_20161130_014d05921a7814a22eb338c401ba1363_20161130_01acc75ec859_151

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files 20161130_014d05921a7814a22eb338c401ba1363.js, 20161130_01acc75ec859a7c28bee93e0313fa938.js, 20161130_05019d0e29bdef6174a1b02a7526bae3.js, 20161130_08a2010c2b605a10d97e4504cbab8ac3.js, 20161130_0a07b489183e9f81b854f18ae770cdf2.js, 20161130_0e59cc7e93761414374dc17551450073.js, 20161130_0eea870fbfa0fc8ce1cd65fb85e8e0be.js, 20161130_0f9253b2373d11ed5355f56a70838372.js, 20161130_10b64a04fb3e402fa62107c7843041fe.js, 20161130_13126b934ca670d556738b4201d40c8d.js, 20161130_1324ee2a567d35da3fb704cc27ea0761.js, 20161130_132cfb9cf6a088ada328d9a496c8a36b.js, 20161130_1339c2bc8c6937a3d9ccc1f7d6076743.js, 20161130_136184d492390d706236ecd00dc11e78.js, 20161130_140e77afea96357de9c87761885afa8d.js, 20161130_141e4738b9604117860673d99b6662e6.js, 20161130_16aca84d05556e134ece20abd73c1bd3.js, 20161130_188dab7167fb09b8a17998ec4894a995.js, 20161130_1a3c746b14fe17ff527a9026bf1f90c0.js, 20161130_1a79491216972e8a2431a2a6b16fee25.js, 20161130_1bccbd2331f18a24546f638a538ce1b1.js, 20161130_1d5f8e83ad755808ab44f76c9a29965b.js, 20161130_1dbca692322e7131f44b20f8237e4604.js, 20161130_1df59acd0b0bee916e2f7a2d262be22d.js, 20161130_1e1396864dc93af205c4aead53593b25.js, 20161130_1e64f2ec5408a6260a6fb4dda7601855.js, 20161130_1e8c103e7a470747dc6a4b5f4b929e51.js, 20161130_219dc53462eb369eeb0da50b11b6a988.js, 20161130_21c5295dfccbfe629e4fc153d4cc6941.js, 20161130_24f74e9f3462fbc3ccf860650f33ebee.js, 20161130_250581aa092b275c94a064e42f5cf28b.js, 20161130_2775e3fb95cbbd436dfdfa7006554a68.js, 20161130_281418d607410de31a93e032302eade1.js, 20161130_28fe5e61a741cd3c9d74338db78e5024.js, 20161130_2aaa57ff56273a5809fbf5d87f09d0d3.js, 20161130_2b8bc1b1d48d7f5d3444b45c636860ee.js, 20161130_321a1880bf96c2dd819588927a2e6597.js, 20161130_330c202976814a995d86ddbb1a650a66.js, 20161130_337b8484154d5b147aadced1f24392f1.js, 20161130_33ed4ff7631cf8d30274e83a94e39480.js, 20161130_35cde3fb7ffac81d471e1d8bb91ffa0b.js, 20161130_35dcec5666806c9d361a8b74dbd02108.js, 20161130_3621374caae4233f3ba2f8e44e9f78e6.js, 20161130_362ebd9da07440e1ce8da7411d661345.js, 20161130_36a82b73d1301a37b416bccd8aa6215d.js, 20161130_37dc23571ab422fcd1de18a886ac83e6.js, 20161130_3812748bbe25f4e0c8d4546ac3a8e815.js, 20161130_38b1301d09f14336b3ea411e1a177e5c.js, 20161130_3917ff24459b2597772ca568450e0dc6.js, 20161130_397100c738f6da6750bbc787021bc5fa.js, 20161130_3babc44d7b38cb26f50f85466879fdc2.js, 20161130_3c4174106a62c55d0a9962c085e5b280.js, 20161130_3e0df1879732f6471bda2bceb28d44a8.js, 20161130_3e174a0dbe18b98813926fa013f350d4.js, 20161130_3eb461a7cceb83e67123f3fd83a7eab9.js, 20161130_41388cc21c2686e17aece757ab44796b.js, 20161130_41670112de87fa2e8bac28b26a57ff62.js, 20161130_4177060b168014e7e799d961516c066d.js, 20161130_42b4121b3115561d679499160e148af0.js, 20161130_43b574404f32948a8dffebf3f3339735.js, 20161130_499ce32ec7ea88ca6a158866849d007b.js, 20161130_49ac00c97cf9354a36df3e6b42e5205c.js, 20161130_4a805954bf92a7e2586b140434abf08f.js, 20161130_4abaed165ec7047af8430ac83895b29c.js, 20161130_4c259d47ffa6fc2ffab6bc3727e747ac.js, 20161130_4c3479662bcebf5ece719350f77c90c5.js, 20161130_4c4f194913dfb9fe812b5c999e0ae9d4.js, 20161130_4e660c52c8e8b2480f7463fb96fc3687.js, 20161130_4ec867316d72a2f7ae3a8db3c69d24c2.js, 20161130_4f0a54d65276ba04695ca6cae3dd0015.js, 20161130_4fd475092351301bd9c411951088ebea.js, 20161130_50ce7f52e374faefdb3899519ef7725d.js, 20161130_51d74f10cb3ce1b463dba83d698284c5.js, 20161130_526e6e557033a0588570ff7841aabb51.js, 20161130_52bec25cdc331b46f5d1bb8f09df5678.js, 20161130_54cf101acf8b87f47a81d23ff031b7b6.js, 20161130_55503ab97d51039a85c9e43cb9af40f3.js, 20161130_55fcfc8188f5522fa6fa4f2dd11dec2c.js, 20161130_568311e2bc14d456cbc4a08a72582329.js, 20161130_58bcedb83f87bcbb71d056455f67f393.js, 20161130_5a05bde3b812ceaaccbe5b95ba4e5d25.js, 20161130_5b287c1d4eadc9e82c0509f132e5faae.js, 20161130_5b8b0b0850cdd5b22a539f86dc985a73.js, 20161130_5e796414b50034fc738e2a08c7122803.js, 20161130_602807331c2d16de74711983b95411cb.js, 20161130_62384dadb59f0d9be692a3675669765e.js, 20161130_63178a1e75886ada4adb8ed64375a409.js, 20161130_64376a2c7e6955435cd4a53df7035baa.js, 20161130_660b1e80999f25f2d2fc00e2ebba68ff.js, 20161130_673f843d9ee6f2db2f5e53fcebcd55a6.js, 20161130_67814223ae6b9879f300baf6a701e1f4.js, 20161130_69c2c1ecf5f7518002701c288433d20a.js, 20161130_6d55572c653ad8bcb3173fe11a96a7bf.js, 20161130_6ee170b74a4787b7a0655599551656f0.js, 20161130_6ff37edf7a4996e5c7af48528c55e7f4.js, 20161130_705255bb2ba1b0be43e256f61b7ec13c.js, 20161130_7225fdfec49b477b45e7bce17f957adb.js, 20161130_73db86dbe8762de674d2daa3a7d7117d.js, 20161130_742e6ef36ea3f7f38ad22562f3c07bdb.js, 20161130_7493f91d3182fde0da44af5e6f2f3f4d.js, 20161130_7558d80802001e5a820a043240c27d95.js, 20161130_770cfdc2af1e7143f55b4ac36dc01c77.js, 20161130_78ce9c084bdaf1f4dbc370cd1251e222.js, 20161130_7a01fcea1a6c565dc22f39f6f0dea295.js, 20161130_7b50fafa2e30c1027602d0e497281276.js, 20161130_7dd77a4c944f12e58183a11cbab2aba0.js, 20161130_8104427f81c197f6771c83ffb5ba2e72.js, 20161130_81b8814a682cd064eea06fa5d3584770.js, 20161130_822341c37e6a995dde47a44bea041e47.js, 20161130_8339e3b884dc3cb53b5c8881f6e0eaf5.js, 20161130_83855c2017221dc9bb73973a24753c29.js, 20161130_83dfd22d505f698a071542ce65d4c878.js, 20161130_848cf82f66b948ae856903c399305c6c.js, 20161130_867ff172b4feedb49b4c5c658575f524.js, 20161130_869f69d0ff909f47c4a75fc0dc917246.js, 20161130_88e95a0b046a63b8f141885c629bbdd7.js, 20161130_894a1139cd5c1038df150c3123647bff.js, 20161130_89f5f84e840bbacd3ed03d12a9c87fd3.js, 20161130_8a0d73f85576a43a4190f71550087bd5.js, 20161130_8a5577418caae172b2ec08708659e11c.js, 20161130_8a8c8b2e6d3f88582542d5fb9cb9b076.js, 20161130_90d59197fbe708e4aca6ca225f94fd3f.js, 20161130_910c15a6549c969cdfaf20355ce84b43.js, 20161130_9230672fcf8a050561645bd116dfcd36.js, 20161130_92a987b67b711a8a08f226443dea2b31.js, 20161130_92c3742c6789cad08e2e0a63bbcaab0e.js, 20161130_92e2ff9cec70556b700a2ce8fecf98c2.js, 20161130_92f3eaae3281a8bd96aed1d7d5f2724a.js, 20161130_949604d33b87223046249a5dec78edd4.js, 20161130_960ab292880295cd48e79c6be419e13d.js, 20161130_966389d360a7dc1e84f0c423e5f4ae40.js, 20161130_97b8f2aa59e905d0d80ec22b42b636bd.js, 20161130_97d4efdb82e9e2a05796bbaef3215929.js, 20161130_98291f09cf43df2913cc0a81ecc1edd8.js, 20161130_9ad38bc580a6c505683e4c91a68d7b85.js, 20161130_9b2f1996aabdbd0821e4e3dac9ea3704.js, 20161130_9c0b1ca6cb354944933212f91c8e1dbe.js, 20161130_9d61c3569307e0490271244c78c094d9.js, 20161130_9dc19b33c666fc012609220cbec40c33.js, 20161130_9e2ff312ebe45ec6d67da2f57ec51b7a.js, 20161130_9fd33b149c368e2f61b46df7d66104bd.js, 20161130_a1e583f793a5cc58b8202905ac95da91.js, 20161130_a842c72e52fec0ea7f250f1d4e71ce07.js, 20161130_a963cd9b24c69e044cd4c1040ec7be6b.js, 20161130_aabf5a10dbed5ee98f2c68add673955f.js, 20161130_aac6fd95c2ae066cf29eae5ed61446b4.js, 20161130_ab268ab780427befbcf02e5549be2969.js, 20161130_af0c1cd9f4791bfbb34793f54e51dd05.js, 20161130_b088e05182898c19ca1f9ec1d163f538.js, 20161130_b1655a08195827647dcb20e2a03ecfae.js, 20161130_b3ebca46b97fd07ff46e310a806654cb.js, 20161130_b549b1342f33beb6cc3fc73e1fd31a06.js, 20161130_b5674d9ce67637aa1a4fbc17bbc3f394.js, 20161130_b74346fe11eba2cd34758e203542e2fe.js, 20161130_b796814e4bfe6f6af147cd1e1591b877.js,...

rule _20161130_014d05921a7814a22eb338c401ba1363_20161130_01acc75ec859_151 {
  meta:
    description = "datamaliciousorder - from files 20161130_014d05921a7814a22eb338c401ba1363.js, 20161130_01acc75ec859a7c28bee93e0313fa938.js, 20161130_05019d0e29bdef6174a1b02a7526bae3.js, 20161130_08a2010c2b605a10d97e4504cbab8ac3.js, 20161130_0a07b489183e9f81b854f18ae770cdf2.js, 20161130_0e59cc7e93761414374dc17551450073.js, 20161130_0eea870fbfa0fc8ce1cd65fb85e8e0be.js, 20161130_0f9253b2373d11ed5355f56a70838372.js, 20161130_10b64a04fb3e402fa62107c7843041fe.js, 20161130_13126b934ca670d556738b4201d40c8d.js, 20161130_1324ee2a567d35da3fb704cc27ea0761.js, 20161130_132cfb9cf6a088ada328d9a496c8a36b.js, 20161130_1339c2bc8c6937a3d9ccc1f7d6076743.js, 20161130_136184d492390d706236ecd00dc11e78.js, 20161130_140e77afea96357de9c87761885afa8d.js, 20161130_141e4738b9604117860673d99b6662e6.js, 20161130_16aca84d05556e134ece20abd73c1bd3.js, 20161130_188dab7167fb09b8a17998ec4894a995.js, 20161130_1a3c746b14fe17ff527a9026bf1f90c0.js, 20161130_1a79491216972e8a2431a2a6b16fee25.js, 20161130_1bccbd2331f18a24546f638a538ce1b1.js, 20161130_1d5f8e83ad755808ab44f76c9a29965b.js, 20161130_1dbca692322e7131f44b20f8237e4604.js, 20161130_1df59acd0b0bee916e2f7a2d262be22d.js, 20161130_1e1396864dc93af205c4aead53593b25.js, 20161130_1e64f2ec5408a6260a6fb4dda7601855.js, 20161130_1e8c103e7a470747dc6a4b5f4b929e51.js, 20161130_219dc53462eb369eeb0da50b11b6a988.js, 20161130_21c5295dfccbfe629e4fc153d4cc6941.js, 20161130_24f74e9f3462fbc3ccf860650f33ebee.js, 20161130_250581aa092b275c94a064e42f5cf28b.js, 20161130_2775e3fb95cbbd436dfdfa7006554a68.js, 20161130_281418d607410de31a93e032302eade1.js, 20161130_28fe5e61a741cd3c9d74338db78e5024.js, 20161130_2aaa57ff56273a5809fbf5d87f09d0d3.js, 20161130_2b8bc1b1d48d7f5d3444b45c636860ee.js, 20161130_321a1880bf96c2dd819588927a2e6597.js, 20161130_330c202976814a995d86ddbb1a650a66.js, 20161130_337b8484154d5b147aadced1f24392f1.js, 20161130_33ed4ff7631cf8d30274e83a94e39480.js, 20161130_35cde3fb7ffac81d471e1d8bb91ffa0b.js, 20161130_35dcec5666806c9d361a8b74dbd02108.js, 20161130_3621374caae4233f3ba2f8e44e9f78e6.js, 20161130_362ebd9da07440e1ce8da7411d661345.js, 20161130_36a82b73d1301a37b416bccd8aa6215d.js, 20161130_37dc23571ab422fcd1de18a886ac83e6.js, 20161130_3812748bbe25f4e0c8d4546ac3a8e815.js, 20161130_38b1301d09f14336b3ea411e1a177e5c.js, 20161130_3917ff24459b2597772ca568450e0dc6.js, 20161130_397100c738f6da6750bbc787021bc5fa.js, 20161130_3babc44d7b38cb26f50f85466879fdc2.js, 20161130_3c4174106a62c55d0a9962c085e5b280.js, 20161130_3e0df1879732f6471bda2bceb28d44a8.js, 20161130_3e174a0dbe18b98813926fa013f350d4.js, 20161130_3eb461a7cceb83e67123f3fd83a7eab9.js, 20161130_41388cc21c2686e17aece757ab44796b.js, 20161130_41670112de87fa2e8bac28b26a57ff62.js, 20161130_4177060b168014e7e799d961516c066d.js, 20161130_42b4121b3115561d679499160e148af0.js, 20161130_43b574404f32948a8dffebf3f3339735.js, 20161130_499ce32ec7ea88ca6a158866849d007b.js, 20161130_49ac00c97cf9354a36df3e6b42e5205c.js, 20161130_4a805954bf92a7e2586b140434abf08f.js, 20161130_4abaed165ec7047af8430ac83895b29c.js, 20161130_4c259d47ffa6fc2ffab6bc3727e747ac.js, 20161130_4c3479662bcebf5ece719350f77c90c5.js, 20161130_4c4f194913dfb9fe812b5c999e0ae9d4.js, 20161130_4e660c52c8e8b2480f7463fb96fc3687.js, 20161130_4ec867316d72a2f7ae3a8db3c69d24c2.js, 20161130_4f0a54d65276ba04695ca6cae3dd0015.js, 20161130_4fd475092351301bd9c411951088ebea.js, 20161130_50ce7f52e374faefdb3899519ef7725d.js, 20161130_51d74f10cb3ce1b463dba83d698284c5.js, 20161130_526e6e557033a0588570ff7841aabb51.js, 20161130_52bec25cdc331b46f5d1bb8f09df5678.js, 20161130_54cf101acf8b87f47a81d23ff031b7b6.js, 20161130_55503ab97d51039a85c9e43cb9af40f3.js, 20161130_55fcfc8188f5522fa6fa4f2dd11dec2c.js, 20161130_568311e2bc14d456cbc4a08a72582329.js, 20161130_58bcedb83f87bcbb71d056455f67f393.js, 20161130_5a05bde3b812ceaaccbe5b95ba4e5d25.js, 20161130_5b287c1d4eadc9e82c0509f132e5faae.js, 20161130_5b8b0b0850cdd5b22a539f86dc985a73.js, 20161130_5e796414b50034fc738e2a08c7122803.js, 20161130_602807331c2d16de74711983b95411cb.js, 20161130_62384dadb59f0d9be692a3675669765e.js, 20161130_63178a1e75886ada4adb8ed64375a409.js, 20161130_64376a2c7e6955435cd4a53df7035baa.js, 20161130_660b1e80999f25f2d2fc00e2ebba68ff.js, 20161130_673f843d9ee6f2db2f5e53fcebcd55a6.js, 20161130_67814223ae6b9879f300baf6a701e1f4.js, 20161130_69c2c1ecf5f7518002701c288433d20a.js, 20161130_6d55572c653ad8bcb3173fe11a96a7bf.js, 20161130_6ee170b74a4787b7a0655599551656f0.js, 20161130_6ff37edf7a4996e5c7af48528c55e7f4.js, 20161130_705255bb2ba1b0be43e256f61b7ec13c.js, 20161130_7225fdfec49b477b45e7bce17f957adb.js, 20161130_73db86dbe8762de674d2daa3a7d7117d.js, 20161130_742e6ef36ea3f7f38ad22562f3c07bdb.js, 20161130_7493f91d3182fde0da44af5e6f2f3f4d.js, 20161130_7558d80802001e5a820a043240c27d95.js, 20161130_770cfdc2af1e7143f55b4ac36dc01c77.js, 20161130_78ce9c084bdaf1f4dbc370cd1251e222.js, 20161130_7a01fcea1a6c565dc22f39f6f0dea295.js, 20161130_7b50fafa2e30c1027602d0e497281276.js, 20161130_7dd77a4c944f12e58183a11cbab2aba0.js, 20161130_8104427f81c197f6771c83ffb5ba2e72.js, 20161130_81b8814a682cd064eea06fa5d3584770.js, 20161130_822341c37e6a995dde47a44bea041e47.js, 20161130_8339e3b884dc3cb53b5c8881f6e0eaf5.js, 20161130_83855c2017221dc9bb73973a24753c29.js, 20161130_83dfd22d505f698a071542ce65d4c878.js, 20161130_848cf82f66b948ae856903c399305c6c.js, 20161130_867ff172b4feedb49b4c5c658575f524.js, 20161130_869f69d0ff909f47c4a75fc0dc917246.js, 20161130_88e95a0b046a63b8f141885c629bbdd7.js, 20161130_894a1139cd5c1038df150c3123647bff.js, 20161130_89f5f84e840bbacd3ed03d12a9c87fd3.js, 20161130_8a0d73f85576a43a4190f71550087bd5.js, 20161130_8a5577418caae172b2ec08708659e11c.js, 20161130_8a8c8b2e6d3f88582542d5fb9cb9b076.js, 20161130_90d59197fbe708e4aca6ca225f94fd3f.js, 20161130_910c15a6549c969cdfaf20355ce84b43.js, 20161130_9230672fcf8a050561645bd116dfcd36.js, 20161130_92a987b67b711a8a08f226443dea2b31.js, 20161130_92c3742c6789cad08e2e0a63bbcaab0e.js, 20161130_92e2ff9cec70556b700a2ce8fecf98c2.js, 20161130_92f3eaae3281a8bd96aed1d7d5f2724a.js, 20161130_949604d33b87223046249a5dec78edd4.js, 20161130_960ab292880295cd48e79c6be419e13d.js, 20161130_966389d360a7dc1e84f0c423e5f4ae40.js, 20161130_97b8f2aa59e905d0d80ec22b42b636bd.js, 20161130_97d4efdb82e9e2a05796bbaef3215929.js, 20161130_98291f09cf43df2913cc0a81ecc1edd8.js, 20161130_9ad38bc580a6c505683e4c91a68d7b85.js, 20161130_9b2f1996aabdbd0821e4e3dac9ea3704.js, 20161130_9c0b1ca6cb354944933212f91c8e1dbe.js, 20161130_9d61c3569307e0490271244c78c094d9.js, 20161130_9dc19b33c666fc012609220cbec40c33.js, 20161130_9e2ff312ebe45ec6d67da2f57ec51b7a.js, 20161130_9fd33b149c368e2f61b46df7d66104bd.js, 20161130_a1e583f793a5cc58b8202905ac95da91.js, 20161130_a842c72e52fec0ea7f250f1d4e71ce07.js, 20161130_a963cd9b24c69e044cd4c1040ec7be6b.js, 20161130_aabf5a10dbed5ee98f2c68add673955f.js, 20161130_aac6fd95c2ae066cf29eae5ed61446b4.js, 20161130_ab268ab780427befbcf02e5549be2969.js, 20161130_af0c1cd9f4791bfbb34793f54e51dd05.js, 20161130_b088e05182898c19ca1f9ec1d163f538.js, 20161130_b1655a08195827647dcb20e2a03ecfae.js, 20161130_b3ebca46b97fd07ff46e310a806654cb.js, 20161130_b549b1342f33beb6cc3fc73e1fd31a06.js, 20161130_b5674d9ce67637aa1a4fbc17bbc3f394.js, 20161130_b74346fe11eba2cd34758e203542e2fe.js, 20161130_b796814e4bfe6f6af147cd1e1591b877.js,..."
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "40f9eaf847e9dfcd81e4029eef5583053a1be139cac437c8bb8fba9d5de63d47"
    hash2       = "6e045cab00eb721b43474168b5415d9d164677b186e62cb71055d1e14aca43ee"
    hash3       = "fc348ebef1ec631d4c6206b625cd105332d208aba17ef99ac6fc45dff8306559"
    hash4       = "10c31004bb706d785cbf4ce2f3699f5f73187a34519fdaa6d19d2aa88bc3b569"
    hash5       = "0404dc68b0a0fb93d69af4c3ecf380eff1743afa60a10d74b997e4fa088d7826"
    hash6       = "c88706e23eb72d2a753bee8f6b6d3f8f01587749fee6fc7a1cbad9946520f358"
    hash7       = "3c9cef575baf8ef5f88dfc3167fddbf95e50ab2a4cb7cb27a0a97257c6fa5e32"
    hash8       = "57e63455b02e6c2db790e94eb6e0ed0ae12f300adf1b53d0292d8aa52f9259a1"
    hash9       = "00d97cf21d83fbcff2611d75adb1208005bb09ee12cc4898f32b9562ad5e0765"
    hash10      = "b0926f1f1f722aa0bc58df45e20ff8140a1016ce8646aa8580e9938087e3fc06"
    hash11      = "ffca68cf7dd28f4653561bfcd1c96ff0a52482bb9d0d3e425086fad80389f074"
    hash12      = "77bde05921512aa97ef7a669bbee7ac248be8de3b9e1898413604b400ad791dd"
    hash13      = "f8d4c3b5fa718ebbd72e18b255c591e4dbd4f78ca483ae0839ad83020352128d"
    hash14      = "fe42cbaf2b8b0b16735eabbeca83ff7f339bd636276ff4a2d273ba82dfa9c28e"
    hash15      = "47bd2da6f65e1fd3f74bf5f603f209281ab5f8104d7e24fc9911cac41baa9284"
    hash16      = "45927749b7e6135c6378a1b732c407ecd7e9c70a38faf729b4959c4946d21b74"
    hash17      = "def71925f83843c9b0c3ca504611c128039beaa85d9c24eebf9fcc90632e61ac"
    hash18      = "bb47eea3a5e198a9ce4c237ea5d09cfa26e9b31b782a399fbdb08fe080e7bf72"
    hash19      = "bf99a5dcbd0603ae5a9eb511220073f5befa600a218a463dc80e4c20cd13294b"
    hash20      = "75af06f7457ea47c71805cac70dbe200520d1f3b6ee64fb276b6e08650e4b99f"
    hash21      = "2c4cc3f87bbc3f93faf67265a82db71e146d2d21bc971e8974956e6a452e94df"
    hash22      = "634f0e13f459a84caf0586e1421d7f96da6a567fc4ff7e514bb41c608d9ff7a0"
    hash23      = "848cabd0d5c96380c650696c12305750facd8bb51e2be15a1d4d41ba7238361a"
    hash24      = "e7eadc3c511901ab59af890fb5077dab4d7a7ecd49da861b5ec74e4ce64d1bce"
    hash25      = "8cc8998e365ce557ca9b33adc5fe6165cf376685c3f714089899e7c00c41dcfe"
    hash26      = "85889d3fe816bf63f6540567e1dab1be0a668c021f86051b1dbd8c161042088e"
    hash27      = "1b772fc260411aac53d4a0bf58103430942db44496305e96c4586f0c6754a5d1"
    hash28      = "7926935b7e7662ee20d6223e075b32baa2f5fc00e12018c0fcac35de1d7eae3e"
    hash29      = "1d9f579ba656866a3fac6d80cf9c41beafb0a1535d193c94946a994f0d611f2e"
    hash30      = "09d7e1b729b36d67b21c50690aa869e9538969e3521200c80723961d7aa5daf4"
    hash31      = "aa95a4e18a10db1a45efb083b054e2ba3ec7e5a6c280045bc062b85b33da99f6"
    hash32      = "e73baeb6c3fd38db4806c529861f5410e18635514741b2163c35dc7ecf0c2add"
    hash33      = "17e5b2b04bb3324e9e34b18e4d73adad2ba4cf5f164710ff22dde91264cd2590"
    hash34      = "ed0fc823909e063a3c96f9ddd9d8c02abfad8c928f58828716144449536aeca2"
    hash35      = "e89177c688d367b2f4144d3d831716e73276d3b1c72b2f84f4d1e63d6a40652f"
    hash36      = "348fa3e139a5971e43267c762ec1b59f79462f0a1b1398132695dcf92fb4c339"
    hash37      = "da93dfd3e7b864ad16fb76b85a5e780e52e7a035704a6e9902c60e379aaea960"
    hash38      = "036e3ac1e564dbeb3d1b9948a42c83bb59f7eb107c6720bc20ee9c4728121109"
    hash39      = "dad66a6a7d958ea8215b02bc204e3a1a85d1dd10fdbe067fc4c52054146828d2"
    hash40      = "a060ffc90e13e28cb2821a25990e963d2c50ac3eb9c74e6f049296908efd8cf9"
    hash41      = "066b57a348279d73ce20770c95778e61281ae920fc6c00f8ec2bf2696c9ce4b7"
    hash42      = "a4000ce2ed81cfaa8f3b2f6d65cfe2998afb7ac67eff1ec7c0f8e1fa13d60800"
    hash43      = "cdc35019bf502ac63b8226659a590166ca2b4771224e0a2c855dd3c13271eab8"
    hash44      = "a251dadd466ed34b39885000d7e8067b3deb6828338596feda7e9c88dcd557c3"
    hash45      = "1d2ffcc8e5dd5ac083bc9a2b0fbb92be5bbabdc181be026feece2b505f983701"
    hash46      = "bcd22620534120c4b2d86db466bf11470c0b1da94a8d61a87c549223ef224fb6"
    hash47      = "23c7657a4a83398e398025687410f98e6a69df62c432de2aaa3679ad12520573"
    hash48      = "240dd5bd6164a32bafd9b0516988eee2a5bf5aa43b1575317432c26e1f665992"
    hash49      = "522f0afb167f198de3c8617bcb312307ebfc01168e567697b2c176ba5ffbfdf4"
    hash50      = "b4c85e099b107ebbd8e007be265b9a7391053e447343565edd77bba9f1b7ac29"
    hash51      = "ca7e502e5f2d245226e92e8e277f413a1306863e3d6c16a1b1b10996650dafad"
    hash52      = "26dc660770dc675172118b3549ab2067b566f75ef7a55d58e2a20bbdab225062"
    hash53      = "265caa09fea5dc88f9138d6fc87d6aab02c202b3d7720c4b5e37d4fceb345fc5"
    hash54      = "d156d06c2015960c0cdc0bedae6edb5a2c826d6488661fc9ac23a7e3bf4bfd43"
    hash55      = "f3e4053f65abde0b3085bd5f241ecf358367a0b4e86a3cb5b94650940f177de9"
    hash56      = "947044ab049eae949903e267320e2026f4fa007627d3f26d1365b4674882e698"
    hash57      = "35b1a61bea4d6a06fb42db976712fce2129197a6f115be804651e19aa6769f50"
    hash58      = "0b5217d4fb2250162d726bb905fe1efe8044f845f46c451d4f160e20991b24dc"
    hash59      = "b29e2a58c1c390441d5b3528bdc9c68d509489a47adb1c9dacb7d224c99a96cc"
    hash60      = "89e83e996976018ac7db1ed00519ccd681ef6e6122e836f06da04bb0bc6c17f0"
    hash61      = "0cc42d5a03acfb0ca6d709d448301f28e3415f4e38726526c95a83da2c3f72e1"
    hash62      = "ee42cae08ff6692d69d3480f0c2b36aadc61cbc91b2265d954ef97f208eab0d7"
    hash63      = "6d50412cd9dfb311f605359801274c397be6e0bc60d5d6d0c1c198abb1ba8fc6"
    hash64      = "f10123685b62c51c28bd6c0eddf1403029762056bccee1ea8af1d2bdecc5667a"
    hash65      = "c566a95b7c57853e0c24c25f1a58b19542dc8970b2fc9d3265c9cda6a8050d84"
    hash66      = "cebb320f230f2c9797d7e0f0d32c177dcd2851e5f0244924c93e6db118448852"
    hash67      = "6f627909ca5a9fb1296e1b87d58c520cd79be166e96a80bd8e12f610dfb08eaa"
    hash68      = "bb4c3f87a5366cef48f5bce1194631e10c6ba7bb297118328152220e254a8e58"
    hash69      = "36b5bc33848778f807eb295af81427064dccf764dbf17645b1a7e2daae07749a"
    hash70      = "e7def4eae4f42f8ad707efe71818d366e1245dc6adc89ac0fb373bf9fbdc4168"
    hash71      = "b8b43411c22dcb0a7abc3d05806631317c1e8bfde29e5c83533c7cfd8ae1f3a8"
    hash72      = "85c3f2621a09b2201fd7f6ef0aefaccb27d681d15aa33b88aefb489e01fa100b"
    hash73      = "5bdaa5d727e63510c565212d15c5cfc2932799389d96d725496f6634993cd182"
    hash74      = "ba5cdda2e0c9c79d6817c9871dad0ceeb073103e95d8e6cb7e393b81b094fcd4"
    hash75      = "422a49add7842fad22ebfc6ca79a6b9a3fac161439c590a8e8fb43d34d2cde2b"
    hash76      = "86a3619d8491d0a786e99db0ef312cefc500f542fc742f1ba0c55e925aec5d12"
    hash77      = "4e437256cd4b9f1096a9755a86a9af59a464eccfb6663a0c31661dc3ba3ba2c7"
    hash78      = "8e3fc79a4494b8cb778a3fe153f332e3ac495f61f7ce3fc3db0d14976bba7230"
    hash79      = "1c0ff7c786f8fa24a4ef0bb3fc9465f1b2e77f8e488c089fe50be1fd049b4c08"
    hash80      = "fd9f5002b444d88daa8f45e9b015db9c9610e4aee0181ac847ab7ad1b94e440f"
    hash81      = "08337323423a4d1c653f6b86aedf0b33a7bb0e8605b536d20f1d009c9065c9f0"
    hash82      = "84077dc619928cbb5f6742bb478b68dab0ac80e8ddcc494acc01348bbb9a2172"
    hash83      = "400d49a2d56e524a70bf4a87bd2efd6815473422acc5c01bee92b352dfc3a2c0"
    hash84      = "79174e9a4651b754b19f9331a0144a566183b631ecf8517caabbf3ee6a90afc9"
    hash85      = "7dadab4584ecd16ff8a4e535c06d4088cca7f946a297e011868782b3b123cd9c"
    hash86      = "855b5ca328bec86ee94d1226c038242b76e21cb3a1a645fb3efd610fc8ad8ad5"
    hash87      = "20bf93f873f6762bbd4e74b09218144e6281c5ef7bd54f439e492c8817092d45"
    hash88      = "7dbac3b6ecc85eb1e324315f5e12f7f6ab8955815b7119452afd7a179f3ca0c3"
    hash89      = "90c871bf60eeb9e48d5d3e439cd5b7beaacd5a00a3a7e82028867eeece0923e5"
    hash90      = "7158d8fe8763e739008c75f1e089af5dfbd941491afe02596cdb286fbd338ffb"
    hash91      = "bf954f108497602cafd1e582e067e146eaf9d1cecc5f4c47ba96e55978d8fa01"
    hash92      = "14a359f9b52265f53a11b37c1b90ba553dc3ee9497ac5bbc8211634c99feb0f8"
    hash93      = "e742e35e94d215f773e93255794f033badb7abbdb3b6d98d9128144557a34603"
    hash94      = "b841f01f1f3a9dccb47fbc7a388821a86715e92e5d9cb8076e4926fff7521916"
    hash95      = "5190bbe6f29c0e87a294a680e4f5a2295d17a2ff15b9e1e5ad6e670d88921560"
    hash96      = "05ce7e1b9713eb34f328dc06a735804b50e63556ecc26efb41ca74b28fce5935"
    hash97      = "7c39b204ed6663a2d043adc1fe9cea8c276419d40ca183a940b8dc5eeca62178"
    hash98      = "72a887a198a4fab71a934a6f9acd0463a92b1041d3cc52d1117d5d1d22bfafb8"
    hash99      = "d5417e58b75b7fe79250a46ee55718df5257641b97d44e515f679d482a7cda8e"
    hash100     = "8c3f28383c02b183e72836f2f4ee81ecd5a399f46a5f359d36db8466c7821653"
    hash101     = "0514aefa648860afac756065398e358ccf510a326d226b45916200378abf4e47"
    hash102     = "54f7ac031c3ad93cfd7990b7ed6e739138e55a2322f6c7d593bffc293b2dae96"
    hash103     = "a17a756637f608b53455e3968bd6f0fa536a10d50d078ba8764f231a7936a137"
    hash104     = "fcb91c4e250eaa067fbdc7691e8b82262954a95e7dee937519e32277ab289891"
    hash105     = "86213f61dacbe9cb636e90ed9f1aae95cab3f25e19da04fbd241bf2d199498b4"
    hash106     = "35321ca0221659135495b784f32bf0396debff3a6c3fb23d3b7bdcde3fc7c5de"
    hash107     = "40710a86c4f9187a51bc052099b31a0b9527b7ba12f444622bf533831ad247d3"
    hash108     = "b5766acae33ed5d2f972bfdc43978578c092f30bc292dd4daa6f0061816a5a3e"
    hash109     = "09eb0dcd63d7a3f0efd0fb192ed74b2bce7a8e121699bf2c7fa4f43b2f06fdfc"
    hash110     = "fd042f12b8b222feb2c6cdc24282f047f44c2e333aae2f209033ddbaa89c9fe3"
    hash111     = "60bd7c27413d02f91879504cdcc6d6a1e0e67725eb82206ac05e37f53513f51d"
    hash112     = "f0f61fd248119e2f3817da8ae924f47398daa49a52bd9485bb4dff560bdadc55"
    hash113     = "ed336a02be1cd5a0d6a023ecce4b4af7add5c2e5406561807a6fd1a58095fbd4"
    hash114     = "c1a379fdafff278d46efd1c8b89d227c35476447b89dda865ab79a5c5640a95f"
    hash115     = "22ccda27a2be0dc3d417db00616c831c31d34713a29cdc6fbbb21b3d679992c1"
    hash116     = "e1453a4cee61b254bfe81549cd7bf00a83fee1677be1b661a2650b36144fda1d"
    hash117     = "3d92500d7dab741d746d3dafd770f0030a28f6fbfb925059c531b478df90c60b"
    hash118     = "0b39d568a722af5c1ad407d63e09a42afba6daf6e08d963f73e2eda8ff273101"
    hash119     = "2a7208e927bd242855eef7d4ad29fda066829371360e9e7e0d52ae07e5580c39"
    hash120     = "4fa62cb4f07c66b31f73fe897056fda8e9d88c847877258d5189fd0e505016b8"
    hash121     = "52662d66d337b1723df02dcb150983c16385b983751d097dfd463e9a94484535"
    hash122     = "b871a15ccfd898cdcd3af017b6b3f3806f8bf80b1034d26be06d1cbccba286d3"
    hash123     = "7f5d72b9885b87eea9cbd377ea9fd0121cd281a8298f8448ad8019090f4d1d85"
    hash124     = "04edb3e9d6da5d658be730ea40262253498e398574b3c019c5bb1f21a9fd9cb0"
    hash125     = "682a0ece0af2dadf964d148fa3f16add66885ea6b0ae86b07b1d0e6aa4bd2bf4"
    hash126     = "31a69cf98c1fa93f0f81e77a26ef3997162eaef5d870a75a1185458afc41b919"
    hash127     = "ed874353de6621346f957a81b92ad88895ff8f230ac255eb29ecc1c4e4b679d3"
    hash128     = "78de77b1ac448275b0046857d0e80aaa27461a68e3f69b72320a29ef0ee701d7"
    hash129     = "f943600a4cae315e43ae84b3caa3a42915fb03c1371896ba1068f22df8880604"
    hash130     = "e548a73ac1d3ef8bd1b7e5b47115b6162d8a6717ed651690bb696dce2f651cd2"
    hash131     = "decc0e673292a0af927fbb4e2e653f633ebda529e5958719a64d690f1ae1a6c8"
    hash132     = "3890631dea32c1524ffb6f394970a0641f0afb722ba0416ae2da8df2b824d5e6"
    hash133     = "2bd6323a6a7a0d451dfe0bbcc2de27e25f43e6f1d6f01e8b527aef3aa21b7ed5"
    hash134     = "48121efdb92658b925c5dd6d7b309e7c901f891e6cee2447c79d7c9f3755b2c5"
    hash135     = "da7751f954fea9f02c1a2d6a1ff7e6b64cc4dd4c2b94a8347f358b36dac36cf7"
    hash136     = "08772cc1df663b57128a75a16c29b0bf2b6a7a2bd9e240e50c9591865fd75fff"
    hash137     = "a279b48ef5f706c74ee5b85552d2c82214b44ac71139e011770ed7cfc87dc332"
    hash138     = "b79c7c5cdf47c4627db7c6ba2b666d038ecd49b45be7fda7fae3e1502c1b4826"
    hash139     = "7c558fc4bbb2308e4ece0377f81fbf664923c1911c3bdbdf3a9d069c1a3d4fd7"
    hash140     = "ea8e37844e912504619e99db1e3f4d1410d4ae42725107da629e6e1cf80d6ecc"
    hash141     = "29690c17d67bb10c666c771f5b40d2aaadea3b219f284d1483e908d9b906b5dc"
    hash142     = "217cfc66049280856dcbd30818563bff25ef5777fa202f59bc3ea7a3d2b796e7"
    hash143     = "743f1fcc621190342a1192a0632a95b4d99cd375c7b1dbde8e78e3f9d600b31d"
    hash144     = "9dbbf7b09814dfaabb56dd04aa371841b8655e4f36a8c6585d0e0d63fb4cefe7"
    hash145     = "5d3e8ed7ea0c1601f731372f13cb6e03797b6eba998ce03728c57b6c5b3c890f"
    hash146     = "be948cc94edd02b1017fa20e55f2c1f2adec8c6e405aef9efd7abe74fe3636bc"
    hash147     = "e709365b6bcbec5737c42e9ef005ffabe807855f38e650a06d48fb4a679736d7"
    hash148     = "cda95d441003a72609cfead59245c9484f5e720c55e723cd7f8aa4dfce373169"
    hash149     = "8c7f62cabb719a59a5dd38fd1c3152c261db621c7332450115e612484107e664"
    hash150     = "059598aa737fef0524af0a8e3effc6ff09f20542bddd992c1e3500154144b393"
    hash151     = "f409c0da00c3711ab9e4573c49dff9f51e7edc952a17cfcfd8cac0af28ae0f64"
    hash152     = "ec9b33f95934a27c98a80bec1a71082c96f80c08e3ca591115658ab6daa71aca"
    hash153     = "0ce40615a3ca2110830c214636a121ab1da3f0e2383d61d17cb3eccd81efe76c"
    hash154     = "c0a3c38916014584780241335995c25fc3e776bf3c046397f64452a011d85283"
    hash155     = "19c98370605b28151a967b34266bbac2386e4e8085874fe88bb26d193aa96e7e"
    hash156     = "e853a6be31a5829fff0a290a54a3b3b9444cf3644058c123a3ab8e123b40e94c"
    hash157     = "066c73a48f411749500547008d03b0f18413316cc95a61d3f11d82eb8f3d3724"
    hash158     = "6ca995c5b36c6488583a0f7efa9b92914bcc7ef6a1b444dd585769e827154483"
    hash159     = "1225e99d2e9366e297706368de7f33a32b70b6de942bf00fb58122b6f2d8d981"
    hash160     = "0eca1614ccc4e31a5888308cd46fada39752f9dea0512fd33c9d8503814bc098"
    hash161     = "ba2369949a23211439711339c9b3c34bcd9158d53104d54d8c4f4826624865e3"
    hash162     = "67802fba7eaf07fa676e2e88dffe57643a33e6696d6a56b9f442ebb39b71a003"
    hash163     = "b97174f23054a8a38625185ee1162ca0c1d0dd61ddff011b2b312d76a1dc673c"
    hash164     = "48f514eab51abd1a3c875137a61ba45562259c4a5423a9e5b3fe7dd24592e6d8"
    hash165     = "b374873fbf64bc9db4aaebce242fb4eec1f102115b7615d3df6885bbbf1fe1bd"
    hash166     = "67dd2855acdacb6e8dc3ec3811a620d24ea9d2184575f1a7cea39755812d6653"
    hash167     = "9a2f80071fd49841dee86fff28e5fcf998c514c3e463e192984b13c387c2b002"
    hash168     = "6e7f92bb84f7539d23842cb9cb06b5b959cf71daa70c9319da16a9edd1d49712"
    hash169     = "84aa14015a0c9896d9bb46e5102e3f77e1ac66d1e25a2983846037ac3cb95c11"
    hash170     = "5260b8fafbb7bdf8317abedd6075d443bfdb648833518f2d36c81e97d7b0d1a5"
    hash171     = "123df6e2601d78e372112cd8ce508f8df2e8daedf82ab1c9ed7d90a5e5a56267"
    hash172     = "8a5940b3cf429deb57b26cbf982ebf066e6ab3b01849de5e09be0a360dd872c0"
    hash173     = "eed926a70918df5893096196ffc8dac71ca069f30793011466eec511114ae235"
    hash174     = "6bc3404801f9ecdd91e816806b3e07e0afeaa93a49170adb845060aae1d4a814"
    hash175     = "95eca9eb17785dae5faf211efe6e46810d934972cf5f39c20471d0fd09604004"
    hash176     = "6ccc35d82a214a51ebaa2fe75f307395ba903440f0c4bc04e12876b920e40482"
    hash177     = "c91d71a5867a05fa80002db5b96c9831883ed2ace809aa173618fdfb357b4227"
    hash178     = "b0ff1a6c7bf52bed0912dc2d24448f25eb81cabc758fde18b470ac23e8416d7f"
    hash179     = "3706e2d9f1bcb60343b4779d6676c62582a8089e802ba1e29a82626a67e0a86f"
    hash180     = "353f4e02ff9e051a249cc02f337c1d3e65537beaa8047a877c3d5c1b0dc02214"
    hash181     = "38dbf94df3213dcd44f7280644f2adc00e42dc5b000a45bd4b7639a8aa42d3de"
    hash182     = "b4a12feda1954e5e063d03d53685df1ac25058bf2f9bd54244c55fc6c8c08219"
    hash183     = "ebaa5b5baba216fe6a37f90e9527ff509ad15b6b0955c96ccc55fb2d6a159826"
    hash184     = "efdcfdf5fafb39791806f323a5a4b590128792d407302e77a180d8d5d2a09501"
    hash185     = "9b33812d17bafa80af6ce512ef96bb253b0069d338a73df45a3aff30e1a21fd5"
    hash186     = "5c6c20a96ae151a5ddaa5d67730444e990a74392ae7f95b290f918abb7383485"
    hash187     = "9fbb346200d6a2f579f8a80e2dac37a21560984ce50d91a4433dba1d331d925f"
    hash188     = "caef028b816101ca96d6d93e1142d5874dfa8d5e65004e96eb198cdbe901bd55"
    hash189     = "c71922b8287483d9d6fc55f3f5b50cfcb3b8b94cd4823f979e813fcbe8d5c5c7"
    hash190     = "fff59d3b96e8691c9b087f2eba4c8ec1aaf0e3dc03116a36e5a7b5b64c46b6fc"
    hash191     = "adc6181ef88f44106308a644dabbeaa96ee2dc83b8911c7632136aea6ebd249d"
    hash192     = "374ca64064c3c3a7c71117e142e19ebf8d6a12691d1e80f1a5761e7a4e7b9ec6"
    hash193     = "3d7b7615238b86f544e07171dccaa31fea90436d27b7583d36143df84122dc6e"
    hash194     = "e5b6bf1aa9dfabb7fba5fca817dd0f02edf381438f1c8df9b551bdd2514513ed"
    hash195     = "287b931fd17aa18a33a1c65a516fa507c1d299846466491261dee5b068f09e93"
    hash196     = "7ee509efaa6c0ebabc1b130f7502cd109c90a480e0ec2733e32e8661a4ead5c6"
    hash197     = "92b080f88d222220468aed3843ba2a83c893bf20323a7a7f271edb4c12005662"
    hash198     = "d031fb0b3b25d03da002563f6a7e117fee3dc100d602f39bd2606ebd7f6f9808"
    hash199     = "fbbc6581404f1d59844c2004943d34689d4eef1f327fa3af853a06e86955f540"
    hash200     = "dfebd0aa4aa4c7c3134b025969d24733d263e6521058d765cddb24f925ab242c"
    hash201     = "ad65741cc12f3552f82e6a61df77c6400fd131a25e436efaa2f1ce34116f3cc3"
    hash202     = "c6c5ff8883fd9800bdaa533e0236cba9f457da3df7064dd2b5b74d5baaaf3fae"
    hash203     = "13c82e50da27df2750d517fa5ff635a252eb1edf1cb8b6c42e51e5bf064a565b"
    hash204     = "88a23c60ed3ace43ae44d582d09f3cd52da0a775cd7a50234e4dbbcce114a952"
    hash205     = "091ac7f6d84c3069f5dbd242658a5d1933624ab29529df864b0c78caeaf8e8b6"
    hash206     = "3295754640a5b3fdcb878ee7a37ba90b36e7a2b6c19cd5ae0f66d2d4570f0d65"
    hash207     = "973b97ebdb206882821c1524e9b3fed02725b1f65777e448c86bc52f759af906"
    hash208     = "9481ae93b3dc0a4f7a9e6e3d87cc2f90b9fcf9166ad1f93f66d6c312f630f883"

  strings:
    $s1  = "ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQTh2.setRequestHeader(\"User-Agent\",\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\");" fullword ascii
    $s2  = "// while (ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQTh2.readystate < 4) WScript[\"Sleep\"](100);" fullword ascii
    $s3  = "ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQTh2.open(\"\\x47\\x2c\\x45\\x2c\\x54\".ZZZZZZZZZZZzzzzzzzzzzzzzzzzzGZg8(), ZZZZZZZZZZZzzzzzzzzzzzzz" ascii
    $s4  = "String.prototype[\"ZZZZZZZZZZZzzzzzzzzzzzzzzzzzGZg8\"] = function () {return (\"asdf\", this.split(\",\").join(\"\"));};" fullword ascii
    $s5  = "ZZZZZZZZZZZzzzzzzzzzzzzzzzzzTIa5.push(String[\"fromCharCode\"](ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQt8));}" fullword ascii
    $s6  = "function ZZZZZZZZZZZzzzzzzzzzzzzzzzzzYZz2(ZZZZZZZZZZZzzzzzzzzzzzzzzzzzATs3)" fullword ascii
    $s7  = "return ZZZZZZZZZZZzzzzzzzzzzzzzzzzzATs3;}" fullword ascii
    $s8  = "function ZZZZZZZZZZZzzzzzzzzzzzzzzzzzFn8()" fullword ascii
    $s9  = "if (ZZZZZZZZZZZzzzzzzzzzzzzzzzzzXd9[0] != 77 || ZZZZZZZZZZZzzzzzzzzzzzzzzzzzXd9[1] != 90) continue;" fullword ascii
    $s10 = "var ZZZZZZZZZZZzzzzzzzzzzzzzzzzzXd9=new Array();" fullword ascii
    $s11 = "function ZZZZZZZZZZZzzzzzzzzzzzzzzzzzYPw3(ZZZZZZZZZZZzzzzzzzzzzzzzzzzzKNo5)" fullword ascii
    $s12 = "eval('if (ZZZZZZZZZZZzzzzzzzzzzzzzzzzzZe6 < 128){ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQt8=ZZZZZZZZZZZzzzzzzzzzzzzzzzzzZe6;} else {ZZZZZZZ" ascii
    $s13 = "else {var ZZZZZZZZZZZzzzzzzzzzzzzzzzzzZe6=ZZZZZZZZZZZzzzzzzzzzzzzzzzzzBi2[ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQt8];}" fullword ascii
    $s14 = "function ZZZZZZZZZZZzzzzzzzzzzzzzzzzzKCu9(ZZZZZZZZZZZzzzzzzzzzzzzzzzzzATs3, ZZZZZZZZZZZzzzzzzzzzzzzzzzzzFc8)" fullword ascii
    $s15 = "var ZZZZZZZZZZZzzzzzzzzzzzzzzzzzKVe3 = new Date();" fullword ascii
    $s16 = "eval('if (ZZZZZZZZZZZzzzzzzzzzzzzzzzzzZe6 < 128){ZZZZZZZZZZZzzzzzzzzzzzzzzzzzQt8=ZZZZZZZZZZZzzzzzzzzzzzzzzzzzZe6;} else {ZZZZZZZ" ascii
    $s17 = "eval('var ZZZZZZZZZZZzzzzzzzzzzzzzzzzzTIa5=new Array();var ZZZZZZZZZZZzzzzzzzzzzzzzzzzzFp0=\"\";var ZZZZZZZZZZZzzzzzzzzzzzzzzzzz" ascii
    $s18 = "[ZZZZZZZZZZZzzzzzzzzzzzzzzzzzXGe6], false);" fullword ascii
    $s19 = "{var ZZZZZZZZZZZzzzzzzzzzzzzzzzzzBi2=new Array();" fullword ascii
    $s20 = "function ZZZZZZZZZZZzzzzzzzzzzzzzzzzzJOq8(ZZZZZZZZZZZzzzzzzzzzzzzzzzzzLYe5, ZZZZZZZZZZZzzzzzzzzzzzzzzzzzATs3)" fullword ascii

  condition:
    (uint16(0) == 0x7453 and (8 of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

45b50756-0246-4177-94e1-e8222401de68

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion