_20160429_063d7cddc5d490f34427ede56cf3124c_20160429_068c218d1e0f_677

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files 20160429_063d7cddc5d490f34427ede56cf3124c.js, 20160429_068c218d1e0fcd015e0d014096151a0e.js, 20160429_08d035496966f49845d8d9173aa3973f.js, 20160429_10ebed3cee0dae3ff1531a23a38351da.js, 20160429_12f9015bf45524286e16cc2ef4e78153.js, 20160429_146806fb715b6faf53e1343a59243a9d.js, 20160429_15b0296260336ae063f4ba107d697d54.js, 20160429_17662c429da27d1e1b49e257ba7e6d51.js, 20160429_24c24edf561283bce218d642a3a8d541.js, 20160429_26282fa09ecdf166580a991ecf2cd326.js, 20160429_267fc525cf27f2ce2f0210bd07293119.js, 20160429_2695f460ce5adec39dd5205dea201f27.js, 20160429_36975db4a018a853d628a6c8ec3c7e54.js, 20160429_3ca5466ab3ac36fb78e0e0aa10f8cf38.js, 20160429_455079c21e16f660f83ecb53b41afb12.js, 20160429_50465b808df2dc8ecfd1bfc700f0a0c2.js, 20160429_51180c5d7dcab599de9c31689509e882.js, 20160429_5494b68064bd9b90ba4305a47fc72d98.js, 20160429_5513b87cf29c0034e765ccbf6b4c9a1b.js, 20160429_561f044d00ac8037998d112079c840c5.js, 20160429_59c5ba5786f921252a285a9f581f8e2e.js, 20160429_5bacc1c60f379c9e11d4a6b3ee01c540.js, 20160429_5d3560d7f52743d53f52d178031d6041.js, 20160429_5ef451bded204f092a1cf72a748b3408.js, 20160429_60e8dd409460a8aa7253d9dd25a79cca.js, 20160429_632144ea053d2043ea9a4f4768dcb45c.js, 20160429_6381fe6bfa33176b0b3c1fa58b58ebdf.js, 20160429_64917c741f2b2f80b875776f11c0c03a.js, 20160429_6622f4ccbba1619c1d93c9b2cd55c457.js, 20160429_7167b233aba1f0fdb8959e9004e5d121.js, 20160429_73593d1a28b551b7db41bbb4404d545c.js, 20160429_7514a839efba34306d74f65bb0b32973.js, 20160429_77fe5b9a59e4b7a26c178f2c472c0462.js, 20160429_79dbc9143b0fa0a9fe6e2165b0458737.js, 20160429_7a074b2a095f57324c821d28cb48a735.js, 20160429_7d0f660c5d19dce957a907b4f6d8ddd0.js, 20160429_8cbd5cfc96112f21035e234d3e2a6a5f.js, 20160429_8f98db0a7bb169653c86262868885446.js, 20160429_8fdade448fcaef7aec581e562352101b.js, 20160429_90e15e541c98edefc66e15c80b5f6ff8.js, 20160429_919c69a7d9821018fc2a4188b0c513cc.js, 20160429_98d18dfd6cd080600efefa2c25a3e74c.js, 20160429_a272f45858dca80594a871d6cb549a88.js, 20160429_a451ebd28a1ab40055082eec9b551b00.js, 20160429_ab2bac6395c6a134c986dc64509ec410.js, 20160429_ab776acd5f22ee3025839b3187d6cd39.js, 20160429_ae89505bae706752ad1ccd45989f7a3f.js, 20160429_aeda23c17e1ddd18c697302c1dd7f36d.js, 20160429_b0a569b301a066518ca8c4c45459460f.js, 20160429_b3de165c45c93f1886cf07dd35990b32.js, 20160429_b8215e9d18bb9779e4b650943b8c9583.js, 20160429_b86e7bedd5322edbc4e951bb88f3807d.js, 20160429_bc7fff8b38edc7a216957ca0685898a9.js, 20160429_bdcc43dc0b73060ffcc38240be93105a.js, 20160429_be08be24e63223ebd80efd034c524925.js, 20160429_befc700daf9339263f30bdb25e1b62b0.js, 20160429_bf7740ce61d52a452d20a06b8c97781c.js, 20160429_bfe29867cb3621a2ee61b40914fc9d1e.js, 20160429_ca706af668bd71b191ad5a4211e2f5fb.js, 20160429_dbad9658ce4f441a7b220b5d9247575e.js, 20160429_e9cd63f6c30369289f34e310a9b32540.js, 20160429_eccf3286864665cd8a2cda5074119a79.js, 20160429_edef42e9ac68d800b1a03b8fdd66444d.js, 20160429_ee19b9f22deac20eb742d858099b8562.js, 20160429_f2d58323a886b6d5b8a9deaaa6d631e8.js, 20160429_f5575383f24f64bb9b82479bc88e779b.js, 20160429_f643f2dab9a6376df98001360f30c811.js, 20160429_f7c5350bc54f868c6195ae757e591322.js, 20160503_064e2ce1f6b1db7422ed43f783d54d4f.js, 20160503_0799584ddfd70f1b2e95ac8951eef78c.js, 20160503_0a15a65bd3f24a2c997a15c736ae5d7f.js, 20160503_0ba6b6cc82911717058d366249cc2b0c.js, 20160503_0c35d4e9e707e23404decb946c417237.js, 20160503_0dc3a3bee9130cac38b62102c8005ef0.js, 20160503_0e93c01639a0d39408c6dddab25cbabc.js, 20160503_123b1b7ab90e974a0468cf897dfaaa3a.js, 20160503_12fc0f67e72ca864501ca5cc5034f7b2.js, 20160503_266255c65395b8cc5ef248db33a89315.js, 20160503_2deafe10bbca9cb58c5dde7d50229a50.js, 20160503_30a445b56ba35445fb50dc238afa5849.js, 20160503_396c7e711437c21c7872102da30ad1d2.js, 20160503_3b1563087dc11336ba02dc64181dc6e3.js, 20160503_3b530225924f9248e32cc59cd01b5827.js, 20160503_3d254712fba9135e934e1670b3530142.js, 20160503_42a3575be67f05150e72c6cb0b835b31.js, 20160503_4700d7c2411f8076f35cb4006b0dcfac.js, 20160503_50d86850056eecc56579ce35f46e761d.js, 20160503_540aa6538a18f52368cf6168fee736bb.js, 20160503_547547ceb4619f223ea658523c96ab18.js, 20160503_567128bcca0b5951e0c25da4ceb341e6.js, 20160503_56c314a6090bdc6a61405d043ee6f455.js, 20160503_5865075d1170550d80f599c2e154fa6e.js, 20160503_5f0822888ddc1aef32349a0b3a8876fd.js, 20160503_5f917e0b0c3dfd422eec4bddd2b690c0.js, 20160503_60f2f5d2510793a4d719013488b442c7.js, 20160503_67c66e73bd810dbfc1163c4a21f5fd35.js, 20160503_683493951278eec88df3aeab5a56815f.js, 20160503_6f48f11faa608fc63285658b68038640.js, 20160503_6f4bba8daef84d08d69f180c3a1686a5.js, 20160503_725ac18ba8cc5ffb8541aba938cb1fde.js, 20160503_77b2004fd188d6db29ac556536f58170.js, 20160503_7b9134bd22ccf25925bf4cac13d39059.js, 20160503_815812b2d8693d35870e843beda86083.js, 20160503_88cd5b1aa0a2027f0792db4ff97efa3a.js, 20160503_8aa9355bbe838f2d42388c10a1751a85.js, 20160503_8c0952180063dd734fda69a3cc0268bb.js, 20160503_8eb1b924a00d0ae5facbdb21a655835f.js, 20160503_8fe452df70d264efce0fe4b19cf583a3.js, 20160503_927bfcb49c9a8392520619dca17f7ce9.js, 20160503_92b3ff1b53797dcd0d65d0bae477b2a7.js, 20160503_947941362248c534b15f721efbb03fbc.js, 20160503_953cb8463038159a51729c70ccda82b4.js, 20160503_9ba6f1cb20ca86221220069414e27a7c.js, 20160503_9f47017f8ca7afe7f9a30d7e8ef87c7b.js, 20160503_a71ac1305ed6669d63406da7222bf9cb.js, 20160503_abec396fffe07ea65fbbf215fe79c05e.js, 20160503_ac4d94ffa3ba35303419c1a72aa63084.js, 20160503_b006e89f153b7139ac26200dd7f99fd9.js, 20160503_b64a4f793338d94d7763ac53e88dedd0.js, 20160503_b7b48ced1303c26e8c38756fa1ff886d.js, 20160503_bbbe2800c83abff8a259c4c8ea13f765.js, 20160503_bfdf096fb8e73ab0215985fe9af40d01.js, 20160503_c0e1181a32050b81f6c2ec1a128e3284.js, 20160503_c3e340a620306a54f0f05c87e3dda385.js, 20160503_c9690106d31f6d1403119393207cf471.js, 20160503_c9bacde7959de2374f23e908ab921764.js, 20160503_c9de4ec07c504db54a1ed0f5b7d0fcbd.js, 20160503_d560a4f3ee0cb7aea376b8180615f063.js, 20160503_ddc4938940c3fbf552ba96d37eec94c9.js, 20160503_e46212fd37306612173c86292740d385.js, 20160503_e839faf165fd245157872add557b0d4b.js, 20160503_eae7a54c9b563ce27310e686f826d09b.js, 20160503_f6526c28d3fa49972c2d5b352343a4a5.js, 20160503_fa7b9a7fa27f16e3b6707a8f2b5c70cc.js, 20160503_fdba18689ad0dca58da77ddfe95647f7.js, 20160504_6e5118cd41d1af98f2fe52b4093556cd.js, 20160504_9a5c7e8ed58c3b48cd92d2d0125232de.js

rule _20160429_063d7cddc5d490f34427ede56cf3124c_20160429_068c218d1e0f_677 {
  meta:
    description = "datamaliciousorder - from files 20160429_063d7cddc5d490f34427ede56cf3124c.js, 20160429_068c218d1e0fcd015e0d014096151a0e.js, 20160429_08d035496966f49845d8d9173aa3973f.js, 20160429_10ebed3cee0dae3ff1531a23a38351da.js, 20160429_12f9015bf45524286e16cc2ef4e78153.js, 20160429_146806fb715b6faf53e1343a59243a9d.js, 20160429_15b0296260336ae063f4ba107d697d54.js, 20160429_17662c429da27d1e1b49e257ba7e6d51.js, 20160429_24c24edf561283bce218d642a3a8d541.js, 20160429_26282fa09ecdf166580a991ecf2cd326.js, 20160429_267fc525cf27f2ce2f0210bd07293119.js, 20160429_2695f460ce5adec39dd5205dea201f27.js, 20160429_36975db4a018a853d628a6c8ec3c7e54.js, 20160429_3ca5466ab3ac36fb78e0e0aa10f8cf38.js, 20160429_455079c21e16f660f83ecb53b41afb12.js, 20160429_50465b808df2dc8ecfd1bfc700f0a0c2.js, 20160429_51180c5d7dcab599de9c31689509e882.js, 20160429_5494b68064bd9b90ba4305a47fc72d98.js, 20160429_5513b87cf29c0034e765ccbf6b4c9a1b.js, 20160429_561f044d00ac8037998d112079c840c5.js, 20160429_59c5ba5786f921252a285a9f581f8e2e.js, 20160429_5bacc1c60f379c9e11d4a6b3ee01c540.js, 20160429_5d3560d7f52743d53f52d178031d6041.js, 20160429_5ef451bded204f092a1cf72a748b3408.js, 20160429_60e8dd409460a8aa7253d9dd25a79cca.js, 20160429_632144ea053d2043ea9a4f4768dcb45c.js, 20160429_6381fe6bfa33176b0b3c1fa58b58ebdf.js, 20160429_64917c741f2b2f80b875776f11c0c03a.js, 20160429_6622f4ccbba1619c1d93c9b2cd55c457.js, 20160429_7167b233aba1f0fdb8959e9004e5d121.js, 20160429_73593d1a28b551b7db41bbb4404d545c.js, 20160429_7514a839efba34306d74f65bb0b32973.js, 20160429_77fe5b9a59e4b7a26c178f2c472c0462.js, 20160429_79dbc9143b0fa0a9fe6e2165b0458737.js, 20160429_7a074b2a095f57324c821d28cb48a735.js, 20160429_7d0f660c5d19dce957a907b4f6d8ddd0.js, 20160429_8cbd5cfc96112f21035e234d3e2a6a5f.js, 20160429_8f98db0a7bb169653c86262868885446.js, 20160429_8fdade448fcaef7aec581e562352101b.js, 20160429_90e15e541c98edefc66e15c80b5f6ff8.js, 20160429_919c69a7d9821018fc2a4188b0c513cc.js, 20160429_98d18dfd6cd080600efefa2c25a3e74c.js, 20160429_a272f45858dca80594a871d6cb549a88.js, 20160429_a451ebd28a1ab40055082eec9b551b00.js, 20160429_ab2bac6395c6a134c986dc64509ec410.js, 20160429_ab776acd5f22ee3025839b3187d6cd39.js, 20160429_ae89505bae706752ad1ccd45989f7a3f.js, 20160429_aeda23c17e1ddd18c697302c1dd7f36d.js, 20160429_b0a569b301a066518ca8c4c45459460f.js, 20160429_b3de165c45c93f1886cf07dd35990b32.js, 20160429_b8215e9d18bb9779e4b650943b8c9583.js, 20160429_b86e7bedd5322edbc4e951bb88f3807d.js, 20160429_bc7fff8b38edc7a216957ca0685898a9.js, 20160429_bdcc43dc0b73060ffcc38240be93105a.js, 20160429_be08be24e63223ebd80efd034c524925.js, 20160429_befc700daf9339263f30bdb25e1b62b0.js, 20160429_bf7740ce61d52a452d20a06b8c97781c.js, 20160429_bfe29867cb3621a2ee61b40914fc9d1e.js, 20160429_ca706af668bd71b191ad5a4211e2f5fb.js, 20160429_dbad9658ce4f441a7b220b5d9247575e.js, 20160429_e9cd63f6c30369289f34e310a9b32540.js, 20160429_eccf3286864665cd8a2cda5074119a79.js, 20160429_edef42e9ac68d800b1a03b8fdd66444d.js, 20160429_ee19b9f22deac20eb742d858099b8562.js, 20160429_f2d58323a886b6d5b8a9deaaa6d631e8.js, 20160429_f5575383f24f64bb9b82479bc88e779b.js, 20160429_f643f2dab9a6376df98001360f30c811.js, 20160429_f7c5350bc54f868c6195ae757e591322.js, 20160503_064e2ce1f6b1db7422ed43f783d54d4f.js, 20160503_0799584ddfd70f1b2e95ac8951eef78c.js, 20160503_0a15a65bd3f24a2c997a15c736ae5d7f.js, 20160503_0ba6b6cc82911717058d366249cc2b0c.js, 20160503_0c35d4e9e707e23404decb946c417237.js, 20160503_0dc3a3bee9130cac38b62102c8005ef0.js, 20160503_0e93c01639a0d39408c6dddab25cbabc.js, 20160503_123b1b7ab90e974a0468cf897dfaaa3a.js, 20160503_12fc0f67e72ca864501ca5cc5034f7b2.js, 20160503_266255c65395b8cc5ef248db33a89315.js, 20160503_2deafe10bbca9cb58c5dde7d50229a50.js, 20160503_30a445b56ba35445fb50dc238afa5849.js, 20160503_396c7e711437c21c7872102da30ad1d2.js, 20160503_3b1563087dc11336ba02dc64181dc6e3.js, 20160503_3b530225924f9248e32cc59cd01b5827.js, 20160503_3d254712fba9135e934e1670b3530142.js, 20160503_42a3575be67f05150e72c6cb0b835b31.js, 20160503_4700d7c2411f8076f35cb4006b0dcfac.js, 20160503_50d86850056eecc56579ce35f46e761d.js, 20160503_540aa6538a18f52368cf6168fee736bb.js, 20160503_547547ceb4619f223ea658523c96ab18.js, 20160503_567128bcca0b5951e0c25da4ceb341e6.js, 20160503_56c314a6090bdc6a61405d043ee6f455.js, 20160503_5865075d1170550d80f599c2e154fa6e.js, 20160503_5f0822888ddc1aef32349a0b3a8876fd.js, 20160503_5f917e0b0c3dfd422eec4bddd2b690c0.js, 20160503_60f2f5d2510793a4d719013488b442c7.js, 20160503_67c66e73bd810dbfc1163c4a21f5fd35.js, 20160503_683493951278eec88df3aeab5a56815f.js, 20160503_6f48f11faa608fc63285658b68038640.js, 20160503_6f4bba8daef84d08d69f180c3a1686a5.js, 20160503_725ac18ba8cc5ffb8541aba938cb1fde.js, 20160503_77b2004fd188d6db29ac556536f58170.js, 20160503_7b9134bd22ccf25925bf4cac13d39059.js, 20160503_815812b2d8693d35870e843beda86083.js, 20160503_88cd5b1aa0a2027f0792db4ff97efa3a.js, 20160503_8aa9355bbe838f2d42388c10a1751a85.js, 20160503_8c0952180063dd734fda69a3cc0268bb.js, 20160503_8eb1b924a00d0ae5facbdb21a655835f.js, 20160503_8fe452df70d264efce0fe4b19cf583a3.js, 20160503_927bfcb49c9a8392520619dca17f7ce9.js, 20160503_92b3ff1b53797dcd0d65d0bae477b2a7.js, 20160503_947941362248c534b15f721efbb03fbc.js, 20160503_953cb8463038159a51729c70ccda82b4.js, 20160503_9ba6f1cb20ca86221220069414e27a7c.js, 20160503_9f47017f8ca7afe7f9a30d7e8ef87c7b.js, 20160503_a71ac1305ed6669d63406da7222bf9cb.js, 20160503_abec396fffe07ea65fbbf215fe79c05e.js, 20160503_ac4d94ffa3ba35303419c1a72aa63084.js, 20160503_b006e89f153b7139ac26200dd7f99fd9.js, 20160503_b64a4f793338d94d7763ac53e88dedd0.js, 20160503_b7b48ced1303c26e8c38756fa1ff886d.js, 20160503_bbbe2800c83abff8a259c4c8ea13f765.js, 20160503_bfdf096fb8e73ab0215985fe9af40d01.js, 20160503_c0e1181a32050b81f6c2ec1a128e3284.js, 20160503_c3e340a620306a54f0f05c87e3dda385.js, 20160503_c9690106d31f6d1403119393207cf471.js, 20160503_c9bacde7959de2374f23e908ab921764.js, 20160503_c9de4ec07c504db54a1ed0f5b7d0fcbd.js, 20160503_d560a4f3ee0cb7aea376b8180615f063.js, 20160503_ddc4938940c3fbf552ba96d37eec94c9.js, 20160503_e46212fd37306612173c86292740d385.js, 20160503_e839faf165fd245157872add557b0d4b.js, 20160503_eae7a54c9b563ce27310e686f826d09b.js, 20160503_f6526c28d3fa49972c2d5b352343a4a5.js, 20160503_fa7b9a7fa27f16e3b6707a8f2b5c70cc.js, 20160503_fdba18689ad0dca58da77ddfe95647f7.js, 20160504_6e5118cd41d1af98f2fe52b4093556cd.js, 20160504_9a5c7e8ed58c3b48cd92d2d0125232de.js"
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "985187321e2d6123907e8bcb0f62f9a7eaaa80785784b84f75b773643b57505a"
    hash2       = "450c9a501bdb442c2fb7539e6c26015f10441ef074b52fe7b1083f6117597205"
    hash3       = "ab567dee6b3745d365512e8d08dbd4f257cbb0aa7ed5a0ba53909c11375b4957"
    hash4       = "cf17d758dd6e4bd42fb4093d2ccc22453efc6c4abbcc93584508d9a26bce025b"
    hash5       = "9420209c26256f65b5684c936096994a210ecfe5bfc32716c0f8afb8a3c97d9e"
    hash6       = "dcac8e6d337a3815feb70fec1e3fdb4acf3b3f6072fc415fd61558e059341615"
    hash7       = "d7dd8fdf25e0a70c57e833197e59272c5a72bd6324cd94e4024216b2851c2fdd"
    hash8       = "df79028bdd24aa292604d603674e7ddc5cd132d28f6e89bc71041757ad8d2582"
    hash9       = "0fe8f17459a2a9233896f047e3e0430502af0105dbb969e5d3ae8d59902f27b4"
    hash10      = "d7778e51641f79cada58f33234ce0c225c763b4c547a5ad3edf624c40aa17449"
    hash11      = "3dff31140d679682cc84398c9057af7341d92bacc3b63bde1bd1fd38d40be38a"
    hash12      = "b54e076487c2d5b1bf0084e35cc937db42d79723eb9083879109322a1dd8c664"
    hash13      = "9d36834bc7a78c14b589a03b0f9face780087d125782bc13270f5ef611c2ad1a"
    hash14      = "88b144527f1d55a6664b18477bf04c27a883fe5b6e8d9de25b3a1c531277607e"
    hash15      = "94e667919beb711bd31b9ce7b76d011da1594e94730f8407be070b13b5405c14"
    hash16      = "a37c24d8c65d19e4ea154f3f84f0d5c39d3fae9803ea9e8d10e99c8cd4347029"
    hash17      = "704c34db4733fe82f1a25e998335e5ff3ccf266ac21299629e7c6f56c99a9bd2"
    hash18      = "8c0d1967c59853c191b7448136198e1e6489b9db863619177084bbd484788ed2"
    hash19      = "e69e216bfc7f4420f0d6b8350c8f4fac422e9b11615d1156647dd17ccc10c308"
    hash20      = "bbb42c534a52529b0a55934d5efade7aaeb4980c6d13d01f28887baa8414c080"
    hash21      = "dbe13132d5f6721ce1adc2542f74b8fd43949bbce6d395ee3added40126c8972"
    hash22      = "a9fac7fb14a02a23304985bc8c9955ff8c54e5abba070a00cb052a99019b65d4"
    hash23      = "c4fbf7d31260651ad5c2e37726dd30fc743529b243b8adb40d989e94035d1899"
    hash24      = "b719b12a13ab82cf8fe2b48961fadd8fd225c3817383241c515cc6cce71dfffe"
    hash25      = "6e807da85cee415f5a99eca7fb8d745a23e374ff0aef5d8155426640102792c3"
    hash26      = "3d0cbd7ecf8b16964eae4b866694bf6c70bcb8de3877b940583fbd730ba97f6f"
    hash27      = "8c8fe2518af35a66295267346b58fc884522f59d253e8a953b00643d448141f9"
    hash28      = "79261de78aafde2e4f2b884ed27288886e612e680ed6dab9b9d998b56a81805e"
    hash29      = "8440ab94072c908785ca8d3ee3fdf2fcae8cff6a755b07ca00b19552127355f1"
    hash30      = "4893d0fdf0857fad89d5c094bbd1bed0b0ed70ee00de4ff3c465a44e427f5c49"
    hash31      = "78104b28667357c4de6b6934e1dcad878929168dc7058565223e628ba4b88a65"
    hash32      = "767f184304df050edf0f480beccff25fe7eea2bf8f5ac66870cb1e24c93aba72"
    hash33      = "4a3ab99367e4404267c682ff58078beb4f7db12f1b3cc4b12d3cbddc68cde424"
    hash34      = "18dee1aa633797489bc826f91a9844cb732e2f603bdbbfeaff26d15c5f447a33"
    hash35      = "0e24c03153f4021f5dd1d47fb500605839bb8967d4904a475677cf44af76760e"
    hash36      = "44e09d1ea6d29dcd2122c25668b0c357ca2b0745b5b4a5bc95aebb4487b13a70"
    hash37      = "194c02cc2c37d1dd9898c2ac3a2a1012888134b15eceba05e7b565de99bef6ab"
    hash38      = "04901218004892c999f535b0b3d3c7f595428914cc13a4f71c5f7c69ddde97bf"
    hash39      = "67d0efd2b539ec174dded792bdfcaacfc798165abf5e00105a4557a1caa3902a"
    hash40      = "d4524514253d1543d836f2fa5837437f47464d987c11f0493395c2f50bb59b34"
    hash41      = "fbbf9b4613c8ba577f798aaaf6f82cfe3aa507ebf3c130e775bd258ce44246d4"
    hash42      = "dbd0e9edd80941adeb0d884321569730734bbf0f3bd715a9b1acc44d662e7e3c"
    hash43      = "858bef1bd516400523a91eb909408eeb3cdfcfd9d966682b9461f8de8e6939ab"
    hash44      = "655f9da705d6a9bac2f2de6ddf9f6f9ee207f0e1123c268e7669ce7f9f29563f"
    hash45      = "7f4440e507c96248f39a7e360dff0bade2c0030b3a45205c07a6e64aac153f39"
    hash46      = "32b74635021beb8e0dbcf7263b7fb4f006bed8cb183d05c4f746c44001c9dc88"
    hash47      = "b5ec74b26e40be4f0d219cd248e7c00218027e5a16d1d48e95deb933b2e10f3f"
    hash48      = "4bd1bbd308e9d84686bd598a10e492f008ee76212717ae5e165fe4d1ef8fd41e"
    hash49      = "c8e52bf1882b5b84ffe48de20c4ea9e7aff594903c7b0ec488b0aa5b21f9bc13"
    hash50      = "697218db1f2ea2bc50fd63205fdf2d12349c7923a764d9a6543f856fedb21a73"
    hash51      = "a1c2a91895944a46a8552e6530c05221113816103723181a5d0a89562895820d"
    hash52      = "fc4f9d589be4cd7ed32a5edd5fbfee54b59654dd07364cbee258bbc48b6f7737"
    hash53      = "256a998ce9e5eb5511899827302ff0618d945e26b8accc63c0b4e6db55bbc4bd"
    hash54      = "3e0e3950cfcce6ef9cf2292c2a254177e1bc9b6365df3221a3fd45a3432e6aaa"
    hash55      = "c7ee9a1836c6dcf3402eb2adbbebf58a0e3d7e1e23774e2cd9abc8caedad0cee"
    hash56      = "7749e3ddcefbdde063991e74b8b3cd57b702aabcdf259287a99e219fe0f9336b"
    hash57      = "c0e6e34e0ed3a08d137d850ad8d6a34ba82b74de22ca823430b4db748e287c4c"
    hash58      = "d4123d1b9aba36cd740b2fafc660a7f1e016511a5695a339be98f94cd1e5cdbb"
    hash59      = "33f6004c67859047e43db2eab6f7e8bd6b11e0f70965ac74ec154a27d3e4c569"
    hash60      = "d91883934720dc0fcc2bf2c7f3a42ce0ff46720a16abeac6b8848263fe723b4d"
    hash61      = "850cad26fb594235b46f17f135f06cf729e4f8e6e4b8c07666aa17452b269883"
    hash62      = "16fd2ab2a3842c78f2da319de860ba887c0af169a0a7c223bed35901055d628c"
    hash63      = "1582ee2d515134e6d0584f2096775889acfbc71f7c3ae3f49e7ee84458d3b122"
    hash64      = "8c5bdf9b374a093a9d64ca017e0368bb091a84fac6ee7a91dc50333c3805f2ad"
    hash65      = "97fd5e7d78ca56ec06d0d31c783c677e57eaa76b6c52eb9724ed18c0104d39fa"
    hash66      = "c2dd151f0531525172e2567e3acab803b7f61cda7d0583d7474fd506f00f78f9"
    hash67      = "1607fb95e405ff505fa6818b5f6d4774ff4c4038675254c8e355e0af705415b6"
    hash68      = "81994d727925b199e1df7622b97f882a279305f285754e7c4729e0d16ad5a0df"
    hash69      = "08cb1c127d2064ff652c62d7a6a92ff8332c0de54bfa84c5546f4c4e4c4f5aaf"
    hash70      = "591efd4d72dfb8debb3707fa4879ba9a3602d783abb049ff6a0db7b43b349f83"
    hash71      = "ec92090ebe31a33ff0f4f8746a7273d8fd586917c79f9e201522cb3b7aeb774a"
    hash72      = "aa4d2eda0c7bf10eff91eba985a8a7675c52b3214f676ef52dd0b92d63137d9d"
    hash73      = "771f0bb291a08d67a1ca7fd3004d755f94054044efdb0ce23c84fd61cc9d2b86"
    hash74      = "876f18b117839360aec7764e7db847185c63e701056d6715f65712b37348ca0a"
    hash75      = "efe06faf6d9053938754d0e3458f8a4148341a2d4965abb17b6f3d6d76f16151"
    hash76      = "b4f5e9e400fc5c72721c0b853bd34d36cc5e9aa7aa6d4faa85726f1650f88388"
    hash77      = "5312b19881b2561f0d455531cc362a62dda098188b7856ab9c359e949d9669bc"
    hash78      = "a720c03b69d08c5c46dfffaa43cb0664f1323e0311818558eb2fe005445d708e"
    hash79      = "d90aa7816fa5e23bff52b8213f310b36221a8a2b371bca40280f14928b205bc1"
    hash80      = "2121f71a1ce57f972a62597769e90cf25529371a913a7ed2bb112c76f9ee29a9"
    hash81      = "81d2d1672a2ad5b56b68d4d6e726f7a4c35a43329f82474720bbe660b5f6964b"
    hash82      = "591e92054f59dfab89fac40430accbea4bf4835c8c9d2cafdab5466a2825058d"
    hash83      = "5eb1e6d30f250a2dc5c4b1e25b535dae186ddab4075d9bf63fcc88ddf7bd8be1"
    hash84      = "28ee349204f30affd0b64bb6fe6bf3d275f5f0e63e009f2204c87b6491f00b92"
    hash85      = "5ff12d6c4edf0aff37b4580497f12c30d09b9b055d1eb1b26bdb8c8c9edf0c51"
    hash86      = "df2890acfdbc1dc0a07911fbea62a82267f28b91e4e293d90d6e8c832ccea876"
    hash87      = "1a8996036070f0061318c209552cfa84493f476656ed476fff07ce7050a5e83c"
    hash88      = "2e15cca15ca878348f3d5fe7e77f28cc511dd0d872810b9beb31c9a2d74a6e73"
    hash89      = "c8fae6eeda375d819eca6bfd7ff5b256f05cea9050c1298ede80068691c46abc"
    hash90      = "f53f96692dfe17b0b15f554d8855f1dbf0c487a7a019a736e0bc5539bef8dcc5"
    hash91      = "a097f1a730644898b3d100b55f63d530889c5b8cd722462955779f02430d9591"
    hash92      = "420cad7e13b68b2b87783fe7ac54caf0e22e2bacd35f6f1a40712bc59171a3b5"
    hash93      = "6462c5dde606fdca5c985a614a1d289cbf10c921c209fb18128e14e294fb5197"
    hash94      = "5afcfa5f162c856fa9eefd115517bced6ab72ea4a1d67581a3657f708a924fdd"
    hash95      = "a46a349f807c1c2ec307cf4f51da5735d53262dc15be02fcebccebc4ce7ae401"
    hash96      = "c2b32c03003c3710fbf2a0d9f81a5f75ee5404d601a9fbf07ef9a53e7178b52b"
    hash97      = "c6b23fa0e908e24a7d1ef86239994ad46fd47477bcd1ac1141cac017e5966e1e"
    hash98      = "826de526842fff111e37ae60d5547ea022e13cc037804f336155121788da1c48"
    hash99      = "bfae52a8feb57ee9f63a19b9e032f6e683b4fc61f57659c0b499011b1ad8399a"
    hash100     = "1d18e73b3dc238fb1ef6ca1c5c2c034eaf58c3731c58f70257646e03c71ae6fc"
    hash101     = "d84423f38a5ab2e5db08c533ef85d6828e5704a08f90af4ef6f2796ed6c56aec"
    hash102     = "3c864fe9c58b538106cc919f75ef7f8b9e9f346a5f82704b88d5e39dd89d4674"
    hash103     = "5df2db0c966de090443fd13bce24df4503a6b803afc5980f1ed4a6a50ab5b781"
    hash104     = "e206e6fff855d6e69873a641c42ee346776a280eda960d36c53b8f52bb76d988"
    hash105     = "abd60697412f930919b7d6a343efa1533944fca882d2652b0cde147e7d81469e"
    hash106     = "13a572b4043021fdee8d11bd11cd4035a3eb261b1195c0e9ea094d489a26b4e7"
    hash107     = "c613ba32bf4d0b5bb53288ba1d3c4dc5a21eea1154c9ac2adb6d6ada57ca49cb"
    hash108     = "67163fd4890322a3a8683e7fb949ee70038c99c839288eaa3efc9adeb8755a87"
    hash109     = "5470d77463af637dc3987743de86e1bccd2d17edf6e91dc168e9d232a5e44422"
    hash110     = "b70c49be794b2989fdaed0e3a21dbaaa15dfd74ef4e84a4363078b0c58919d62"
    hash111     = "22bbf5b7705db3366d319868c14f41e15984e9f36e8039b4ae27cdd02ca5c123"
    hash112     = "96baaed39178e9da6650432abf91af781642ddcda26c7143389488533ee3a5a8"
    hash113     = "df03ccb514c47a013a1abef17114a99b2d59f158a0b387bf57495e402681d708"
    hash114     = "848c2dcfbc9b31e6e1b519ee4238f40ffa01d4f2aa2b552ffb551728183639cf"
    hash115     = "966a136b07ffdc5c144098d29315b8245b7c3d4f7f751666738823d0ad8f8e0f"
    hash116     = "055898260c62a1de24b378e98e5b4e3d165477c5bb8f1ac5d8da39831648ebfc"
    hash117     = "1efdf4abe8a7052addd0d062a052cebc8cc4d6f3afe8a5a14901a73f7d4c73c6"
    hash118     = "f6c9b0408836baf5b0c766ec73fd40848d3690febc08c00f798ad17e3d1545a7"
    hash119     = "40577242629602dd70abb709742a710b5e831c40886b02308fe9f54f70978427"
    hash120     = "b0b93456991cedc6a9691d0fd380cc7edf2f95961ac5c7ba358e4163e00779ec"
    hash121     = "3a559a4e7ccb58bfa1758bf25a4855019540d543d3142b8276b34e026341d783"
    hash122     = "6ad7dd2db5ccd91328dab1196137366982fe7a93c52e1594d65fc9f601d9d977"
    hash123     = "d3b19d3459300092539e4f2bad2f6c925e05cf02a8e35c558130af21967059cb"
    hash124     = "094cfcc8f675173d03adee0e682e39b531ee79e2ac956a86cec92b776f78ce0f"
    hash125     = "8c845abed02522428a0485980031160b5fe73e6fe01fdcd3bb22a4fc6f04709a"
    hash126     = "bfc9a2774d8146d5796243bd4ff70fd6cecfa5a6defdd5d536766f7f51d0deb0"
    hash127     = "30465401da0b6c350482c01d958fdbd9e7587878bb735b986d5807badf6105d2"
    hash128     = "6896dc01f41fe25ed5f6941b59f7d9a63227b9fc16f0739274d520451956e75e"
    hash129     = "e84048110bb8e4fbc4f189dd091080b12159e2d9070a9b43cd5d2ccd031cc143"
    hash130     = "1d26812bce28b7bec5cdd5140a24b0f07e5e10bf1874c2e11f81e7175630445c"
    hash131     = "dd0f98c12ba21d496a92b348b94814254b8c49f8bceb6f33a81d9923f416e58e"
    hash132     = "f004ce7726dc99fd21df4fd5669955b8fef98450dd54bf6b727aa0c078dd807a"
    hash133     = "d383617628d0cae8ad97188b354a2d047f1b5c020abac1d0ec5dba282dcafbe7"
    hash134     = "0e1628cd0bb4169ae9ac79d123f414976021278cbe1f7534bc2efb8872602928"
    hash135     = "21abdb2344e11f112b46de8d4cd60bc6237e6b9f3578e2f1c9dcb7a65adb5515"
    hash136     = "896e4313c26d3081d7da94cbff5e546a31dd55d8164081502e6f47206a25000f"
    hash137     = "1f222c3854826b29050a2bae19cac881b3db501d6a830287f3d4dc5e64dbbf3f"

  strings:
    $s1  = "MdChipsCtrl.prototype.chipKeydown = function (event) {" fullword ascii
    $s2  = "  if (this.getChipBuffer()) return;" fullword ascii
    $s3  = "function MdChipsCtrl ($scope, $mdConstant, $log, $element, $timeout) {" fullword ascii
    $s4  = "  this.userInputElement = null;" fullword ascii
    $s5  = "  this.userInputNgModelCtrl = null;" fullword ascii
    $s6  = "nAmnImXCA.onreadystatechange = function () {" fullword ascii
    $s7  = "  this.deleteHint = 'Press delete to remove this chip.';" fullword ascii
    $s8  = "  this.useMdOnAppend = false;" fullword ascii
    $s9  = "  this.parent = $scope.$parent;" fullword ascii
    $s10 = "  this.ngModelCtrl = null;" fullword ascii
    $s11 = "  this.$scope = $scope;" fullword ascii
    $s12 = "    case this.$mdConstant.KEY_CODE.TAB:" fullword ascii
    $s13 = "} catch (MjmHlMXm) { };" fullword ascii

  condition:
    ((uint16(0) == 0x657a or uint16(0) == 0x0a0d) and (8 of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

26b130af-27ce-492d-b48e-cdbed50e22ee

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion