_Trojan_Autorun_Dump_Generic_Dacic_19E38D3B_A_AAF775A0_136_1_Tro_107

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_136_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_507_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_548_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_63_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_682_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_110_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_132_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_141_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_147_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_152_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_206_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_222_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_23_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_241_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_25_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_286_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_34_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_374_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_414_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_470_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_536_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_554_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_614_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_622_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_625_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_66_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_675_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_699_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_6_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_762_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_815_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_833_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_283_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_32_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_38_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_40_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_80_1.vir, Trojan.Autorun_Gen.Trojan.Backdoor2.FmZbaKq9kbjb_12_1.vir, Trojan.Autorun_Gen.Trojan.Backdoor2.fmZbaKq9kbjb_1_1.vir, Trojan.Autorun_Trojan.GenericKD.72517131_159_1.vir, Trojan.Autorun_Trojan.GenericKD.72517131_89_1.vir, Trojan.Autorun_Trojan.GenericKD.72709336_1.vir, Trojan.Autorun_Trojan.GenericKD.72869045_1.vir, Trojan.Autorun_Trojan.GenericKD.73132316_1_1.vir, Trojan.Autorun_Trojan.GenericKDZ.72348_2_1.vir, Trojan.Autorun_Trojan.GenericKDZ.74320_16_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_112_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_177_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_232_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_29_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_339_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.14_53_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_116_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_182_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_262_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_49_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_50_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.7_152_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.7_162_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.7_51_1.vir, Trojan.Danger_Generic.Dacic.1A7FA519.A.375FFA93_1.vir, Trojan.Danger_Generic.Dacic.1A7FA519.A.445D3B1D_1.vir, Trojan.Danger_Generic.Dacic.1A7FA519.A.73FE7089_1.vir, Trojan.Danger_Trojan.GenericKD.67064203_26_1.vir, Trojan.Danger_Trojan.GenericKD.67064203_9_1.vir, Trojan.Danger_Trojan.GenericKD.67166905_117_1.vir, Trojan.Danger_Trojan.GenericKD.67166905_54_1.vir, Trojan.Danger_Trojan.GenericKD.67166905_64_1.vir, Trojan.Danger_Trojan.GenericKD.67269844_41_1.vir, Trojan.Danger_Trojan.GenericKD.72304918_187_1.vir, Trojan.Danger_Trojan.GenericKD.72304918_89_1.vir, Trojan.Danger_Trojan.GenericKD.72597336_2_1.vir, Trojan.Danger_Trojan.GenericKD.72597336_38_1.vir, Virus.Danger_Gen.Trojan.ShellObject.AXZ@aCIJdog.vir, Virus.Danger_Trojan.Agent.DQQO_12.vir, Virus.Hijack_Backdoor.Hangup.B_1.vir, Virus.Hijack_Backdoor.Hangup.B_130.vir, Virus.Hijack_Backdoor.Hangup.B_171.vir, Virus.Hijack_Backdoor.Hangup.B_175.vir, Virus.Hijack_Backdoor.Hangup.B_228.vir, Virus.Hijack_Backdoor.Hangup.B_23.vir, Virus.Hijack_Backdoor.Hangup.B_237.vir, Virus.Hijack_Backdoor.Hangup.B_301.vir, Virus.Hijack_Backdoor.Hangup.B_308.vir, Virus.Hijack_Backdoor.Hangup.B_36.vir, Virus.Hijack_Backdoor.Hangup.B_67.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_101.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_126.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_127.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_128.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_132.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_153.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_161.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_164.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_171.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_197.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_208.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_234.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_239.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_240.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_262.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_266.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_283.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_344.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_363.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_409.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_423.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_444.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_461.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_469.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_472.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_486.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_492.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_495.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_515.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_531.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_544.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_586.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_606.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_609.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_620.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_629.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_633.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_635.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_639.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_674.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_681.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_689.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_69.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_70.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_704.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_707.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_72.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_749.vir,...

rule _Trojan_Autorun_Dump_Generic_Dacic_19E38D3B_A_AAF775A0_136_1_Tro_107 {
  meta:
    description = "datamaliciousorder - from files Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_136_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_507_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_548_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_63_1.vir, Trojan.Autorun_Dump.Generic.Dacic.19E38D3B.A.AAF775A0_682_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_110_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_132_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_141_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_147_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_152_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_206_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_222_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_23_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_241_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_25_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_286_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_34_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_374_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_414_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_470_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_536_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_554_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_614_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_622_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_625_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_66_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_675_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_699_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_6_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_762_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_815_1.vir, Trojan.Autorun_Dump.Generic.Dacic.BC58E3CC.A.00D7D229_833_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_283_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_32_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_38_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_40_1.vir, Trojan.Autorun_Gen.Heur.Mint.Murphy.3_80_1.vir, Trojan.Autorun_Gen.Trojan.Backdoor2.FmZbaKq9kbjb_12_1.vir, Trojan.Autorun_Gen.Trojan.Backdoor2.fmZbaKq9kbjb_1_1.vir, Trojan.Autorun_Trojan.GenericKD.72517131_159_1.vir, Trojan.Autorun_Trojan.GenericKD.72517131_89_1.vir, Trojan.Autorun_Trojan.GenericKD.72709336_1.vir, Trojan.Autorun_Trojan.GenericKD.72869045_1.vir, Trojan.Autorun_Trojan.GenericKD.73132316_1_1.vir, Trojan.Autorun_Trojan.GenericKDZ.72348_2_1.vir, Trojan.Autorun_Trojan.GenericKDZ.74320_16_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_112_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_177_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_232_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_29_1.vir, Trojan.Autorun_Trojan.GenericKDZ.94847_339_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.14_53_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_116_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_182_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_262_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_49_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.2_50_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.7_152_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.7_162_1.vir, Trojan.Danger_Gen.Variant.Ransom.Xpiro.7_51_1.vir, Trojan.Danger_Generic.Dacic.1A7FA519.A.375FFA93_1.vir, Trojan.Danger_Generic.Dacic.1A7FA519.A.445D3B1D_1.vir, Trojan.Danger_Generic.Dacic.1A7FA519.A.73FE7089_1.vir, Trojan.Danger_Trojan.GenericKD.67064203_26_1.vir, Trojan.Danger_Trojan.GenericKD.67064203_9_1.vir, Trojan.Danger_Trojan.GenericKD.67166905_117_1.vir, Trojan.Danger_Trojan.GenericKD.67166905_54_1.vir, Trojan.Danger_Trojan.GenericKD.67166905_64_1.vir, Trojan.Danger_Trojan.GenericKD.67269844_41_1.vir, Trojan.Danger_Trojan.GenericKD.72304918_187_1.vir, Trojan.Danger_Trojan.GenericKD.72304918_89_1.vir, Trojan.Danger_Trojan.GenericKD.72597336_2_1.vir, Trojan.Danger_Trojan.GenericKD.72597336_38_1.vir, Virus.Danger_Gen.Trojan.ShellObject.AXZ@aCIJdog.vir, Virus.Danger_Trojan.Agent.DQQO_12.vir, Virus.Hijack_Backdoor.Hangup.B_1.vir, Virus.Hijack_Backdoor.Hangup.B_130.vir, Virus.Hijack_Backdoor.Hangup.B_171.vir, Virus.Hijack_Backdoor.Hangup.B_175.vir, Virus.Hijack_Backdoor.Hangup.B_228.vir, Virus.Hijack_Backdoor.Hangup.B_23.vir, Virus.Hijack_Backdoor.Hangup.B_237.vir, Virus.Hijack_Backdoor.Hangup.B_301.vir, Virus.Hijack_Backdoor.Hangup.B_308.vir, Virus.Hijack_Backdoor.Hangup.B_36.vir, Virus.Hijack_Backdoor.Hangup.B_67.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_101.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_126.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_127.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_128.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_132.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_153.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_161.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_164.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_171.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_197.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_208.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_234.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_239.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_240.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_262.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_266.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_283.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_344.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_363.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_409.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_423.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_444.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_461.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_469.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_472.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_486.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_492.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_495.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_515.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_531.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_544.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_586.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_606.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_609.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_620.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_629.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_633.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_635.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_639.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_674.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_681.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_689.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_69.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_70.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_704.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_707.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_72.vir, Virus.Hijack_Dropped.Backdoor.Padodor.BJ_749.vir,..."
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "f927b1c94bfa8e6747e8d2bec29942a2854370898d5ede2466cae25552a5b45b"
    hash2       = "0b846be607511f53a877dc4587d0ba463ddd8802169c9fd0dfc3fed8674624aa"
    hash3       = "1a57b6d88a76803739e577e5768bcc11a9fc6d1fbb01225d036a63025b2e9736"
    hash4       = "7bce74d8a710a8abf43ff7d827929a2093712944b7719e425417ce7860c44447"
    hash5       = "601c89073579bb251701c13920c24678f1aef85fee609656f2b15b43b19791f8"
    hash6       = "5f94498fed6651796fccf79e7c3017dd7a33ff44af767f562a928aa8b2efabe2"
    hash7       = "cc1e9f849103404f22f8b7f7f5e4d595bf4cefd539f572fea35175af488dd758"
    hash8       = "68bde7a3bb3fba5f90d8cf4875629a32104f29b8c827b2a01f00c28d9c4c6f22"
    hash9       = "5f4c694fa340eb585d7e8d45b82c1cee3e2c435a35e5918242a14ff03cb5e0ac"
    hash10      = "6a3e519ce32ea6352f2a4a4ae60c54b4b29685082491e581f3c478458b04b71f"
    hash11      = "40e6c6811d97c5c1f3fb9cc3a89a12332d8a8c86a0a02129dc2d085d5323c96e"
    hash12      = "ab754afd49879758d37529a2a2af373b17b36990be54bb263bd096b77fa8b235"
    hash13      = "47841558e68ba6457a5a189bc078b534a5f522e0a0bb89e73da956dd33e056eb"
    hash14      = "2ace3ca53c58785535aacd01b3efdf6ccbbd7c46f8800d8c8e460b5a235010a7"
    hash15      = "200c40a2069ed220fef221a45227ee171336b71381403234a44d69cc41503ac4"
    hash16      = "1db3a6ce5835bfcb33c00be78191b2230e13f794496c495ff141882526da8557"
    hash17      = "1aa541e5d4a7ec850d76ea67e8c8f2aacc395679d591a93c3609661c22a69a59"
    hash18      = "3545859630e108529b2d4707984f75d1729f7722fdb5f6005c7d440576425c82"
    hash19      = "fa79d0d46afda4bb5a1e98a613b5e261a1e09102eed7a3f02b55b44f087cd63b"
    hash20      = "e9e81293b0e1c2b6e701c01cedab5be2bbb9886c376f66c8a99436ae8a11982a"
    hash21      = "8c0c319e16308209abc4f3348bb131b561e73f0350785631ba25c0278e4d4586"
    hash22      = "60a3d503a1bdf8be55a28ba701d8bdba84922de33684252c169b3f491391d05c"
    hash23      = "42f5ee7f92832c40c9d11226bcd902b517933a0d0203641929ff17aaee2788ef"
    hash24      = "e49627dbb8f5a8556e2166e3dd81a9f483e3d2fb08d2abee80121132526276d9"
    hash25      = "40bb825724bd9c75c9bc1d8f6fb045ed8c49f02f0a495e36201542197967d6df"
    hash26      = "9b796913f77f9a7c7a32eac18d96d5fb58eca544005685e0004382c199cbef5e"
    hash27      = "f690eecdd2081543e9fa6e5f68262fb3ca36635872d24939996ed7f7389ae7d9"
    hash28      = "02aed68af87fe6590f2446ab4424b66b994ce793fdb81ab8807f66a495454125"
    hash29      = "4d80bb4b4ed9e08fdebb36105511f40643d8f1bfdf8b2814e2d00704c68b8745"
    hash30      = "0c5e9524f683090628abeb433675c896b423122022b655b8539215dd14a735a1"
    hash31      = "ebedaeb76942db46dac4fb2262dc4f08ed7f26cd69c7862e427a7b4932d59637"
    hash32      = "3a80042f2df3f9144947e7da22584f90dc2efd3efde839bb4404b333f1683a03"
    hash33      = "b62325cb55a05940952dc087d0ba9630ceb0376e346b0adfee09954c1771d0cb"
    hash34      = "e4bf7d48e941f562013b7031dae5add5e4d387a5249b2a87317745a968cb6316"
    hash35      = "a83115126804f139aff7bdc3b31ebb79c1d02d46b22d8420fa451db20175a1db"
    hash36      = "1e7a375ffefa6cb15b3b3df5198de177b49000eb86b2da1567595a4e881c48d4"
    hash37      = "6c6c743154057bf69791959c53106c88180f0f7011414f4e71d62b75901b1359"
    hash38      = "1a262ad2a2114b108f36bcc871c3e39c2704ce856aac41e12c7e164ce1ac6ac8"
    hash39      = "fbbc09cd8143546f6a997a5a9fd9b168ad94d2cd794e20a88ac1643aac1725ec"
    hash40      = "57db6b83b91845a59e1f98261edbee08d3f85a371708246595ac1f34c9c8e96c"
    hash41      = "045cc6d03c2918a29856862cf30284928dd0db1fff9ae67764f88b5ea619d7eb"
    hash42      = "edd3df70f72a22be4948d6e9c4987fe88eaa6fcfd0d41cdbc419563f76bb26a0"
    hash43      = "5599edca233dfde8626bc0607e3c78cfaff6983d7d032841c5e0fe5a8bbce9ae"
    hash44      = "c125a696a441914ba1c2e4b1b9c1e659026df6a7c1d0e03ac8c83b698282d52f"
    hash45      = "44e6b9979a28a253e47546dd22655e2195e2b7e5c33ed5bfc60f4682aef19b7c"
    hash46      = "bc3262e07b45d56dad49554baa1b3cfdbb2904129c7b45ead3b57047b4075b32"
    hash47      = "5bf791658ce2f8bb8a1be093699d71fc1e9440046e0bab1f3ce216992a61f48b"
    hash48      = "ae54d6360c648988c00082c7e57c823a3ceeaa88871f06adf3be05f19c3b3743"
    hash49      = "6b34067b98936dc636474a01b1d1f9fecfc41cedd6433ace42398f35574a5bfe"
    hash50      = "35a2e0258e25edee36ccc15ea1bb2554c05908ff600a511e2e85e0d637a6b8e5"
    hash51      = "1a2a9859dfa35f1addf11c06b43dba455803f3af25e8373cf1e05c02b3d2b798"
    hash52      = "994aafd39791d7d0d9219d2fa07f2324250074abbd6592a6b4407f67be849d2c"
    hash53      = "5ffc9266e5025808ddbeb44740289fe17ee9f36ce8edf912cdf7fceae066b90c"
    hash54      = "f93d06b9c9dd6ddcaed4feafb2b01255946fff8c4354585c5a26101b40926142"
    hash55      = "bb97056d44eff40bd87a93991b7882e45ab735908dd93877e161090fdd5d1c58"
    hash56      = "5dc5e79bfce5ba1eae90df89dd404b85e5331c4aa5c5dcca9a8ec3020d6a96a1"
    hash57      = "563c09d415a3c1269e541fb8e97e473cb91a6b33ddae353074cfc0b57d9678cb"
    hash58      = "04557173bc19f983bf83563ab0537061e19e9e37c5b76e78f74fda0a68defb93"
    hash59      = "b63a8a72418465670b5e62ead217f1af80818408d5ce752749ee7c92145afff8"
    hash60      = "300e5d1ea1dcbee0a40487da4b06df1130da73d59bd6b88b2c8e26c2e15f836f"
    hash61      = "0c46f1a87e0254d5dc162c143ab12cce7d8745f44ef31506662b031cfe3e5deb"
    hash62      = "98549be6c0fe35347ac6a17e9537317f2c1274afc7d1ccf3910013b9a061a8da"
    hash63      = "db150104fbe28dbaffeff833f020f2fb657ac6907245204352f91bf7008a6ea1"
    hash64      = "a0fb5a16cd11d5d60d3a08cb5779427dbb4fcca4ca25c047689321c79fa2c3d1"
    hash65      = "79b63655d2363fe274df733414e70c9e512d208d2c5c5c76eb0fd027843611c6"
    hash66      = "ed90d595db8d04c7e4937fc95800616e34f7e5879f970b32e2930b7eb1855500"
    hash67      = "5b0aec18e7aa55fba114416e0d87924e7b066a8f543b5a4fad784c84ed6a0824"
    hash68      = "ce27cd0fc5d33d560c072e651d20d7ebe55301953970072f3208fb6b25031dec"
    hash69      = "29dd23b4de674b88d8c232caac332296a67a2d3ebab783e6598369fe89979cd8"
    hash70      = "2f3cec77a28f2b26d50328c4271e0b08341f8ea6ee331f99cd6ed80472de47dd"
    hash71      = "a56c18202489dcd57f37bb9edbfae4b103b17b59aa62b77884cb0acefc688639"
    hash72      = "71bb52a1ec60772d6549e894d2727445a9d773434a14b5677c1b93b695ec664a"
    hash73      = "87bde6cf2792ec07bf88d74a102c4a2fc33d6b630ab1b200127317d1e9870860"
    hash74      = "b4d864565965f3e9b8d79e9a2f9633a48cd698720cc362910edfb6df94c99f74"
    hash75      = "0cb419a28bb00a7585bc5d5e7631c3fc2c053205ec930bdd0c455dcb99799a82"
    hash76      = "fe778dc46311602ab9a9da9151ab8145624d16fc5d7cfddc9572cfc087aa2ed7"
    hash77      = "2b1c97f8350b00080e4404731c5dfd4ca8917e4aa08e4b06ef89c0f5aff98c4b"
    hash78      = "2a24aebc2e7cf954dc81863252edcce177900cd0be34d1bda4380edc35bd0256"
    hash79      = "e9cd2a4a4917fbaf142cdd5d761ed3aadf53e25d55d6b9bd1cebe321ee74b781"
    hash80      = "d78c447915558a0442f5e9ad627dc4db1ac8a1a0b81538545070265f88e45d41"
    hash81      = "c4bce2b98b9ade75e7b256934f20e9d41a15bd0096d6caec946e0c17520b197c"
    hash82      = "0c50359d4a55ee1bebbc2e977339a0e124f4c11abfac4b1eaa2690a22887cea6"
    hash83      = "ca834243c2a211889d1280e3e657469deca53bde50f799f520d60c7d0b1132ff"
    hash84      = "c29c46811dac96eea9984287db5719fe241c6a0716c6c0dc68f05ee895e22c16"
    hash85      = "d563adf801be83972e49c0a238b4649e7799427da02bc559fc20ea416657454c"
    hash86      = "30c0b2250facc257f3a53177438a575ff8d38bc7d09d2e410c918c9969544411"
    hash87      = "445355637a6d0b6bf36d7f5ad6b84b32cf7c4924562888a21f7a44a57d8a1f24"
    hash88      = "2d39b3c497fa41bea4c961090e73f9001677ad124916eb125997550f2c3ea9e1"
    hash89      = "21626c3592c74ffb070607eb035a9232c5e849018c6e9bb0b238b0da19bf5393"
    hash90      = "c94d6dfaf2aaf287cee5f58fe40238b6b06e384f4e35c703630ba683bf33c654"
    hash91      = "9adc57efadf8f3a098b94a4b79209f4d773139ebb83bdf704cc24d3b3e6ebb4f"
    hash92      = "114ff8e3eda8897332acc0ed8cecd4a5f4d222894359eb38f8aeec150658643f"
    hash93      = "ef45e1aee821b2860cc18db05d3f5c9a4b0798dd1d7e12a535fd9e9a03fba0a4"
    hash94      = "55345d84c58be14208b63b4c7ff2cd9111731832bb632ee2a8fa79ae441c1cd9"
    hash95      = "47ac6dd6f698aa95a0a9881b20b1033866d603c78c2a1603ada67b42265af1a8"
    hash96      = "fe2f536b154dc707d063f8955951760d538e7b30411fc5880bad328db442e4c8"
    hash97      = "02ecdcc9fe976406f864f4a4de9dc6da07368df8376729d68ed47f95cb9de3f1"
    hash98      = "4641ec7919f95c922ae28b053e5ecc681697db219517451d56e9d7e07aa838d8"
    hash99      = "4fc61bbb6b758198c6074dfd6b6a7022d48bac24b2289c028b2971c7e486dc3e"
    hash100     = "8c1295341219710e3aaedf45493c64b2090cfa191fab5cfd6ceb8f720b996005"
    hash101     = "8a9b82594eff986bf0e4ec899348f674d909d15cb6688d33aef512b8ea02ef06"
    hash102     = "32e2119a44436e5c7c7f3f08fd6cdf490c92acb4a863c9bbfad8d57c34269f37"
    hash103     = "7b47f5b9328169a3dc6468b9c13bde61d27a800821336ecb27e4fe14f51904e7"
    hash104     = "8ca07ed84ff1566cb722e7b955880a6596fa5b6c34b635804b38178284056543"
    hash105     = "16184ad6cd46c8c5086ed0dd641af49c31151cbd8bb0f1a0d19dc0dbb6294f92"
    hash106     = "43bf9c6cb6a495fece910311c13e3bf292e30e05b8003dd9c635363647f84366"
    hash107     = "bdcc7787dee90168f17d096de699d37fc15684d913e747a2756fdc4f74bfbdf0"
    hash108     = "f3549a539b10215fff8eb7577fbf46b51329003b6fef8d5c8456691ff15d637e"
    hash109     = "99efe0bce0ef0a24d75861c9fb761f7f7de3bcc3eeef0523602447bf78da1c56"
    hash110     = "8479478150400d07bce9c3f2340976dde650b39005fdd03517f79a97581bf118"
    hash111     = "ec576ea80c32a90648e345cc48ebf33f2375213f5ce2192101594aa1310c6911"
    hash112     = "e0a744d692d7b6833027f6db80a189f29bbc08fd5f26a6ae8439b42e877c235f"
    hash113     = "0802638cd1c518794cf733aab486832d2c3df56c9b856b4f059325d88f70eb55"
    hash114     = "4baefa2a1d8729df83ba8507f6f63c57f847f2d318a381600fa44b9cddae657f"
    hash115     = "eb18b4fb56a58bec78a371572771262a190b0193eaa8adbef51e47cbbca55b76"
    hash116     = "29aafc3dcc38655a5f38f1d13b7e907ef8b296ba94ea744eaf67aa16b3963942"
    hash117     = "6578785736a9f4d9b93cbef5a63f8283630925e270ae4b72322df28ef85bd768"
    hash118     = "1f073c5c7b788efd7c33fff5734a2ed1d461b9ed0fa670f548e2e7bcb92bf729"
    hash119     = "b5c3224450489220258c4912488c7e93d0df2aacd3f2c75be8ae8f7d4aa39dc1"
    hash120     = "65dbd5442d8d5a85faeb0a3004eec00a95648b2316616f28890205be64d8551e"
    hash121     = "87d5efd2e8e3055f3a3806a862d5e42b27a6016d3edfc64b03d0200ab42175bd"
    hash122     = "f3bd328f434ff420da77c8210c7944180b3b7466539c573ea377bfd6422e50ae"
    hash123     = "b0c573b5db17802cc75f7697fbe24de2723420c55742914dae4998b6896ac4aa"
    hash124     = "cec046451cbcc138a3b958fef1473d4daff4ced7b1f0b97d6e376667aee48bba"
    hash125     = "ccc851bee74bdfbb6ab278cfd92e394c12cbfb8113054052fda991a81da95e5c"
    hash126     = "f8e663f67f33611063ff5a20158a001a15008d0c5e3eef04309a2a486c6bc567"
    hash127     = "911febfbec0adf57933a3882802e496222010786973de71de3cc6401fcefaca3"
    hash128     = "57cba4db77105f110d1129d57b0f9b8bd38f8a494d751663240b8386c326d7eb"
    hash129     = "40f94bfc7bad0f0a59678d25d501fb638b6fa2b955f38ae1af561134d935896a"
    hash130     = "135bda413afe2339b8807914165bdfa7b8fe75d6afffd5a175aa676c3d72143d"
    hash131     = "f75c66b1688b0a4b97d6651c6905f4141cf11e62b1de287de26234261f5a127c"
    hash132     = "c4b101b444f6a3a6e2066c2cda0d1a7ab59f894f03c92ec410efb2e3ec4f01ec"
    hash133     = "0794b11c76d520ec3c5597e7740876099c2863e7c7f94afbe80dd92f884b5cd3"
    hash134     = "15ff6dcef4ad2d751692a17c39584ecfd1a528b6a92301aca35f1641f5f5da46"
    hash135     = "5e96db795f2aeed7146dacfd28d5d26f0547c8845627d53b03cd1d02be4f29f9"
    hash136     = "be7fcaafc42c9dcc00ef125e7acead5767ea706526e8ed67501a4479b66f93b4"
    hash137     = "a586a7740cfc0b62fc91942a9bf54932ad90de14f7917f703658cc643dfcd21d"
    hash138     = "98fd7bb118ebf8c6095d06e2b3302f4702fb54fc14674f0f8bf3e308a9166371"
    hash139     = "5edbea7ead3308a7d6d73b4a2e242d3669d1857b3fdc431d74f1fd6025107ad2"
    hash140     = "ba2e6e1cc7024c5982d28e029177cc084d753595a113a13eb1f7e5beada63dd7"
    hash141     = "4cb9d1fb1f8817a47c02322bb4c73ebe53382eb168f22ecc3b1f9a4883836211"
    hash142     = "324560a879c312ee7ac067441f2ee74ab0374fe8a163fea36bed6c23032031a8"
    hash143     = "159de93b2ee3d534dd97b2b088acf60ffb71ed5fbf96187d4e727ab5da05f94e"
    hash144     = "722aa65c9be7cc5af82717485a7df3f53c48d0973a5736d79a8771ae596d9f27"
    hash145     = "5b502373d1c8f95c36ae66f9c0ca393ca8fd391096f400a0a09b8e1065e5423d"
    hash146     = "94f95255b8da7dec82700e6a1a9c57fd824a077ab7b6478fb66072fb7a7ad719"
    hash147     = "98cbbecd674a336cbb45049ed5210cc0d4cc422d3bd5132117c6d52b53cc9ed0"
    hash148     = "0acd7bf2b9e0a915da2a59c1a323865db8b8a4e975117b0d7cc6af4c0f953456"
    hash149     = "65d9004937dacb924bee2ffd722742a3dda35fc6698be2bc742b6a51ef797cc5"
    hash150     = "3380399bcb38ec7cacfdc276121139ec06125489be78e53cb182db9025585029"
    hash151     = "c3ba1a99d5545ffc98ba598e938829c8d78d487c1a6b374bfb313642c9922943"
    hash152     = "d5d1c8e27e0690629d5332ad361c22b18a68a7d1c1cd7a366084acef7846a85e"
    hash153     = "e0f103e71307dd15774d45fdbfa0d7ad89c2179caac2bbdf72defd565797cd5b"
    hash154     = "23875e23668b6931733a55c7d1d95380a0f5cd0e0edc75e96955103fab5b12f4"
    hash155     = "9698351e135bb6d47cda14cefa949ea48c9ae2232e7983af395a0e484b540f74"
    hash156     = "7fc581f87edb76a7c398faff0ffc6e0d076ed80edd0c6655fc066bfc12bd01de"
    hash157     = "d7dc4d2faee16dfce7b603750352c3570e91f71732c404c0a4d9b15d2fe86044"
    hash158     = "4623e11974a6c9ba10b5c735c09168d52bd2987357bb7a098bdc9ba67ec5d399"
    hash159     = "dbbb87a047bfb23e8549fcea574680a0c778af4023a7c2617fe451c0b14e2aa1"
    hash160     = "4b8650843b17ca041cb938094e7037a98508c71a5230fd8f5e2ce636611b7797"
    hash161     = "66f1ee496ae9599d78fade32e323c11feb873120e4e42cb51f7f87e5dc5372f6"
    hash162     = "13ac863560a759a5fff1fd69067b055c7e28b6abf352fe4754e6b46331795f0f"
    hash163     = "83ff8ff271fe0ca286cad30c78c9ab749995ff61dd5a5135efdb800ecf3d5547"
    hash164     = "296f764a7277232350c6380768e8c9b6087167d86ddf06666e3eb9e48e54cdd2"
    hash165     = "f4a5b1d6b6ee219890f851df430244bd99b31f30ead2d8337e25dc3e76352dcb"
    hash166     = "5905b6ccb62692b6eb28ed5b665c6a7f2f2aa459ce71c46fca06e2bafcd2b64e"
    hash167     = "ede95e5e1f647b722a7023d9f429058e275a693fd7e1cd2ed3f56077f9528c4e"
    hash168     = "638514bd4162d80a800cf4afb10bf076c8c69de85a2256f35e2593f9c00e5f9b"
    hash169     = "9c7b13806ee88957cf2dd49861dc4d383cbc8f9a3086e0c5c69481e31e847949"
    hash170     = "2bc47623734ee706b3b4fbcb156a331782a13df69947f0315b7e6a694ce3a14b"
    hash171     = "d62244a9751625bbdde3980952c0bd07494b9233993c8744f9abb0ba4a5e2105"
    hash172     = "8a95ac8cf92029a0d1bc8b1fd2a061fbd2a604c3c42f2e49a92c216f494b129f"
    hash173     = "a8246e10a76d9b9c6534bcc98f24049e21155bd119e94c835bacf108f825cf3d"
    hash174     = "7ef231bdd06cf3bfb938734eb8609563fe517b053d1358002c94cdad07c85a39"
    hash175     = "dfec0c6f2d0d3d9d496616de77d6f5d28b1d08bfab14a0adb383e571110322a0"
    hash176     = "b1007eab97246b15b2376d5c8e406a814729753f5809df5e43b73cf2c3f74e93"
    hash177     = "95144a40eb7f90ec1ce9dfe0c2843fff6b85bc7c4c1512f412a5b93e194b417e"
    hash178     = "b7dc9bc076afbc124f45164a8760b616f2a6b4a3c27fb160d62322746fd907cd"
    hash179     = "c57b73f52ed0f89e9c4ed5804141c9ed2eec664b739c7916a852f799e3c7232c"
    hash180     = "4e05fefccaf1ecdbcebb4274fee9e5be1065abe566aaa035653b29043a1bf453"
    hash181     = "91e56deaefdd424113ba29d7f79252a602261bb1a38a786453bab922c20645bf"
    hash182     = "5c87e14f429e0b7d9e8e90843bee74e25ec09529d4facec2fc6f26a1aebcd300"
    hash183     = "e02ec08a5e457111850c8dbefb99d51ec8c3279ddbfc761b99eb99443be68d0a"
    hash184     = "0586dcaee12f97bfe8c006512f2e0860efe3bc66a24e0d037e9dbf8bb9bb10b1"
    hash185     = "c8e0990584e802beffc73cc079da881b02c6f4b12482df244a419ae24929ada1"
    hash186     = "0d5d108a67691982087584ff53b2ac77538022b8f5deaa9f68ba3de9259d4693"
    hash187     = "2d930e7babe00659ff52cf76dbd6829611b76e578656c206e26447b9972c5734"
    hash188     = "eb7410eb9f7e1e674eaaf71859d270f638e1a9adf3f86fe4f2c21bc951965d72"
    hash189     = "8b5ffc3f67d1d7098e3ae029c651ec54897009a762645c666cd5c5121d9d4390"
    hash190     = "f327d20751841f79482fca4afb7039a00f66f6511fcf6b38665d7cae2b43962b"
    hash191     = "3d54cf9ab5160b605f65cff066988c14c431267008c4e64f6ae46d62543a71c0"
    hash192     = "e15b5470e16a3aa0a79e55edad6d962e2f3925f94f5920ffea6a4d4ab10562e0"
    hash193     = "9c29d07182db626ce1e3a08db27b74f6da833206c6a4f731e7ab7e998be36e0c"
    hash194     = "f84de820e3a3c7e4544383f351d715a42c8f5b7dd4255ed071e52f085f038115"
    hash195     = "ca7b8c2cb005f93e9021ebd348333207564b8ca194fc271f1588462f943b107f"
    hash196     = "711eef757ec8e96896aa93f0b6cc8fd09c11ba45a18ba17d7e50483d9f5cba75"
    hash197     = "ec29d458ccd072a16c80b60bdedfaa23bfe2afe44f62519f63d929f5dbabdf0b"
    hash198     = "d93009cca79981d351c1de414fe5bdf90a75d864aef38435a5e7ab57f65f0859"
    hash199     = "e18c3e5cc7de7633f3e89637bcdf08256b637e3743cbae3cb0d5d6d575bc929c"
    hash200     = "064540cf17859c5a55528510a35274d9405964c58e265e0956e42f57b9f52fb3"
    hash201     = "e799e2bb96caedc60214950e48ccf1b9a1c1904054edd7c663782e5d46b6ddca"
    hash202     = "c014f846fc186edc50bbbea5006aa8382de4b2a9f0c5ccb38b22b44a49fde86a"
    hash203     = "56d54a64a2326fc91c59e70252a0f8ccc6e5170a1a8724501edf698643e7c8d4"
    hash204     = "6bfa709eac661009af451fa76805f355f8060d28a4691bac5b0c7d3712c442a7"
    hash205     = "e14a675c6d68bdc26fb7ef878f85f767f9c7350477d3209555c6d0a93f6f7646"
    hash206     = "7ca26e13b8876f82d57a08b0133e644947e07476d71aea3fa0dae5e711dc3bb4"
    hash207     = "01c0b971249bf7f34eb9df35e9732ddfbb5bb92881016f99afa2396bce38f84c"
    hash208     = "2d3ff2b33a5898cea1c27319add7f13547c6542959b2832a18a459bc40033ab2"
    hash209     = "860f044dff8f364ec39ec6374a55fcf5a1506988eac84580b081cbe836a2a12b"
    hash210     = "c36b3d2d7501387e6427ef3d1e77b5744964f856d71f132c2e87a818e0f7fc91"
    hash211     = "5b03e9c591402ff3fc46a6d431384a7519ed18e2b73e5668104a723d48f5f66b"
    hash212     = "c1256636a4b7863ba71eae0de45e5d70f0a24a3f3ccda6f56f9fde1764c2cd57"
    hash213     = "339fcf6f181a2d328487bc01c3a532b4a5f6779bbfa9fffc6847b74960c706ad"
    hash214     = "6fd4ac7c7fe990430bbf925ed321f6cecf52b7f78e465712e4a2d211008dc042"
    hash215     = "9892274ccca52557558c4302644c01a69c9a928cff9d4c09bba9a87c9ee15260"

  strings:
    $s1  = "?compose@Normalizer@icu@@SAXABVUnicodeString@2@CHAAV32@AAW4UErrorCode@@@Z" fullword ascii
    $s2  = "?compare@Normalizer@icu@@SAHABVUnicodeString@2@0IAAW4UErrorCode@@@Z" fullword ascii
    $s3  = "?charAt@Replaceable@icu@@QBE_SH@Z" fullword ascii
    $s4  = "?compare@UnicodeString@icu@@QBECHHABV12@@Z" fullword ascii
    $s5  = "?assign@UVector32@icu@@QAEXABV12@AAW4UErrorCode@@@Z" fullword ascii
    $s6  = "?append@CharString@icu@@QAEAAV12@ABV12@AAW4UErrorCode@@@Z" fullword ascii
    $s7  = "?compare@UnicodeString@icu@@QBECVConstChar16Ptr@2@H@Z" fullword ascii
    $s8  = "?append@FilteredNormalizer2@icu@@UBEAAVUnicodeString@2@AAV32@ABV32@AAW4UErrorCode@@@Z" fullword ascii
    $s9  = "?append@ReorderingBuffer@icu@@QAECPB_SHEEAAW4UErrorCode@@@Z" fullword ascii
    $s10 = "?append@ReorderingBuffer@icu@@QAECHEAAW4UErrorCode@@@Z" fullword ascii
    $s11 = "?append@CharString@icu@@QAEAAV12@VStringPiece@2@AAW4UErrorCode@@@Z" fullword ascii
    $s12 = "?complement@UnicodeSet@icu@@QAEAAV12@H@Z" fullword ascii
    $s13 = "?build@UCharsTrieBuilder@icu@@QAEPAVUCharsTrie@2@W4UStringTrieBuildOption@@AAW4UErrorCode@@@Z" fullword ascii
    $s14 = "?append@CharString@icu@@QAEAAV12@PBDHAAW4UErrorCode@@@Z" fullword ascii
    $s15 = "?compare@UnicodeString@icu@@QBECHHPB_SHH@Z" fullword ascii
    $s16 = "?assign@UVector64@icu@@QAEXABV12@AAW4UErrorCode@@@Z" fullword ascii
    $s17 = "?compare@UnicodeString@icu@@QBECHHPB_S@Z" fullword ascii
    $s18 = "?compact@UnicodeSet@icu@@UAEAAV12@XZ" fullword ascii
    $s19 = "?build@BytesTrieBuilder@icu@@QAEPAVBytesTrie@2@W4UStringTrieBuildOption@@AAW4UErrorCode@@@Z" fullword ascii
    $s20 = "?complement@UnicodeSet@icu@@UAEAAV12@XZ" fullword ascii

  condition:
    (uint16(0) == 0x5a4d and (8 of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

51c64f67-b74d-438f-9312-e3267cf203b7

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion