["libarchive-c"]
 name = "pyasn1"
 version = "0.5.1"
 description = "Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)"
+category = "main"
 optional = false
 python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,!=3.5.*,>=2.7"
 files = [
@@ -2147,6 +2246,7 @@ files = [
 name = "pyasn1-modules"
 version = "0.3.0"
 description = "A collection of ASN.1-based protocols modules"
+category = "main"
 optional = false
 python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,!=3.5.*,>=2.7"
 files = [
@@ -2161,6 +2261,7 @@ pyasn1 = ">=0.4.6,<0.6.0"
 name = "pybcj"
 version = "1.0.2"
 description = "bcj filter library"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -2215,6 +2316,7 @@ test = ["coverage[toml] (>=5.2)", "hypothesis", "pytest (>=6.0)", "pytest-cov"]
 name = "pycdlib"
 version = "1.14.0"
 description = "Pure python ISO manipulation library"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2226,6 +2328,7 @@ files = [
 name = "pycparser"
 version = "2.21"
 description = "C parser in Python"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
 files = [
@@ -2237,6 +2340,7 @@ files = [
 name = "pycryptodome"
 version = "3.20.0"
 description = "Cryptographic library for Python"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*"
 files = [
@@ -2278,6 +2382,7 @@ files = [
 name = "pycryptodomex"
 version = "3.20.0"
 description = "Cryptographic library for Python"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*"
 files = [
@@ -2319,6 +2424,7 @@ files = [
 name = "pydyf"
 version = "0.9.0"
 description = "A low-level PDF generator."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2334,6 +2440,7 @@ test = ["flake8", "isort", "pillow", "pytest"]
 name = "pyelftools"
 version = "0.29"
 description = "Library for analyzing ELF files and DWARF debugging information"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2345,6 +2452,7 @@ files = [
 name = "pygments"
 version = "2.15.0"
 description = "Pygments is a syntax highlighting package written in Python."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2359,6 +2467,7 @@ plugins = ["importlib-metadata"]
 name = "pylzma"
 version = "0.5.0"
 description = "Python bindings for the LZMA library by Igor Pavlov."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2369,6 +2478,7 @@ files = [
 name = "pymupdf"
 version = "1.21.1"
 description = "Python bindings for the PDF toolkit and renderer MuPDF"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2408,6 +2518,7 @@ files = [
 name = "pyparsing"
 version = "2.4.7"
 description = "Python parsing module"
+category = "main"
 optional = false
 python-versions = ">=2.6, !=3.0.*, !=3.1.*, !=3.2.*"
 files = [
@@ -2419,6 +2530,7 @@ files = [
 name = "pyphen"
 version = "0.14.0"
 description = "Pure Python module to hyphenate text"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2434,6 +2546,7 @@ test = ["flake8", "isort", "pytest"]
 name = "pyppmd"
 version = "1.0.0"
 description = "PPMd compression/decompression library"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -2527,6 +2640,7 @@ test = ["coverage[toml] (>=5.2)", "hypothesis", "pytest (>=6.0)", "pytest-benchm
 name = "pytesseract"
 version = "0.3.10"
 description = "Python-tesseract is a python wrapper for Google's Tesseract-OCR"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2542,6 +2656,7 @@ Pillow = ">=8.0.0"
 name = "pytest"
 version = "7.2.2"
 description = "pytest: simple powerful testing with Python"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2565,6 +2680,7 @@ testing = ["argcomplete", "hypothesis (>=3.56)", "mock", "nose", "pygments (>=2.
 name = "pytest-mock"
 version = "3.10.0"
 description = "Thin-wrapper around the mock package for easier use with pytest"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2582,6 +2698,7 @@ dev = ["pre-commit", "pytest-asyncio", "tox"]
 name = "pytest-unordered"
 version = "0.5.2"
 description = "Test equality of unordered collections in pytest"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2596,6 +2713,7 @@ pytest = ">=6.0.0"
 name = "python-dateutil"
 version = "2.9.0.post0"
 description = "Extensions to the standard Python datetime module"
+category = "main"
 optional = false
 python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,>=2.7"
 files = [
@@ -2610,6 +2728,7 @@ six = ">=1.5"
 name = "python-docx"
 version = "0.8.11"
 description = "Create and update Microsoft Word .docx files."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2623,6 +2742,7 @@ lxml = ">=2.3.2"
 name = "python-magic"
 version = "0.4.27"
 description = "File type identification using libmagic"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*"
 files = [
@@ -2634,6 +2754,7 @@ files = [
 name = "pytz"
 version = "2024.1"
 description = "World timezone definitions, modern and historical"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2645,6 +2766,7 @@ files = [
 name = "pywin32"
 version = "306"
 description = "Python for Window Extensions"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2668,6 +2790,7 @@ files = [
 name = "pyxlsb2"
 version = "0.0.9"
 description = "Excel 2007+ Binary Workbook (xlsb) parser"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2679,6 +2802,7 @@ files = [
 name = "pyyaml"
 version = "6.0.1"
 description = "YAML parser and emitter for Python"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -2738,6 +2862,7 @@ files = [
 name = "pyzbar"
 version = "0.1.9"
 description = "Read one-dimensional barcodes and QR codes from Python 2 and 3."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2753,6 +2878,7 @@ scripts = ["Pillow (>=3.2.0)"]
 name = "pyzipper"
 version = "0.3.6"
 description = "AES encryption for zipfile."
+category = "main"
 optional = false
 python-versions = ">=3.4"
 files = [
@@ -2767,6 +2893,7 @@ pycryptodomex = "*"
 name = "pyzstd"
 version = "0.15.9"
 description = "Python bindings to Zstandard (zstd) compression library, the API style is similar to Python's bz2/lzma/zlib modules."
+category = "main"
 optional = false
 python-versions = ">=3.5"
 files = [
@@ -2900,6 +3027,7 @@ files = [
 name = "rarfile"
 version = "4.0"
 description = "RAR archive reader for Python"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -2911,6 +3039,7 @@ files = [
 name = "redis"
 version = "4.5.4"
 description = "Python client for Redis database and key-value store"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -2929,6 +3058,7 @@ ocsp = ["cryptography (>=36.0.1)", "pyopenssl (==20.0.1)", "requests (>=2.26.0)"
 name = "referencing"
 version = "0.33.0"
 description = "JSON Referencing + Python"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -2944,6 +3074,7 @@ rpds-py = ">=0.7.0"
 name = "regex"
 version = "2023.12.25"
 description = "Alternative regular expression module, to replace re."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3046,6 +3177,7 @@ files = [
 name = "requests"
 version = "2.31.0"
 description = "Python HTTP for Humans."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3067,6 +3199,7 @@ use-chardet-on-py3 = ["chardet (>=3.0.2,<6)"]
 name = "requests-file"
 version = "2.0.0"
 description = "File transport adapter for Requests"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3081,6 +3214,7 @@ requests = ">=1.0.0"
 name = "rpds-py"
 version = "0.18.0"
 description = "Python bindings to Rust's persistent data structures (rpds)"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3189,6 +3323,7 @@ files = [
 name = "rpmfile"
 version = "1.1.1"
 description = "Read rpm archive files"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3203,6 +3338,7 @@ zstd = ["zstandard (>=0.13.0)"]
 name = "s3transfer"
 version = "0.7.0"
 description = "An Amazon S3 Transfer Manager"
+category = "main"
 optional = false
 python-versions = ">= 3.7"
 files = [
@@ -3220,6 +3356,7 @@ crt = ["botocore[crt] (>=1.20.29,<2.0a.0)"]
 name = "schedula"
 version = "1.5.2"
 description = "Produce a plan that dispatches calls based on a graph of functions, satisfying data dependencies."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3241,6 +3378,7 @@ web = ["flask", "regex", "requests"]
 name = "setuptools"
 version = "69.1.1"
 description = "Easily download, build, install, upgrade, and uninstall Python packages"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3257,6 +3395,7 @@ testing-integration = ["build[virtualenv] (>=1.0.3)", "filelock (>=3.4.0)", "jar
 name = "signify"
 version = "0.5.1"
 description = "Module to generate and verify PE signatures"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3275,6 +3414,7 @@ pyasn1-modules = ">=0.2.8"
 name = "six"
 version = "1.16.0"
 description = "Python 2 and 3 compatibility utilities"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*"
 files = [
@@ -3286,6 +3426,7 @@ files = [
 name = "soupsieve"
 version = "2.5"
 description = "A modern CSS selector implementation for Beautiful Soup."
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3297,6 +3438,7 @@ files = [
 name = "speakeasy-emulator"
 version = "1.5.11"
 description = "Speakeasy malware emulation framework"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = []
@@ -3320,6 +3462,7 @@ resolved_reference = "1cb52a92ab4bae3659b0f8db4ed29f591d932c88"
 name = "ssdeep"
 version = "3.4"
 description = "Python wrapper for the ssdeep library"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3337,6 +3480,7 @@ docstest = ["doc8", "readme_renderer (>=16.0)", "sphinx", "sphinx_rtd_theme"]
 name = "texttable"
 version = "1.7.0"
 description = "module to create simple ASCII tables"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3348,6 +3492,7 @@ files = [
 name = "thrift"
 version = "0.16.0"
 description = "Python bindings for the Apache Thrift RPC system"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3366,6 +3511,7 @@ twisted = ["twisted"]
 name = "tinycss2"
 version = "1.2.1"
 description = "A tiny CSS parser"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3384,6 +3530,7 @@ test = ["flake8", "isort", "pytest"]
 name = "tldextract"
 version = "3.4.0"
 description = "Accurately separates a URL's subdomain, domain, and public suffix, using the Public Suffix List (PSL). By default, this includes the public ICANN TLDs and their exceptions. You can optionally support the Public Suffix List's private domains as well."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3401,6 +3548,7 @@ requests-file = ">=1.4"
 name = "tnefparse"
 version = "1.4.0"
 description = "a TNEF decoding library written in Python, without external dependencies"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3415,6 +3563,7 @@ optional = ["compressed-rtf"]
 name = "tomli"
 version = "2.0.1"
 description = "A lil' TOML parser"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3426,6 +3575,7 @@ files = [
 name = "typing-extensions"
 version = "4.10.0"
 description = "Backported and Experimental Type Hints for Python 3.8+"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3437,6 +3587,7 @@ files = [
 name = "unicorn"
 version = "1.0.2"
 description = "Unicorn CPU emulator engine"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3452,6 +3603,7 @@ files = [
 name = "urllib3"
 version = "2.0.7"
 description = "HTTP library with thread-safe connection pooling, file post, and more."
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3469,6 +3621,7 @@ zstd = ["zstandard (>=0.18.0)"]
 name = "validators"
 version = "0.20.0"
 description = "Python Data Validation for Humans™."
+category = "main"
 optional = false
 python-versions = ">=3.4"
 files = [
@@ -3485,6 +3638,7 @@ test = ["flake8 (>=2.4.0)", "isort (>=4.2.2)", "pytest (>=2.2.3)"]
 name = "weasyprint"
 version = "60.2"
 description = "The Awesome Document Factory"
+category = "main"
 optional = false
 python-versions = ">=3.7"
 files = [
@@ -3510,6 +3664,7 @@ test = ["flake8", "isort", "pytest"]
 name = "webencodings"
 version = "0.5.1"
 description = "Character encoding aliases for legacy web content"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3521,6 +3676,7 @@ files = [
 name = "websocket-client"
 version = "1.7.0"
 description = "WebSocket client for Python with low level API options"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3537,6 +3693,7 @@ test = ["websockets"]
 name = "win-unicode-console"
 version = "0.5"
 description = "Enable Unicode input and display when running Python from Windows console."
+category = "main"
 optional = false
 python-versions = "*"
 files = [
@@ -3547,6 +3704,7 @@ files = [
 name = "wrapt"
 version = "1.16.0"
 description = "Module for decorators, wrappers and monkey patching."
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -3626,6 +3784,7 @@ files = [
 name = "xlrd"
 version = "2.0.1"
 description = "Library for developers to extract data from Microsoft Excel (tm) .xls spreadsheet files"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*, !=3.5.*"
 files = [
@@ -3642,6 +3801,7 @@ test = ["pytest", "pytest-cov"]
 name = "xlrd2"
 version = "1.3.4"
 description = "Library for developers to extract data from Microsoft Excel legacy spreadsheet files (xls)"
+category = "main"
 optional = false
 python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
 files = [
@@ -3653,6 +3813,7 @@ files = [
 name = "xmltodict"
 version = "0.13.0"
 description = "Makes working with XML feel like you are working with JSON"
+category = "main"
 optional = false
 python-versions = ">=3.4"
 files = [
@@ -3662,96 +3823,30 @@ files = [
 
 [[package]]
 name = "yara-python"
-version = "4.5.0"
+version = "4.3.1"
 description = "Python interface for YARA"
+category = "main"
 optional = false
 python-versions = "*"
 files = [
-    {file = "yara_python-4.5.0-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:3feb72c2146c50e583d7e3cacbb49f280fb5cac0494cae1b48e5980ecbdc1571"},
-    {file = "yara_python-4.5.0-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:1a036c41eaebdf6c0a674e0bd9d37c9d06d1d7427455866ace09d3a159c442b0"},
-    {file = "yara_python-4.5.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:acbc950b051a576dd4c6825bf4ebb1c0f0c5eea35b3e01bde921b744e2cc92e1"},
-    {file = "yara_python-4.5.0-cp310-cp310-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:11bb478dee0450af1f6643a138b9eaec085ab79aa4a4aef786390c5dfc70f0d0"},
-    {file = "yara_python-4.5.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1633d5653d37b6ef6517113ed446159d8de67d02893c00c43daecd9bbcb9700b"},
-    {file = "yara_python-4.5.0-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:82109dd8c932c3326a9747ac3ac62857868fcc9d9fe55d6f46ff0b4dcf14eb57"},
-    {file = "yara_python-4.5.0-cp310-cp310-musllinux_1_1_i686.whl", hash = "sha256:85af2755732081e5fb99fc4295659690f97b61b7a1428e857dbfe91f12f9cf7d"},
-    {file = "yara_python-4.5.0-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:a776f86060aebd4e31c74927ddd13e6b3c21a59e4586da8667e69849e5008872"},
-    {file = "yara_python-4.5.0-cp310-cp310-win32.whl", hash = "sha256:535f274738d6ad5501b4450b0bf3cd3c0d1547e9773a7ca1cf9e855d8a1cf741"},
-    {file = "yara_python-4.5.0-cp310-cp310-win_amd64.whl", hash = "sha256:5de0bf8ea0d530e8af2b59c56c5506219f060b4b25b196ba88fd19753529246d"},
-    {file = "yara_python-4.5.0-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:aeadaa62aa523e71abcb438f6f07761b9d62177021bb0e919a180d5b1e8cc05f"},
-    {file = "yara_python-4.5.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:0b4cc4eb937c1fd3747682cae639179a6bc03a24c86dde861ca2ba1abafe8404"},
-    {file = "yara_python-4.5.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7c77dfe89038a1e0a134d44aacb05d48b268312ca3a58df1fc0cf212aaaa79ff"},
-    {file = "yara_python-4.5.0-cp311-cp311-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:570d1f0f9893ec114a25ed9704e992ce58fb28c3399f6a3d81ea42d4e90c6a9d"},
-    {file = "yara_python-4.5.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:b4650def8807d5b6736a1144ca2d880198deafec2313816a4fcc365c00f9b61b"},
-    {file = "yara_python-4.5.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:f557ce581e35ae23f19da6e80be1f84a1ac98b17b67b04cf46a9877d8d4fa870"},
-    {file = "yara_python-4.5.0-cp311-cp311-musllinux_1_1_i686.whl", hash = "sha256:2d400917ebaf35663975ff001a6c13e432af68e641879194152212b8e87dd974"},
-    {file = "yara_python-4.5.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:c5de6ed584bf59005186628f88df718475ccb6818912b0b12a151a2e61f0c29c"},
-    {file = "yara_python-4.5.0-cp311-cp311-win32.whl", hash = "sha256:17bee3e24258ef9d31cbc11342d22d513e005b7a551083adbb01d3ffc748c945"},
-    {file = "yara_python-4.5.0-cp311-cp311-win_amd64.whl", hash = "sha256:36acc235bf7aa61145daf364c97d3723e9c0e350cca6ae00bf717088a2c72f3b"},
-    {file = "yara_python-4.5.0-cp312-cp312-macosx_10_9_universal2.whl", hash = "sha256:6918ddc68d89f4da1eb851d6a841ebc615cec31532f74698e4f51e58b44213e0"},
-    {file = "yara_python-4.5.0-cp312-cp312-macosx_10_9_x86_64.whl", hash = "sha256:9a9d666acc4d6d1ec59da4864ac4e25552169bd92520b050e5fcf92212d3ab1e"},
-    {file = "yara_python-4.5.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:a96d7b4a7e060c40b290d2264c17623f063a5604e6502b06cd145f2f0e6e82ed"},
-    {file = "yara_python-4.5.0-cp312-cp312-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:91f782bdea16441c87f0231f038cf6d151e36718154871f5c5fb274364d144e7"},
-    {file = "yara_python-4.5.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:006f4af0cf30725425b6777016e6d6d7b2854955f0402b227f70d6fbdc594272"},
-    {file = "yara_python-4.5.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:7645a4d23d7749c390da92de105831762499eba22e39e956d0fddfda05d949eb"},
-    {file = "yara_python-4.5.0-cp312-cp312-musllinux_1_1_i686.whl", hash = "sha256:244fd95d0e4f4f1fbe85032f7e9b779e2cb4c6678787725482d2b43925ff2ed3"},
-    {file = "yara_python-4.5.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:c17980d60ff3f7cfabab2df28965efb8e0b38508a5c47a0ad6917016edc0328c"},
-    {file = "yara_python-4.5.0-cp312-cp312-win32.whl", hash = "sha256:86549302cae8f9c5fb1394e2e9fd9dc802e3c488723935e50fdcb0d6b639ab51"},
-    {file = "yara_python-4.5.0-cp312-cp312-win_amd64.whl", hash = "sha256:36423ffd5e2e1f39562df6bd569be997c2fd06e0f30019dfadf339ff88278a4f"},
-    {file = "yara_python-4.5.0-cp37-cp37m-macosx_10_9_x86_64.whl", hash = "sha256:49f8e215c9ebd0b43a782d3cfbeee6f82e2a647482cff6c676e96da57014d878"},
-    {file = "yara_python-4.5.0-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:262be4841add4d7e978db317e63f657291b4c9a64469bcdf43cdee8b3f28e0c0"},
-    {file = "yara_python-4.5.0-cp37-cp37m-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:a0ee9e222daa982d31dc4be5fabf838726a3fb6a6425253c73f53aa0f0e2f457"},
-    {file = "yara_python-4.5.0-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d6d7d16fffc0fe92cd8d4ead9fbd58f1da7fcd9d39ff5c32924691db66257927"},
-    {file = "yara_python-4.5.0-cp37-cp37m-musllinux_1_1_aarch64.whl", hash = "sha256:6ebbe0c112da598828d8fad15356a20b739dd2ef0dd0d90f6ec0f00ce9aa7ae1"},
-    {file = "yara_python-4.5.0-cp37-cp37m-musllinux_1_1_i686.whl", hash = "sha256:a08162e9b4bdbae1e2e34ab83b6f145d334d650399aab9afb5341ce67a866a5c"},
-    {file = "yara_python-4.5.0-cp37-cp37m-musllinux_1_1_x86_64.whl", hash = "sha256:65b0e4c168f0210d9b6be7b95bb7e2a97a545d52e9d3403370c3c5506b9d31f1"},
-    {file = "yara_python-4.5.0-cp37-cp37m-win32.whl", hash = "sha256:3393eced9af44507193f7724b8f37ed5f0c5620fb402b886d6f07f578aab43af"},
-    {file = "yara_python-4.5.0-cp37-cp37m-win_amd64.whl", hash = "sha256:de539783415e5b73e81d0a26fbe21cf2ade1b32fbd653be8a0f7430907337883"},
-    {file = "yara_python-4.5.0-cp38-cp38-macosx_10_9_universal2.whl", hash = "sha256:067610dfedfe361b748bbf9148183df11141748f2a83b4bdb873fde96a62e204"},
-    {file = "yara_python-4.5.0-cp38-cp38-macosx_10_9_x86_64.whl", hash = "sha256:8342783942dd8bdc46f1047cdb45ff68dcfe7aef0499b644deabd3d685a2d7e6"},
-    {file = "yara_python-4.5.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f14db61a8e54c61cced58d070630033b68e276036053f402e76a1b7ebc5ad0f0"},
-    {file = "yara_python-4.5.0-cp38-cp38-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:468743b991341440fa4fd6c1414b2f5948970d26330ac1ae811f10d559c57771"},
-    {file = "yara_python-4.5.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:cde3be15f16c3b24a3e7a08327deeec9225cecf060c930fef58d38ae4554b17e"},
-    {file = "yara_python-4.5.0-cp38-cp38-musllinux_1_1_aarch64.whl", hash = "sha256:1b07363c9b44796fe991e29a5756a48ae195f3cbe4d72bb70b1932f5ccadd153"},
-    {file = "yara_python-4.5.0-cp38-cp38-musllinux_1_1_i686.whl", hash = "sha256:8072d6f89d7352d09d1eeda6a8fa15582ff141495f24ceb448c7b7f7592d1820"},
-    {file = "yara_python-4.5.0-cp38-cp38-musllinux_1_1_x86_64.whl", hash = "sha256:29735530650093e251abe11f76d78382fb8e87f24e7bc154e4fe28c624e7d4f7"},
-    {file = "yara_python-4.5.0-cp38-cp38-win32.whl", hash = "sha256:016a7ce7ec60b1dcecec6a23557abd3b78b442a8ac7dd14c4e8047ac07227ea6"},
-    {file = "yara_python-4.5.0-cp38-cp38-win_amd64.whl", hash = "sha256:47fe5195687fff0f7ec435ce75b46a35b05b257c7550de5cb417bad9750bebde"},
-    {file = "yara_python-4.5.0-cp39-cp39-macosx_10_9_universal2.whl", hash = "sha256:aea5ba7084b48fb3d5edd6b01c7e45763a1f0a4dd83bc0c3c1975e61aeae86cf"},
-    {file = "yara_python-4.5.0-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:16894888f599b4acdf57a4fc157108fb804823149f60e81a0afba0b7d2ebbf5f"},
-    {file = "yara_python-4.5.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5e80d2d8e5f7e9c25c8150f7281183abb2e53d81c0d33cecdf1459faeb042572"},
-    {file = "yara_python-4.5.0-cp39-cp39-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:898fbdc6c5f5913935ce2586242dd94673d27f3a031dc0704598237c25ed4431"},
-    {file = "yara_python-4.5.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:8e94d576dd98f7b957d34b8b03cabdf0372d11e9f65cd45bb823cbc3a086ec25"},
-    {file = "yara_python-4.5.0-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:d95e525074624c2618cb8146b4cc22455e786fbbe575b99bf191824a23f460db"},
-    {file = "yara_python-4.5.0-cp39-cp39-musllinux_1_1_i686.whl", hash = "sha256:185d542aefc154c28d59b7385f3d8d7baacbb74451f2f153a51c1216ae063d70"},
-    {file = "yara_python-4.5.0-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:e7571f164a2da121fbc3a0d4df68fec82d2ae39bb8ea48b5a77467a467741573"},
-    {file = "yara_python-4.5.0-cp39-cp39-win32.whl", hash = "sha256:692ae9d9647026908d5202a9ec68da6c8b4e4fb161828a425bc847ad03e66341"},
-    {file = "yara_python-4.5.0-cp39-cp39-win_amd64.whl", hash = "sha256:b08ebeab39aab6fd80da875aa9fe0ec21ab8432f4656a0f4011a5069a9c3aab4"},
-    {file = "yara_python-4.5.0-pp310-pypy310_pp73-macosx_10_9_x86_64.whl", hash = "sha256:cf9758f5b22cd0d9e14cec363d5eda3af637d93728bf5287ee0887a2fce036b1"},
-    {file = "yara_python-4.5.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:2b68c7367df3d10d55fbeda985c02425ef9b549805fa9893505e25d68ef039e8"},
-    {file = "yara_python-4.5.0-pp310-pypy310_pp73-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:fe47ea00cd442eeb0bfea9ffea3cec97074e0e88843358a0552063b978655736"},
-    {file = "yara_python-4.5.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:344b679576d51fc6397eac3282e4ad27b1ab093cf9571a47e47b50debcd03dbf"},
-    {file = "yara_python-4.5.0-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:5c02545da623e58f5df8292a7d214b97667989904271d30b5e389b9ab1a81395"},
-    {file = "yara_python-4.5.0-pp37-pypy37_pp73-macosx_10_9_x86_64.whl", hash = "sha256:e344f6953be0f60dc4fa94f629568e12ed9d2b981997e22bf32bd83083774c2f"},
-    {file = "yara_python-4.5.0-pp37-pypy37_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:77da34bac1807d270df4840d28c01a7d879e0ce0a0c692a0b0bd8f2adf4f6d1c"},
-    {file = "yara_python-4.5.0-pp37-pypy37_pp73-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:2d262ddf7032f1a9efe9c7533315c37db86ad58c10b5888d704f50f0f82bdfb8"},
-    {file = "yara_python-4.5.0-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:7d04c17b27e33f9541a47f12972fc1a5836d2dfa947f48ed3242c5c9c32fc47b"},
-    {file = "yara_python-4.5.0-pp37-pypy37_pp73-win_amd64.whl", hash = "sha256:847c249bbf6847f6d056921315eeef2d9c2ac79fcf063384d9b752b51e087afd"},
-    {file = "yara_python-4.5.0-pp38-pypy38_pp73-macosx_10_9_x86_64.whl", hash = "sha256:0361820a3a8ec522cbb259d6af664d5f7dd19b29e4bcce9c36e480832b4172fc"},
-    {file = "yara_python-4.5.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:00a7c3d593ef0d065d84c06ed365ce24735f553669de1e066851e8f6cdfc2051"},
-    {file = "yara_python-4.5.0-pp38-pypy38_pp73-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:a45b201d634be0f37bcb5fcf898fc91c66032c3f87b3e7656953f111e475f409"},
-    {file = "yara_python-4.5.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:7c1cbcfc262840ea1fb19bc961eaff51d764896bd411643f5695a46046cae99b"},
-    {file = "yara_python-4.5.0-pp38-pypy38_pp73-win_amd64.whl", hash = "sha256:445d80c3a327345cae346cb12c86b01265127319a9cf3a1d93e301ee080fb2c7"},
-    {file = "yara_python-4.5.0-pp39-pypy39_pp73-macosx_10_9_x86_64.whl", hash = "sha256:c966f098254d6883ea9b1bba9743a298658cc58f43904ea6564e31e3e0d699d8"},
-    {file = "yara_python-4.5.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c901ce071141261a857ea779bcdf0c1e63e238d1b597a411dc2f816796a25c63"},
-    {file = "yara_python-4.5.0-pp39-pypy39_pp73-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:26085645d894bdfa75e2e88ba57d8297ed89c415ae3c2224ef27095c13c0c050"},
-    {file = "yara_python-4.5.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:a0778e2d41bde173dd5e4758bb2f6d58832f149ff10d333e8751ae3cc4b195b2"},
-    {file = "yara_python-4.5.0-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:648072ba075b930d976b5f6ae8c4563e4e32a057a2a8bd5be0e82ac98b682c60"},
+    {file = "yara-python-4.3.1.tar.gz", hash = "sha256:7af4354ee0f1561f51fd01771a121d8d385b93bbc6138a25a38ce68aa6801c2c"},
+    {file = "yara_python-4.3.1-cp310-cp310-win32.whl", hash = "sha256:834d8fe2cdb5cf61d5e505d32c504b62891df5ce5af9f04dbd8c7575c1dbef30"},
+    {file = "yara_python-4.3.1-cp310-cp310-win_amd64.whl", hash = "sha256:ec05d0b7cc46728119d450875382d5386305510b8cfb14bad3627060c9e6f199"},
+    {file = "yara_python-4.3.1-cp311-cp311-win32.whl", hash = "sha256:c8663f75f0c5f82e0f6053c9ddbddd97f956787bffb7f64cac1e40e0a21db89c"},
+    {file = "yara_python-4.3.1-cp311-cp311-win_amd64.whl", hash = "sha256:51f1bdbcdbcfa29a7a2cf7e7e5d6a7d8dbd00568e4ab6103adceda5a499895a6"},
+    {file = "yara_python-4.3.1-cp37-cp37m-win32.whl", hash = "sha256:8847bb5e74d2b33cf48f372bed02805876ab2e414aa7fd50c16a7c6150316601"},
+    {file = "yara_python-4.3.1-cp37-cp37m-win_amd64.whl", hash = "sha256:fbf8281a6eb538b5c219a9c54c65a910806e7adf28a7d878f2cff551cbbd43ea"},
+    {file = "yara_python-4.3.1-cp38-cp38-win32.whl", hash = "sha256:fd70fe0ba522d4ecd73cbf45e528872844e61e2febe8f66e8a94c2674751b831"},
+    {file = "yara_python-4.3.1-cp38-cp38-win_amd64.whl", hash = "sha256:950377dd53d17870f66406f0db9ed9f6b04ac7e61c7f6fd5429459e2a00fd874"},
+    {file = "yara_python-4.3.1-cp39-cp39-win32.whl", hash = "sha256:c032ad4ec6698a4f485b3d9721e6223028953bb61362482bdd7eabb147271e80"},
+    {file = "yara_python-4.3.1-cp39-cp39-win_amd64.whl", hash = "sha256:f0b7b2ea840638415a075a25860dbcb6466d83000a8367196188a6367b01af71"},
 ]
 
 [[package]]
 name = "zipp"
 version = "3.17.0"
 description = "Backport of pathlib-compatible object wrapper for zip files"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3767,6 +3862,7 @@ testing = ["big-O", "jaraco.functools", "jaraco.itertools", "more-itertools", "p
 name = "zopfli"
 version = "0.2.3"
 description = "Zopfli module for python"
+category = "main"
 optional = false
 python-versions = ">=3.8"
 files = [
@@ -3839,4 +3935,4 @@ test = ["pytest"]
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.10,<=3.12"
-content-hash = "860bf3d7bd7370177816188ff060b5a3dbef6d287438209247e4bd015b2ecf3f"
+content-hash = "f2341a69ba424222604e55fcb1e3f05df54d96f62d94c70eaddb6d53c0079a07"
diff --git a/pyproject.toml b/pyproject.toml
index c0841b50..59bcdfb7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -79,6 +79,7 @@ weasyprint = "60.2"
 xlrd2 = "1.3.4"
 xlrd = "2.0.1"
 xmltodict = "0.13.0"
+yara-python = "4.3.1"
 
 # Git dependencies
 chaskey = { git = "https://github.com/volexity/chaskey-lts", rev = "2fd80f732dd9422a9e92556758180ceee3b5b4ec" }  # For donut-decryptor