make diff passs
fix spec 3
yara yara