_20160921_034dbd5881bc0324f5773d7774d981c4_20160921_03b650867a39_3196

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files 20160921_034dbd5881bc0324f5773d7774d981c4.js, 20160921_03b650867a3952f7709688e58e8232f3.js, 20160921_04e35734989b05b680234592aacc01ad.js, 20160921_052f92106046138b3c82e05878edd3a8.js, 20160921_05c83a67fb56c3e2f515dcdc094f3438.js, 20160921_063094039ef79437a260d3dde960797a.js, 20160921_06a2269d96cb1baf9f03ef4c6c30379d.js, 20160921_072d194212f8a9a2728f7fb6d5953933.js, 20160921_0d4a04b6f4795f89c068cce75e132259.js, 20160921_0de23a42684ac14027d562ff3e5fb6a8.js, 20160921_0ef3d27b58b620506f1d1320d2937789.js, 20160921_11c4976357ef8a651d058575507518ca.js, 20160921_1267df6ebcd72f6d98872f0680fda2dd.js, 20160921_15779a074d56c3a097b4f7014a2c30f9.js, 20160921_164a257da283d5c859dcaffb21bf752c.js, 20160921_17c44cf20b688f3f5be613056d39409e.js, 20160921_1a47c8a8ea95b60eabaed27e984edacd.js, 20160921_1b24f7151bebd3644ff0608076bd2de9.js, 20160921_1bb9bdcf05b8f8acd28d5286e804d5cc.js, 20160921_1e07803d7c44ae0b61b5ddf189c80675.js, 20160921_203e0165d7eb1b32389bd0efd4bc9546.js, 20160921_207d0a8168d3fb16019724b9f72c41ba.js, 20160921_20daf816cda5af37e984359023f15db2.js, 20160921_214342143d6b7e971a1c8d2679379cb7.js, 20160921_215dd4f9feed109fed37b9c9dabdf1c2.js, 20160921_2195f5432b2fe0ac8f6e44e98fb2fbaa.js, 20160921_262709d34b477380050375a3b5b2833b.js, 20160921_26653257e0da59c861fc658d3bccdafd.js, 20160921_2b38530ecae3735e98453e56dd7a0292.js, 20160921_2b890152a974503e2dcd034f2b4084b0.js, 20160921_2c106cc001daa2dffdfde7e2aa5c908b.js, 20160921_2c5e8ccbd48636e7c625aae6ef954560.js, 20160921_2f8fa7cee8a6f4f78978b7417f3f700e.js, 20160921_32a3b245a67cd982da1d38f57645b403.js, 20160921_35613f26ab8269650aa877fd5af3e43b.js, 20160921_35d4c12af7a9481959a41a055c396673.js, 20160921_3688778166acb8f4f21b3c1d67ada442.js, 20160921_378cbd2e27643682973c633e59454f9f.js, 20160921_37c1eae8c73482d7ccd62bb1c25f74b0.js, 20160921_3823f4aff4d341a62056d936e59de44c.js, 20160921_3b7ec37cdbfac434e32c8743c60228af.js, 20160921_3d83b7982fc59266194f048e87fb066d.js, 20160921_3ec558d1fbbb49dae502fbac7c879ad5.js, 20160921_4031e49cbb76e44dd58fa572b63a00c7.js, 20160921_41f7b3abc606ff1ddad7593361eaa449.js, 20160921_42353ce257534ed06a8c73cebdde12dc.js, 20160921_44880573519212a90b7d910319fc31d8.js, 20160921_460a913db46b41c41035cc210ed5fba0.js, 20160921_4809ff2679793c2b9af03e18ec3702ef.js, 20160921_48288731baa006b25b4e98b12520da2b.js, 20160921_48b0ab2357d6a2640d84157783389f85.js, 20160921_4bad0ae96eb9fc3a1c603846a44ffe13.js, 20160921_4c2bf112991da80cf65c9f462d7503be.js, 20160921_4cbbeff2b84f01cc3ab55f4eb29babb2.js, 20160921_4cda342a49d7c489fce63509619cc08e.js, 20160921_4d30edc3a4e3226feee5b6289df9e399.js, 20160921_4e6afd7ea6614e65fabdc4281ed92b34.js, 20160921_4f1da2d661fb97b4733f3fbf35efff6c.js, 20160921_4f8422c91e79e3073e201b0b279b1fbb.js, 20160921_4fa304d7c11deb5fb9cd6514d5a983de.js, 20160921_50b14bf13c50bc31f09e3c583e1d422d.js, 20160921_510713862e5c8c05841e5272407127f3.js, 20160921_515291b3ed13de9fe2933a326bc71920.js, 20160921_515ffdda2060abfddd0b1faaa82a6279.js, 20160921_5230866e44eda4e054d929933fdfdae1.js, 20160921_52ab3697b827675e3be965f7171e236d.js, 20160921_52f9b0fa9588abb39dc8ffa331cd277b.js, 20160921_531eaafa1b0a00d86f2203fbd289dd63.js, 20160921_56567a449e5ae44cd4a4e62bb55e63f3.js, 20160921_58b4526aa2dc68b6db4250cf3153d1c5.js, 20160921_5a42d0e1880d178346694a30bc112076.js, 20160921_5c25506bc44b50a0c8028dec6521139d.js, 20160921_5cabcf77c626e288d5cbd9104a914ae8.js, 20160921_5d253f3fb31881c7c27141d74e02cacb.js, 20160921_5e30fe0c691277f3c6d0814d796ba918.js, 20160921_5e9244484429cd897ec88fe97140c29c.js, 20160921_5ed9729c3ab2cb9d37d8a088af1aba59.js, 20160921_5f040a1454cafc62100cb4449da0b7e2.js, 20160921_5f7be0b4d162caa40e1fc5a06f9f867a.js, 20160921_5fbbbcb8f403a68df153b90d52e5fff9.js, 20160921_627f79d589bde52c443bc2d40f887ced.js, 20160921_63a82ecb2e4eb3b0dd878bbec885c469.js, 20160921_64060d97e498db57bf68dbb08be86bba.js, 20160921_64fd82bf037f1ee6b74269456349f2e6.js, 20160921_65d76a5539546b98145997b9a44c1a09.js, 20160921_67db5ecea174c85a1df44685d8781acd.js, 20160921_6a795b29889480550a8440815b06fa7d.js, 20160921_6bf1e6b71f68264911cd95f601a6cc98.js, 20160921_6c49e33f1abb3ca2b0ff12a4878e38c8.js, 20160921_6d7b654a484acab4abb3060ebc68a164.js, 20160921_6db2cb585eb933d83d07b47d979b00ec.js, 20160921_6f8e01604e95009c9405a4a9c31cc901.js, 20160921_6fabf8ef6df7ba14509fab6de95d721f.js, 20160921_70b567ca258b3c505e14f3c712366f09.js, 20160921_70d636d209e6f109a21746567376cc81.js, 20160921_73310531aa4a1df7337a6ef42003ce5e.js, 20160921_73e0cbee151147d27e01ecc015f640b4.js, 20160921_75e390c1072ba7a2cace860dd09909b9.js, 20160921_783ed6ff0d6e1cf80c95099c29564ec0.js, 20160921_78bd4256ddc0b384791a12e8ab1fd8a4.js, 20160921_7ab823078d2353d978403d071ad27626.js, 20160921_7b23bcfdd1289634cd9a4c73f4cbb144.js, 20160921_7c5b5eaba938fa91eb6a9414212e13f9.js, 20160921_7dec24f022af3c1ffe46748172dd6cad.js, 20160921_7e15ac2755366d4644a83de8ec9c1a47.js, 20160921_7e2de7c26f136a1a958818752613cac3.js, 20160921_814859e3f9dab39a18edf940d1dd5650.js, 20160921_82861e992460412d02ca3f987da7d467.js, 20160921_85f2776f4fe640d2373f51ddbc697659.js, 20160921_8644cb559dff4747b398e56be3b4ea85.js, 20160921_88a4a74b87ab9fd3fb3dd307f9d7213d.js, 20160921_8acd2bde0828f30802ece6249f9b9483.js, 20160921_8b9d3c425718975422f8fe0d71119686.js, 20160921_8c8c9fad8af659443108d1078847a668.js, 20160921_8dce9d2aa0d1e296bbcc31a437e35a45.js, 20160921_8f9d19bbb031c21665ebbafad8d5ab55.js, 20160921_910cd79d8583d0c6c23bd93547d341fd.js, 20160921_91424e3b4f105c156aa0fa6f22c2306f.js, 20160921_91734b00fd54cd3dd10c5f20c35d7864.js, 20160921_91af5c220d1ea27d72d05f472ba8fa16.js, 20160921_93920c7f8d8dcef0135d270226e913f5.js, 20160921_97811319fb50bbd834b521ddcbb35712.js, 20160921_99220520e87414c0f2e1267cf4078a22.js, 20160921_9b80c329004df146d978cb7b31b22c05.js, 20160921_9c64236400e63181393ce4bc58f634a5.js, 20160921_9e9f1aaa0e051c856253652c93b64496.js, 20160921_9eb4e3262a9bc5c5f03ba0b7b62a3347.js, 20160921_a0b892850e7511a70b7c95d4603de0d8.js, 20160921_a160e4a385807ffcdde4f99a0c57b6b2.js, 20160921_a210d5e93bf8b06dbd0a1b262abe210f.js, 20160921_a2f8f3f44ef6a3341feac8fb57e829ce.js, 20160921_a6679b5a153c4bb3f7cb9fe7c02dc710.js, 20160921_a7daa1622ff2bc3dccfc20f622902f7b.js, 20160921_a8b3df7e98e8a886568b517b6d357d72.js, 20160921_aab5fb25ea8971982ac223655d50aba2.js, 20160921_abc9044816c2455dc24ac338746b6bd5.js, 20160921_ac32e5db1761db7bcee12f6443e4be71.js, 20160921_ad0fbcfca87e48302530672c4ceab093.js, 20160921_af22e174703ebae0fa1368fd471dba37.js, 20160921_afb633ee817d9b15b91ed82a059939fc.js, 20160921_afee44f6d8e742fd9b103fa8b026b3b3.js, 20160921_b091a235428e4f2a03a39b034feca4b8.js, 20160921_b0c04db09e980eb82ccee9091ca50467.js, 20160921_b1a0d856c15e8cb36e6ba699332db942.js, 20160921_b23a0d871d76c64a3c71f0b0f52faaa8.js, 20160921_b6d1e9aee3a026c6f266b107f0b88f18.js, 20160921_b714100d69b955de920a302ff8bef7db.js, 20160921_b74bfd3dc7404d3d5a6512718aa52504.js, 20160921_b9eadd20f28216849138290cb6dac4de.js, 20160921_bad084fc8365d25463811ce32bf91ceb.js, 20160921_bd40742bedf80aa0091b1fafd0a7ba4b.js, 20160921_bf6b3f12d2bf727319a9cd8aa9a170cc.js, 20160921_bfdb187f27d136f64e05f0dcf2ee4914.js, 20160921_c07f026b9458324f489ec08b7859e758.js, 20160921_c42fb5c75aea2648513013ad2eed9aaf.js,...

rule _20160921_034dbd5881bc0324f5773d7774d981c4_20160921_03b650867a39_3196 {
  meta:
    description = "datamaliciousorder - from files 20160921_034dbd5881bc0324f5773d7774d981c4.js, 20160921_03b650867a3952f7709688e58e8232f3.js, 20160921_04e35734989b05b680234592aacc01ad.js, 20160921_052f92106046138b3c82e05878edd3a8.js, 20160921_05c83a67fb56c3e2f515dcdc094f3438.js, 20160921_063094039ef79437a260d3dde960797a.js, 20160921_06a2269d96cb1baf9f03ef4c6c30379d.js, 20160921_072d194212f8a9a2728f7fb6d5953933.js, 20160921_0d4a04b6f4795f89c068cce75e132259.js, 20160921_0de23a42684ac14027d562ff3e5fb6a8.js, 20160921_0ef3d27b58b620506f1d1320d2937789.js, 20160921_11c4976357ef8a651d058575507518ca.js, 20160921_1267df6ebcd72f6d98872f0680fda2dd.js, 20160921_15779a074d56c3a097b4f7014a2c30f9.js, 20160921_164a257da283d5c859dcaffb21bf752c.js, 20160921_17c44cf20b688f3f5be613056d39409e.js, 20160921_1a47c8a8ea95b60eabaed27e984edacd.js, 20160921_1b24f7151bebd3644ff0608076bd2de9.js, 20160921_1bb9bdcf05b8f8acd28d5286e804d5cc.js, 20160921_1e07803d7c44ae0b61b5ddf189c80675.js, 20160921_203e0165d7eb1b32389bd0efd4bc9546.js, 20160921_207d0a8168d3fb16019724b9f72c41ba.js, 20160921_20daf816cda5af37e984359023f15db2.js, 20160921_214342143d6b7e971a1c8d2679379cb7.js, 20160921_215dd4f9feed109fed37b9c9dabdf1c2.js, 20160921_2195f5432b2fe0ac8f6e44e98fb2fbaa.js, 20160921_262709d34b477380050375a3b5b2833b.js, 20160921_26653257e0da59c861fc658d3bccdafd.js, 20160921_2b38530ecae3735e98453e56dd7a0292.js, 20160921_2b890152a974503e2dcd034f2b4084b0.js, 20160921_2c106cc001daa2dffdfde7e2aa5c908b.js, 20160921_2c5e8ccbd48636e7c625aae6ef954560.js, 20160921_2f8fa7cee8a6f4f78978b7417f3f700e.js, 20160921_32a3b245a67cd982da1d38f57645b403.js, 20160921_35613f26ab8269650aa877fd5af3e43b.js, 20160921_35d4c12af7a9481959a41a055c396673.js, 20160921_3688778166acb8f4f21b3c1d67ada442.js, 20160921_378cbd2e27643682973c633e59454f9f.js, 20160921_37c1eae8c73482d7ccd62bb1c25f74b0.js, 20160921_3823f4aff4d341a62056d936e59de44c.js, 20160921_3b7ec37cdbfac434e32c8743c60228af.js, 20160921_3d83b7982fc59266194f048e87fb066d.js, 20160921_3ec558d1fbbb49dae502fbac7c879ad5.js, 20160921_4031e49cbb76e44dd58fa572b63a00c7.js, 20160921_41f7b3abc606ff1ddad7593361eaa449.js, 20160921_42353ce257534ed06a8c73cebdde12dc.js, 20160921_44880573519212a90b7d910319fc31d8.js, 20160921_460a913db46b41c41035cc210ed5fba0.js, 20160921_4809ff2679793c2b9af03e18ec3702ef.js, 20160921_48288731baa006b25b4e98b12520da2b.js, 20160921_48b0ab2357d6a2640d84157783389f85.js, 20160921_4bad0ae96eb9fc3a1c603846a44ffe13.js, 20160921_4c2bf112991da80cf65c9f462d7503be.js, 20160921_4cbbeff2b84f01cc3ab55f4eb29babb2.js, 20160921_4cda342a49d7c489fce63509619cc08e.js, 20160921_4d30edc3a4e3226feee5b6289df9e399.js, 20160921_4e6afd7ea6614e65fabdc4281ed92b34.js, 20160921_4f1da2d661fb97b4733f3fbf35efff6c.js, 20160921_4f8422c91e79e3073e201b0b279b1fbb.js, 20160921_4fa304d7c11deb5fb9cd6514d5a983de.js, 20160921_50b14bf13c50bc31f09e3c583e1d422d.js, 20160921_510713862e5c8c05841e5272407127f3.js, 20160921_515291b3ed13de9fe2933a326bc71920.js, 20160921_515ffdda2060abfddd0b1faaa82a6279.js, 20160921_5230866e44eda4e054d929933fdfdae1.js, 20160921_52ab3697b827675e3be965f7171e236d.js, 20160921_52f9b0fa9588abb39dc8ffa331cd277b.js, 20160921_531eaafa1b0a00d86f2203fbd289dd63.js, 20160921_56567a449e5ae44cd4a4e62bb55e63f3.js, 20160921_58b4526aa2dc68b6db4250cf3153d1c5.js, 20160921_5a42d0e1880d178346694a30bc112076.js, 20160921_5c25506bc44b50a0c8028dec6521139d.js, 20160921_5cabcf77c626e288d5cbd9104a914ae8.js, 20160921_5d253f3fb31881c7c27141d74e02cacb.js, 20160921_5e30fe0c691277f3c6d0814d796ba918.js, 20160921_5e9244484429cd897ec88fe97140c29c.js, 20160921_5ed9729c3ab2cb9d37d8a088af1aba59.js, 20160921_5f040a1454cafc62100cb4449da0b7e2.js, 20160921_5f7be0b4d162caa40e1fc5a06f9f867a.js, 20160921_5fbbbcb8f403a68df153b90d52e5fff9.js, 20160921_627f79d589bde52c443bc2d40f887ced.js, 20160921_63a82ecb2e4eb3b0dd878bbec885c469.js, 20160921_64060d97e498db57bf68dbb08be86bba.js, 20160921_64fd82bf037f1ee6b74269456349f2e6.js, 20160921_65d76a5539546b98145997b9a44c1a09.js, 20160921_67db5ecea174c85a1df44685d8781acd.js, 20160921_6a795b29889480550a8440815b06fa7d.js, 20160921_6bf1e6b71f68264911cd95f601a6cc98.js, 20160921_6c49e33f1abb3ca2b0ff12a4878e38c8.js, 20160921_6d7b654a484acab4abb3060ebc68a164.js, 20160921_6db2cb585eb933d83d07b47d979b00ec.js, 20160921_6f8e01604e95009c9405a4a9c31cc901.js, 20160921_6fabf8ef6df7ba14509fab6de95d721f.js, 20160921_70b567ca258b3c505e14f3c712366f09.js, 20160921_70d636d209e6f109a21746567376cc81.js, 20160921_73310531aa4a1df7337a6ef42003ce5e.js, 20160921_73e0cbee151147d27e01ecc015f640b4.js, 20160921_75e390c1072ba7a2cace860dd09909b9.js, 20160921_783ed6ff0d6e1cf80c95099c29564ec0.js, 20160921_78bd4256ddc0b384791a12e8ab1fd8a4.js, 20160921_7ab823078d2353d978403d071ad27626.js, 20160921_7b23bcfdd1289634cd9a4c73f4cbb144.js, 20160921_7c5b5eaba938fa91eb6a9414212e13f9.js, 20160921_7dec24f022af3c1ffe46748172dd6cad.js, 20160921_7e15ac2755366d4644a83de8ec9c1a47.js, 20160921_7e2de7c26f136a1a958818752613cac3.js, 20160921_814859e3f9dab39a18edf940d1dd5650.js, 20160921_82861e992460412d02ca3f987da7d467.js, 20160921_85f2776f4fe640d2373f51ddbc697659.js, 20160921_8644cb559dff4747b398e56be3b4ea85.js, 20160921_88a4a74b87ab9fd3fb3dd307f9d7213d.js, 20160921_8acd2bde0828f30802ece6249f9b9483.js, 20160921_8b9d3c425718975422f8fe0d71119686.js, 20160921_8c8c9fad8af659443108d1078847a668.js, 20160921_8dce9d2aa0d1e296bbcc31a437e35a45.js, 20160921_8f9d19bbb031c21665ebbafad8d5ab55.js, 20160921_910cd79d8583d0c6c23bd93547d341fd.js, 20160921_91424e3b4f105c156aa0fa6f22c2306f.js, 20160921_91734b00fd54cd3dd10c5f20c35d7864.js, 20160921_91af5c220d1ea27d72d05f472ba8fa16.js, 20160921_93920c7f8d8dcef0135d270226e913f5.js, 20160921_97811319fb50bbd834b521ddcbb35712.js, 20160921_99220520e87414c0f2e1267cf4078a22.js, 20160921_9b80c329004df146d978cb7b31b22c05.js, 20160921_9c64236400e63181393ce4bc58f634a5.js, 20160921_9e9f1aaa0e051c856253652c93b64496.js, 20160921_9eb4e3262a9bc5c5f03ba0b7b62a3347.js, 20160921_a0b892850e7511a70b7c95d4603de0d8.js, 20160921_a160e4a385807ffcdde4f99a0c57b6b2.js, 20160921_a210d5e93bf8b06dbd0a1b262abe210f.js, 20160921_a2f8f3f44ef6a3341feac8fb57e829ce.js, 20160921_a6679b5a153c4bb3f7cb9fe7c02dc710.js, 20160921_a7daa1622ff2bc3dccfc20f622902f7b.js, 20160921_a8b3df7e98e8a886568b517b6d357d72.js, 20160921_aab5fb25ea8971982ac223655d50aba2.js, 20160921_abc9044816c2455dc24ac338746b6bd5.js, 20160921_ac32e5db1761db7bcee12f6443e4be71.js, 20160921_ad0fbcfca87e48302530672c4ceab093.js, 20160921_af22e174703ebae0fa1368fd471dba37.js, 20160921_afb633ee817d9b15b91ed82a059939fc.js, 20160921_afee44f6d8e742fd9b103fa8b026b3b3.js, 20160921_b091a235428e4f2a03a39b034feca4b8.js, 20160921_b0c04db09e980eb82ccee9091ca50467.js, 20160921_b1a0d856c15e8cb36e6ba699332db942.js, 20160921_b23a0d871d76c64a3c71f0b0f52faaa8.js, 20160921_b6d1e9aee3a026c6f266b107f0b88f18.js, 20160921_b714100d69b955de920a302ff8bef7db.js, 20160921_b74bfd3dc7404d3d5a6512718aa52504.js, 20160921_b9eadd20f28216849138290cb6dac4de.js, 20160921_bad084fc8365d25463811ce32bf91ceb.js, 20160921_bd40742bedf80aa0091b1fafd0a7ba4b.js, 20160921_bf6b3f12d2bf727319a9cd8aa9a170cc.js, 20160921_bfdb187f27d136f64e05f0dcf2ee4914.js, 20160921_c07f026b9458324f489ec08b7859e758.js, 20160921_c42fb5c75aea2648513013ad2eed9aaf.js,..."
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "82795298a84df6fa0b0e45225727206f9a173f55589db6b76ab8df4198dc55c7"
    hash2       = "a775853212fe6663d7c077a64c0d4c851d4b7f261a6c0846b4552b556e12a5fe"
    hash3       = "6553e0c768ddf3ba1bc09a83e90e280707f7613c13bcc2b4bae89c9a347ee2f5"
    hash4       = "4812ea00b657b288e9ad51c72fcf466179e82a552fa3278fa9a896cc053c9fdc"
    hash5       = "0535a055f646391a67e495ab3466f375b47d00382cf1ac28c70355309533f19c"
    hash6       = "ce1eb4a08b98ec71f6759f87657e36ddf82182025b3e317c586fb55c186b9e6c"
    hash7       = "4904b4c397fdf3727eb6ad96b4ffc136ba26b2026b71428beeb74eac91fb976c"
    hash8       = "73c215f339e3128df4a73ba4ad5b1db80d6620de77bd285fef1d86107197eace"
    hash9       = "e80f63f8ef5a9b52f119cc58d120fd7d74784d15d23ddc339948cb92383c800c"
    hash10      = "7237be0906b854ec3890943cde0c9a731117b836078be4256fe37413dd372a66"
    hash11      = "5e3dd80c1e1b35ce856eadc159cc2a53dce2adf2f9207a618bd73679e9d868b7"
    hash12      = "aee597813bd24d68729b505b5e718b120274cb1db588f64e61c1a4eb85f6bf11"
    hash13      = "bf733ba7fbcc89931fdde522ae98997cc24f7014bdd535a49fc0223e8d0b0a2b"
    hash14      = "aac4640bf20c6d05cb7c57f9703d60beee7ea9dfc98b851cabc5976b3d117b8d"
    hash15      = "36edb416a5f8703ead3fb8f8fbb7a0fb98ac21c559eb20558b33460ba9dfc9a0"
    hash16      = "0a10c81cc5c3cc9eb38f73af3b77ed314fed047818a2410613c91431eee6bee1"
    hash17      = "b5a5f062c9d94508668ecb987b9d855fefbcdb1cf10f3efded37c21fc6893b0c"
    hash18      = "33f3c9ce370f10b37d492f9d2cda8602f5d90eb1573205e1a4da03da8066ff45"
    hash19      = "3937dec3a8d946e214facedccfe7f35e65dbd446a77d077a09996638d7524444"
    hash20      = "1a50e95e48071d391fd7544518c3c0394e9cde9051c76cf311992966b7414cc8"
    hash21      = "b9112c30f4cc79af123a3f3e13b1e01a29f2419955988701cb25a673fdfe684d"
    hash22      = "90b56af8225bf5087b8c8ea31ab85a80e0951c3a32b8a0a0be7e09ef2efc8172"
    hash23      = "a45ccf6470d4ee194ed220125c42c5ac5d7c4b8a46cce738c6d12e9cc0bafea8"
    hash24      = "8dcc208c118a95c2f88df14e844ed832ee1e06bdf992329e8a721bd7aaa936e8"
    hash25      = "710f88c7fda95a8d3e0e04de1ffd81606d227d249d76eb0d7fbeba7a0284a86e"
    hash26      = "8753bd153b88da9a4351b5d6a0111d7af66a0f18e8b8a42beee11ad2916dc183"
    hash27      = "2738de24af2af834f5ce43b4e99137d47cd1993ec0b6dc3c1071deb99efcd62c"
    hash28      = "1dff3cae9c135714cad3879ac1ef904841ec9264e3448106fbedd3b57ca11e97"
    hash29      = "46f1595f803e301ed13d99315b244aac664f908c0c0d8ab508c1d104bf7ae947"
    hash30      = "74075b371da5cc0281ecbcdc311542bcafb1a5daba17f8b3fafc81a88714f625"
    hash31      = "ca5356b92abf859d45d843749f45e5e06c7d045b4e7ea5d215ab87cdb8c8f66b"
    hash32      = "70244ca5fa124af09b1f94729567c09dbc52c05035ee7d20cbe87d35e1fe63c8"
    hash33      = "6410122a95cd840a4eef622389d8026475b4f6a156d4b5288cf227165c036c96"
    hash34      = "9f7e53a243b56341e3d17450083c46ba2a33141b25134577db086128321a8223"
    hash35      = "432da9fcdf6c0d62e24e70562f7949325e57abff120248541ccbdaf091d0a7f3"
    hash36      = "1c2412951fad30bb8b34aca279acd07c03a437936261b0d90334331b98cf1e99"
    hash37      = "03559b6095f398f17a62ec1f50c0a70c4b4074a67f6b8e3a51dfe026b238b085"
    hash38      = "8ce016002e44e1fbf4624122138e5a8b0261aff6487c52da0d644398da46a896"
    hash39      = "8e724c0f7c8722eec82dd0f37b13b38ab5c357aeccb2cc6c36efae80bae66a8a"
    hash40      = "d0b475c02138425371c1df69faa8ac5c3d739764950c4a65034372b4455ac04d"
    hash41      = "86390741cf6e610c2e526db749631548b514c268decade5a5870edfebb141d4b"
    hash42      = "f14778492463eaa86aec448221dcd9e88defb1f42404b2b80d42b0d0c41ffa66"
    hash43      = "71f652a0e52aa70fe3179b7e90dff8ba55b85022fbfe5d5d2db1bf6f32a04513"
    hash44      = "42519dff3fd2ed2dc9bcd0f12a16fe310be93f90efd5d40110f336dc5010d050"
    hash45      = "53e06a7234c6522ba26a61e46d13312e1063594b0e33bec9fae49d2dc4b77c28"
    hash46      = "68261e17878fc3b618b0fec34ae97fb6fea1090c52fff206192cb972d23b2b35"
    hash47      = "8427ee610833efbf68884e3ec13c4357ae35e1aa0bf8ddc2ffe99b9a7f44fb40"
    hash48      = "99bd08fbf869b4c9520d81d5b17512d87856474b8cf260494d0c88a47e0d37c9"
    hash49      = "2c2d464143196a0237396460d274213cf5b3de772f4205aee0525b67ca1bfd6c"
    hash50      = "ce917015afcf31459cc47b8864f85394a756701f6338f6a2cbe079779c3ecd43"
    hash51      = "fee375f08ae5432a47f4a4a8fefed2cbbb6e1484d8914742942e60f703c8f7f0"
    hash52      = "a99f235f58613323f5c58def3503d47959f4a77f0697e30c75b6d221c4b40806"
    hash53      = "f2e5ee0ebdd9746b0055379071a47434cdd28be3788ad04e886f8bd01e0746c1"
    hash54      = "698c46439ef391a98b04ac1a2759ff8a84b30a9c444a7575c5290eb0aa4b66b9"
    hash55      = "cabf2bed3c4b1c46c86905c48d0ce38dc15e155546fd36ce4d681314485c6aeb"
    hash56      = "d28b5e72375443a9ef1a43fee185a0e5563672a0764eef4f58a90a27302162ea"
    hash57      = "2af9fdbe6325bb563ca12f506f0bc07133a1951c94c5f0bd5dced26a493d8e18"
    hash58      = "57198460b755f2336c23ed27d26f09514db08ab180e216293a853489286f4ff2"
    hash59      = "f1cc54af4d213d0cd37c81b29d25c29bf00892e3458ef2e236563c69fd58b94a"
    hash60      = "cef5a1e67f57d9f24065ff0145644e0185df6abc29113310c6782b30e0a9236b"
    hash61      = "b9aab1a9f889ee14c72c5b3718595b8a66b04e749b1cb75ceb264874c173aeab"
    hash62      = "9f9cd81d24cdba49fd83fed4aa0c3ce028729b44e223720bae200336b5992e5e"
    hash63      = "6deef7cfd2f4743f897d0043907a6481545f6a96b01c76c7d81d02348a2a17e0"
    hash64      = "e66d45deceae626136192ed805b6d7d4dc1cb2be6956a53702353ef221f89c18"
    hash65      = "4b11d10d6c2a935fa29f47c13ee54d426aac8d667f3bc2f79681ac7e4d365c76"
    hash66      = "90a876a1d91ded80337b02adca1c227fdf5b5a96381a62397d3485e5e8ea108b"
    hash67      = "7a84827d35b2b189a2872cc9d16d3ab675e3ec50c203690e75cf66ab54056731"
    hash68      = "d28500022264ce61d9d988db6f8ddee46acc7dea6f898510f532ee48f87a0c93"
    hash69      = "e0950a0ccf96b116ed17c3fbaa99325e34f0b717e3e354bd1f926eee8465c6a7"
    hash70      = "8879fc10234de7d36f536a9cdb49bc5cf37dfb897d610b0eeba644033852dd92"
    hash71      = "ca8e81eec437e87b27dedb202751f13e736aa092e78fffde5fbf40616f2e3738"
    hash72      = "b6178db9a292199c6992547ad654bf7056fa7f33310f29988e468f0cad5ed707"
    hash73      = "9493e4251106014081e4b141c6296c51b00c9ba7a799bcb978ea6226cd127d34"
    hash74      = "ae85fe56260e8c9a1243da145f7594a08ac59bd50027af5e54b6d04e82f44e88"
    hash75      = "7cac2594d8c0286d3110fd3705816d41052df49790da39881cedd79b8cb5c6ed"
    hash76      = "002e6ee9d0d9e7f54ead7f8981f20be210819f7a75c52e3d1e91de2fd03ada17"
    hash77      = "c5908838424a9cae8eb5587cff7048056b427db1deb512dcbe9ca852a402e03d"
    hash78      = "0ffb0f3f8e3e8ace2b8b6c1bccf53c8b5a11fd2ed00ff3b54971e8b0ca5e139d"
    hash79      = "9a6e02fec1a6c5d0a6813da97edfb28eb017c5563b8e8c2205eb08ae1c6ec4e3"
    hash80      = "1e2661f95b6bb745bac719b1313cfa9a489ecd857f66bfe9fe5398391e372ca4"
    hash81      = "f23a9d984b71a422ca30ec7f94f4a4cb0a2303699dc80edbced4a4c608e370e4"
    hash82      = "0e9de62be8773f33e42da56c84c9c85d07f7c2616909543479f7803e6794a9ef"
    hash83      = "30a02b9f75ed0112affe2c698cfdbe2ec2a5bc4d8248ac34ebe13e072bd212f0"
    hash84      = "ba779a9cd5d48159c0b701ec2bc1832d098c0d5cf1f3a9429684810372bfa1b2"
    hash85      = "0a1b81d7435f521382a4cec07d80cbc8fe75f2ebac92fb6c4d105b19ec098560"
    hash86      = "240705f58012306a07f93042172cd93e3bba16b8c9e0a9dd928f169ce059bf22"
    hash87      = "fb5890246703edf23742bd2e821c50d1610d87dc3d17ff4909414fae3bd26d96"
    hash88      = "3380b40f96f91c57b2ab0fcc0353b9938919cdb262f565dd84233769eb1a8842"
    hash89      = "b2c5f6e5a1ebce2cb0eb54f0d28ea21ab88b07dc646376bb3fc5ce29af1615aa"
    hash90      = "2840e0696eacd7118885eaede05c3ef29d9cc682ba227d7797a60be4872d86c9"
    hash91      = "b98c5953d102d77c680619bcfd3ba762b3a28a14355f65c479544c745a7c9a12"
    hash92      = "5324b4f5c36c3ebb1567659beec8a89d0c1c954daf56a6131f3aebe46384317b"
    hash93      = "a6962383b3793edac58fef061128f9047afb39eaa645d3f7977a775ceeb02e56"
    hash94      = "8cf06551c554a2db81fe1bf37b069b40e558f931913e7d2572bdd18b36f57c73"
    hash95      = "6e26044e7a07a5a675f3b388e6309b138b9e7a1aa61556485f444025164a158e"
    hash96      = "c1f6942ac4bb494bebef47181bbb9c9fe04d3d155e4bc18b2ff21e74c6592f78"
    hash97      = "0ad4b632b07e5e4526b874097c116e5183b155ec4b9cf40e3f13ece0ce027344"
    hash98      = "0de804f026f55adb786d09f07b7f96808213c0d0809b41d659332d25a2645536"
    hash99      = "91c59edb0e2a43b5780f865f87a5462b55dab1281045b0a38b38ac155b7d34b6"
    hash100     = "c64d081235a424574ab6bbe64470cbee71a700f01b638afac6d0954ebc5cc0a0"
    hash101     = "32692e808eb087cfb43babd004792978a1918b8bad58bd7576ad1e83a17c97f8"
    hash102     = "7a94fbc46ac51a544406f9a59bf405cd1e19e8e6681d7feacbc81e5ab7d4a50b"
    hash103     = "9b25331c24a00cfccf7bf1604f7df1d245543734bf5553f0a7c3c911bb74cbb8"
    hash104     = "402e919998fdba69cb3992879db4f947916245c38915db643643952fa450e947"
    hash105     = "97eaf7c50f22bfc94f97a02e5e83a8f1fb3583717fb9f4a6666ae882ea4d6f55"
    hash106     = "540bec3c8538992ab2a631157eae2d03acb2afd24ba0842fcdbbcd7a792913b3"
    hash107     = "c61c4f66b5cb5b5fa606db7d7b914cbb3fe4d8f1b8ae72ca6b16b707c575cfb0"
    hash108     = "2ed6678fea06b2b66ef873575f3af904bb62f54913a37c77387208fd53da33ba"
    hash109     = "0604503e68d6aa73ca3bbdb29b958ea47ad4c81b2f77ad9db2b0e8467b1c870d"
    hash110     = "d92ab3635a987485347ef1a40e84d56adf54d5da5be50490856e0386b6ccabda"
    hash111     = "33ff531b193580829a3217137df52750b8df810994123bd1d02bfced3fa6c2ce"
    hash112     = "9cf59fc7ffd1ec7428d01db709ab365cf4dfe41d386ebb308b8bad860ff941b1"
    hash113     = "523032dc97c061d21e22a215d1568aa470cd8d5f46ddb3bae63dafcde8db3687"
    hash114     = "05c35ee4072476c50081705469d125bb2570dea942839cab58bf87874667da59"
    hash115     = "26c784fc7a8e4ee1608e66a82f1ba134972418c5968433b39f54392e7f3de0f2"
    hash116     = "b4039cc962a684523fe76faba20cbc27d33e0e6b0c86feb67e04127cf37a2fc4"
    hash117     = "77a08a00002fdf0cdac8ee96f3ed542c8dcd2c5851f8c2feec648c8adedf7468"
    hash118     = "b4a035e38404ad09be99953980865cdbcda5dd05b664dff96722afb53b0c9e29"
    hash119     = "cdae8af0c395dfe20c83f759c05d2fd6ae2859606871798c6b3a7a12257c7f70"
    hash120     = "d8a5c3b8bd7307238c3f0a133635143674d5db84b7c5615a145a8bea310c68de"
    hash121     = "a340a8acce75472b10972c1d41244236fbd98f0f2ecd9effbe64bc76604b8eb6"
    hash122     = "4105b34a1f3797b1fc5f9b5d7f49d995c2796d5876f07b87b344f6c7e8c0625e"
    hash123     = "5b655a405ebc3a6ee1687faec5788f37e732bcfe1afd9f30936ca55a4983a755"
    hash124     = "d0ec644cd7307cbd280d369539e9834d3ad2ba0909b631b5a3640f8f6a1105d1"
    hash125     = "2b1d27f440a3f4232e02265ce38f6eee5a715bff67e056aca1a1c800909c0e37"
    hash126     = "150de993662365ce2c7407195d1e62da40d5d5ecc67a4a3eb34985123077ada3"
    hash127     = "03bf8e47f97cab996cc7f2d8147659dc1143ccbe1fd09af6b8689379f7263407"
    hash128     = "0b5459eb728a278a131a764184d1d333fcd3fc212087b66d9cedce792b1a2d7a"
    hash129     = "c3eeb2af6e453aec7ede2bba435e7dcf60f7497a94584d1908a2235d79c28a34"
    hash130     = "681408ae198939a760d376554e62f86e9d1fe2306266ffaee496dc9eed4d0687"
    hash131     = "619e82812300e58dd7cd06b8fbcf2f7e3f6757812cc075603c82363ab6481758"
    hash132     = "c54f97191e0c15791315cc1823b0fbce23679bebe5b1ce5c2b6b4895074c1121"
    hash133     = "4caa07134c114c6f14592ae1a6f87a08bd21b6048c96d44b5eb70d9762008059"
    hash134     = "0652be8fe8ee502a5c45d7c0d1b7f5ea93bd8633350801afbb4709b88afc93e2"
    hash135     = "0387ef653c0ac9c5d0aaf638bde80688e7b6b279a435dcab3ff679313abfab3c"
    hash136     = "2bb53920235afb1c2d16f013bc118d1df64065eefc10c1b2b9e7a4b133850850"
    hash137     = "c720e572402df240156cf5af93a10b135edc995ca3aaedbfe6a9673216f7c930"
    hash138     = "481451a3850055fd2d398d5707171f67d2aa3cd019214d6b67f539efc81ca7bb"
    hash139     = "24c1540f49c4fe83a182058f70751619567afa9e8884c1dee7ae13e5fad14a59"
    hash140     = "7a4e330bd3ec71aa3dc8fd3d5b2fa656b04d49cb5ee4e5478a50a6336c5bf9e5"
    hash141     = "dd1fb060f8cf9db47b88f548c50d48e0e942b01aac86e408632eb9f913c96480"
    hash142     = "c42887396845595b9d299a51d83fefe371bc73c7bfbcd3105457a9327da7e441"
    hash143     = "9e020a4a8174eebc9bdfd2c370a1a8a86e255e968f9dc218329e9d5912ba227b"
    hash144     = "88dbe0c95aef9105f735a6441467700856e7377cc24ac1dbd7d9bcd256b0aa29"
    hash145     = "02969139df11550b994530c0bcbc6d946b6e49105015e9475f5de3942d78e5a1"
    hash146     = "e95dafe7c61e6b4aa30cf1d0f5e7ac22599967edab3c0a7152e74671d99054e2"
    hash147     = "fc43d54db3c24d6f7ce2d47a45ffcd0768d5cfe90e405322e477be98fe4a8170"
    hash148     = "359d333ab8fc51d27349ecaec71f8baf8e8aafae5bfe2d6afd26f4ed76e802db"
    hash149     = "4859166acfe74b9a623acc55b045aff7a4c46e4f5c457bb304c5169c6e7fb4a9"
    hash150     = "047a9508e8bdaf65bc39b28d9eac8b287b7a434a3a0808290117a7b71d1d03f6"
    hash151     = "85233a675e78f03dbcaaf2a32253b0d4a36e5c5e7008041477e560a514d38729"
    hash152     = "6ff891fcf6c12c36bf13bc65b82adbb923eb443ffdabd587f48e44c93323b786"
    hash153     = "cbf2173e7b067de6ce6bf189ba38c78f3f0d97a7e6685c0191e08885badfeb3e"
    hash154     = "ea2be3685bc68d327f9689a9fc4de597314db751f1eacc3ff5fbee0dd0397db0"
    hash155     = "5c8cdf3dbb94e197c36e5744084d12e198ecdab7243d67654934aa1cc9bf7ae9"
    hash156     = "64cdab0c251929ea414823662957bad76268a8398b0c708715609f37e7070a69"
    hash157     = "650c20b763cdd9e1631c1f76f67b04a911cfce7996c1e9928b9c3b7fe1f8e7e5"
    hash158     = "cf3f9e3180d8fa16719dbea90d762850a1742512c7be6bc42325dc9e094add30"
    hash159     = "62a468202853ba6a8adb456e8c12b66f8794360c094a85e6d4d2cf43d13a75ce"
    hash160     = "27a20a400d7aa13737d230acf36a2170494c7da92e72552775d19562ba331fdc"
    hash161     = "1dfc225800b3b802cbdd9312a3198f5eb4bbcdb06d5f9ffd026bb3fb4f5cf4e6"
    hash162     = "80a0b2154f5b0c87fb7ba82fc32a74807761d038a93d6da45f835417e93af3ef"
    hash163     = "8cde265a6a44d9e9f86f351959c030a86800d101b5b5ca057ac1cdc5c5a1e38d"
    hash164     = "9dcc5774827243903cab74a4e9a77a6ec68f90a8c6ce60869e9bc7d13bcac921"
    hash165     = "65e6cb34b6f46aaa1020cec9a648634a1eceb7e9d6ad0387fc939923e8236594"
    hash166     = "72502e65294651208a74590dc961703c09931d4341f59214d7303b271ca8abd5"
    hash167     = "2c37b7e410e05a2e285f2d4909012cdefffdcc0d9e06b06aafce7aba5b9684f6"
    hash168     = "4500fdca6df5cc18d7f5e360c950817a72f82196c8ae55d8bcdf74d96a8bba21"
    hash169     = "e37cb576da589586ca091f887f2d941f81f58c7a8c3974b4e11928357dfee825"
    hash170     = "18a890096a5714e518b28d3f50f6487cfbc4164418daae1842b7d724e2c26bd6"
    hash171     = "50e80269adbbca38f500219eaf7cec16f396b3d8a7c56d342b2e4839819ea598"
    hash172     = "484cc3f4c9cc3a29ae3ad53bb6d47be99d119531836a636c664a77fc891b38fc"
    hash173     = "57a3f4ba7362a09dfecfe27f6b8517c8290bc04a7020f4bbe4e9200a42655be0"
    hash174     = "81cf54f681cedb1b59ee2e355f226c046ac83c55ad32ce5241949279bb194bf1"
    hash175     = "d93efcba4ba3ef570f21adda2cc5413ab9ed3865a53a97ad1e05113ebc7c4787"
    hash176     = "d527617da74d553b6d56b37f7b101c14280b85e5e40e1f565fe396f8b97b29a2"
    hash177     = "c005836c702d4e1615fb302fc6f799ca097db41daa5b8cf6a66e8874a454d65b"
    hash178     = "f1074dcd9f3ae62af13634c9f88af0a235b2e315a2697fc222ce96bad51ca1a1"
    hash179     = "b8484bab412a47fffb0a694f32ca5de3480841bd1c0806d0a7e6e86dfd21de6c"
    hash180     = "b87ae77185b5925bd9480daa9d4b74b2291cc670108bf85e0379579434ebff34"
    hash181     = "009074e75815902f1e36daa21c179598b761767cd8d92eb363f3541838abdbfe"
    hash182     = "372b553e13a1b2dacf2c8938d6c7953212ff8112978d88f8aa1425ffa2ef21de"
    hash183     = "70ad2f9c8f844d4c80b1d4ce0f71f62f74e64671ae11d2d3af8e6ec764993403"
    hash184     = "c36b557af1bcfc43e39bfaabcd74048c39fc37b5ac0e9561b161a6d3d2e54e76"
    hash185     = "e1cd4a36522d2ad8fc8435b6cb64d8e572d8b31d4203885fa375f539a3ea7891"
    hash186     = "768a9ba5aee8702bd0d4c71ccae6016847556423c2ece30b15169aaa7731f27b"
    hash187     = "efabdabbb3a7d8e1d713826868acadadd9ab03b4cb57f3799d6add11f212fdd9"
    hash188     = "b51d9165093e08385081a749ef6331a3556fe2739b6c8f85b62e7f6ec1b4f662"
    hash189     = "843cfa29e93bfa9adfe4410735aacbf939d01a404dc3c507c0562f478b65086f"
    hash190     = "1a813dda7d0088c45bb00563ea79982995ec1337c805380117fe705f80c51c64"
    hash191     = "dbd2ccfd17959ea084fe518e1748ca4f14e74a14593d7c157b17f4437f4336e3"
    hash192     = "30f2a7c2562ef79254c8129be50246b9c41eb24f000c8cfbd0f4f8c28b49b00f"
    hash193     = "7e7bb1d2ade80c23d5462f8e4a470a3c3245b07b8a709a3c911ff76a8c32da35"
    hash194     = "c85e7d8e5c1682f21f2d8c9a0e1f6039d583d7eda8276ca9ed3ed381fbde9a7e"
    hash195     = "1641412d2cba74b5cd1b4c4619c995601c42039d472339eb7cb10d97e1d47339"

  strings:
    $s1 = "nction fuck(){return \"IPu\";})(),(function fuck(){return \"XCr\";})(),(function fuck(){return \"FJs\";})(),(function fuck(){ret" ascii
    $s2 = ")(),(function fuck(){return \"IPu\";})(),(function fuck(){return \"Xw\";})(),(function fuck(){return \"ZLd\";})(),(function fuck" ascii
    $s3 = "){return \"ZLd\";})(),(function fuck(){return \"Mw\";})(),(function fuck(){return \"Ug\";})(),(function fuck(){return \"Dc\";})(" ascii
    $s4 = "n fuck(){return \"IOs\";})(),(function fuck(){return \"RAi\";})(),(function fuck(){return \"IPu\";})(),(function fuck(){return " ascii
    $s5 = " \"Xw\";})(),(function fuck(){return \"XHj\";})(),(function fuck(){return \"Ik\";})(),(function fuck(){return \"ZVi\";})(),(func" ascii
    $s6 = "fuck(){return \"Za\";})(),(function fuck(){return \"IPu\";})(),(function fuck(){return \"XHj\";})(),(function fuck(){return \"Za" ascii

  condition:
    (uint16(0) == 0x2f0a and (all of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

6f2f00fe-34c6-4c9b-9c3e-0c26904c86ce

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion