Prestashop

YARA detection rule by HydraDragonAntivirus · GPL-2.0
Rule Prestashop (No description metadata provided).
import "hash"
rule Prestashop: ECommerce {
  meta:
    generated = "2016-07-28T17:41:37.968993"

  condition:
    
    hash.sha1(0, filesize) == "a452c0fa253dc98ac038374eabda7a584696cf61" or      hash.sha1(0, filesize) == "3ac94ddbcae6c946cb6a07125ac9f9f0e548d433" or      hash.sha1(0, filesize) == "eb3eea89c40d6e0a71d18f75fe36361a996607dc" or      hash.sha1(0, filesize) == "92ca42f51f3aaea36e0e3c6ba4bbad8dcdd334fe" or      hash.sha1(0, filesize) == "e0480a54653a7be00c03d6ad3b20b856ecaf423d" or      hash.sha1(0, filesize) == "45329bf8fbed6e07169bfb1998383afbdf1927f0" or      hash.sha1(0, filesize) == "dd46d277fbf67156ccb3d9b66b2d56a1a4298e48" or      hash.sha1(0, filesize) == "dd469f741cc6614d74b6affecf08125cd9a0d3b7" or      hash.sha1(0, filesize) == "af90f72c45dd802a4818b19175212349e62f0b57" or      hash.sha1(0, filesize) == "0d02b500dec55c296e35609b344a017a62665851" or      hash.sha1(0, filesize) == "c4254197f75de7af77571abf5d8d4356a12642c7" or      hash.sha1(0, filesize) == "aec9cbd49ede5354b8cb2a10c3ef92d928fbabfe" or      hash.sha1(0, filesize) == "240cb8ff71cc91b2b0636c77e4714522131eba01" or      hash.sha1(0, filesize) == "e5614b2b765520386a4a2778aab8d504381602d1" or      hash.sha1(0, filesize) == "ec219db83b83912042740477acc7cc304e3b445f" or      hash.sha1(0, filesize) == "a35984b3c4fe0787f5bf5add97cf97a96f1f5d33" or      hash.sha1(0, filesize) == "84c7830bbb0ff4ba8d79644ea6abf3aeec93b734" or      hash.sha1(0, filesize) == "be7f535eac6a63d207bb873f49f3a57e9667e0f1" or      hash.sha1(0, filesize) == "a04b99dc2e88f35ea475e4f18671ccb76c312bb5" or      hash.sha1(0, filesize) == "ee2e386bc1a5cfc7cf20b7c6fed45bfee8502aae" or      hash.sha1(0, filesize) == "ce370dfd9f10189763e549c8cc3f62a47fd46d64" or      hash.sha1(0, filesize) == "86df5348fa8086ee123b20435d56b33a9bd366df" or      hash.sha1(0, filesize) == "ce5741a19f3c7686d0e5c37da57954e930366be3" or      hash.sha1(0, filesize) == "b99b3ab45c59b45e7306ab28f17fd15507b93bfb" or      hash.sha1(0, filesize) == "85d9bc8987f8ddcde06296623aa270c38004ca16" or      hash.sha1(0, filesize) == "6f3dc8c7b6e87b2a11b43e6c7de9bea082c89c1a" or      hash.sha1(0, filesize) == "8bdd94fe69af79376fa1e83290b7e9698786c22a" or      hash.sha1(0, filesize) == "2e34d46c435e61001e92d014251dd70fa203144b" or      hash.sha1(0, filesize) == "fd6d0ec0e53173ff70535e7ae26216e440fd0e9c" or      hash.sha1(0, filesize) == "42ba6141b60a2500e12cd3b523c41fe831576ccf" or      hash.sha1(0, filesize) == "8c1d1237096589873a68e2a9fce0e2521fe06b01" or      hash.sha1(0, filesize) == "499d53f4e93d97e251fcc2864cf6b01bcfb5965e" or      hash.sha1(0, filesize) == "d3e143a05ab214ea8141cce805514808cd502af1" or      hash.sha1(0, filesize) == "f664812d6de055014e272966b70a4e5808949f1b" or      hash.sha1(0, filesize) == "aea3d997519354fbf43ed1098cfda0e9614255f5" or      hash.sha1(0, filesize) == "b2b948da08c0437d0bac24f87090ad9eb86ccdf1" or      hash.sha1(0, filesize) == "1439165e3e6a3c945c1f017c54f25a7e2ecf3e67" or      hash.sha1(0, filesize) == "9ebab008d87799dcdfc697189c37c12d622268ae" or      hash.sha1(0, filesize) == "1cb664830a6027d3825f8535953603317af4ac73" or      hash.sha1(0, filesize) == "491e35cb839361fcf053d8f5cb462f2cc1efe869" or      hash.sha1(0, filesize) == "9901b50f3171f3117a96922e0614f68ca8ea7781" or      hash.sha1(0, filesize) == "d6c32b29ca0f7077fd1b47022bc16284928e05f7" or      hash.sha1(0, filesize) == "681e6b1034ec0ced209b09d9859ba5c2feee3797" or      hash.sha1(0, filesize) == "e2a6faa994b437a00e362a2b0ddc4f5f3f4c8223" or      hash.sha1(0, filesize) == "00d4ac0499af32cb8389dd34e2418ba4aa3b6997" or      hash.sha1(0, filesize) == "a35984b3c4fe0787f5bf5add97cf97a96f1f5d33" or      hash.sha1(0, filesize) == "cc809d3340e5f16e59f1f8727798fc4d219853d5" or      hash.sha1(0, filesize) == "27c07a3c1538b3695d718fe6afbbc8a8afac5746" or      hash.sha1(0, filesize) == "c74e39e3a51f093d180793ccf38c7345e360d8da" or      hash.sha1(0, filesize) == "8964a9cd1b695bc7c5ad1289f48fb68f1f4fb8a9" or      hash.sha1(0, filesize) == "513918ddb751ba31b9adea8dbbbd9476b9221369" or      hash.sha1(0, filesize) == "a09cb69e452956c6d10f46ecad57810a55de29de" or      hash.sha1(0, filesize) == "c1070b84bc4dd6d878b0426a08a9feb4b19bc1e7" or      hash.sha1(0, filesize) == "0181b670b873f7a9b1fa91f2ac53202f6b4051bc" or      hash.sha1(0, filesize) == "683e69d49819a1ebef945ad8c3501ce67aee9a18" or      hash.sha1(0, filesize) == "bc6f2df56997b6883ea2bcd1ad9a9c3ef63b2201" or      hash.sha1(0, filesize) == "1d842bed57e7fdc4f3746439f55ce4afcd79a53d" or      hash.sha1(0, filesize) == "f2a3ded357b5533df506847db981f1ece6e03f8c" or      hash.sha1(0, filesize) == "975ee99560f597cdf3aad06ee19a8d1a041a3a06" or      hash.sha1(0, filesize) == "41e2413dbbd959791cba5469df1eee39f475b65f" or      hash.sha1(0, filesize) == "9ca3de05a448367f13177b13d93b6a80792f2373" or      hash.sha1(0, filesize) == "2d40bf19f68a0190b2953fa7c70d1df144f4aec7" or      hash.sha1(0, filesize) == "23a7027f52727fe1bc321136f123c3e34e50312f" or      hash.sha1(0, filesize) == "ea94d1972040c85b34b9b2f0e2156119417840dc" or      hash.sha1(0, filesize) == "fb5decf3d70a855e53b9db331394617a7ab3af89" or      hash.sha1(0, filesize) == "86df5348fa8086ee123b20435d56b33a9bd366df" or      hash.sha1(0, filesize) == "7c33cb59df736f72972db65b9cd05e048e0fd02b" or      hash.sha1(0, filesize) == "fc87b09ee7bb2b079809687c8fe6a680ce8f9188" or      hash.sha1(0, filesize) == "1734d2cd09488d74a4321ee2d7b1b19fb92c84e5" or      hash.sha1(0, filesize) == "3d994da7a17f7a86155599c4e1798cd71548e369" or      hash.sha1(0, filesize) == "df3ea34a79261710a807d3651c1874477966e2c4" or      hash.sha1(0, filesize) == "c3d268243d4da413de89939d8e9a9e16731046e5" or      hash.sha1(0, filesize) == "35fc9c2e5258db3ec4b742acbabcbf4ac40eb5b0" or      hash.sha1(0, filesize) == "a7b87bbc239c611fd7307a41cbf4a6cdaedd0c68" or      hash.sha1(0, filesize) == "49fd193d79d5d13af0e70e424c255266f9de266a" or      hash.sha1(0, filesize) == "e51c9340ec69ddd6213b7bae9272e33e4ac61e33" or      hash.sha1(0, filesize) == "0838ff9dd13d082cf8f9931f005a59760cbac72d" or      hash.sha1(0, filesize) == "b71d2c002ad93516af5b916fd4e8dfc2039bb0b2" or      hash.sha1(0, filesize) == "ddf9748c423633c4bb2e697fa523aa251d073d40" or      hash.sha1(0, filesize) == "974c4eb92994ab511413fcf7271e976c7a5b952a" or      hash.sha1(0, filesize) == "8e1e9763f836d6a0d5a71db5624dab6d07d4797c" or      hash.sha1(0, filesize) == "b641148c725d0851575b6e32935c84ff95bf45b7" or      hash.sha1(0, filesize) == "5edb689475a63687000799f45bf20e2ce51d256d" or      hash.sha1(0, filesize) == "d9e81a92238b286bbfb7c962201643b41a7a3785" or      hash.sha1(0, filesize) == "1f5cbb7b1972a034f430eb2130732c09ae66802e" or      hash.sha1(0, filesize) == "047c6c80429e97b1cfd6897942dc6f4abb555e59" or      hash.sha1(0, filesize) == "693742c6c60075309d9e44aa91867f7c4b3bf86f" or      hash.sha1(0, filesize) == "9c9fee2d0e902d408dea5d4a8b740f4f62fb85e8" or      hash.sha1(0, filesize) == "509eecfa6835f0dc87f3cd16116344640bd28bf0" or      hash.sha1(0, filesize) == "b641148c725d0851575b6e32935c84ff95bf45b7" or      hash.sha1(0, filesize) == "d2aa2a45c3059eb3bd3fbf933e9a7ffa66fabaea" or      hash.sha1(0, filesize) == "a68dee63f5c9cd0695fd8f40061d0413e8785301" or      hash.sha1(0, filesize) == "eb872c8d47081d49e3ac75ae21f623803b941949" or      hash.sha1(0, filesize) == "099d66ec96c35082c3818ec05530688dc8b99a60" or      hash.sha1(0, filesize) == "26ee6a5f67a1f0c5d061bc31cd92f5ac815ec34a" or      hash.sha1(0, filesize) == "5edb689475a63687000799f45bf20e2ce51d256d" or      hash.sha1(0, filesize) == "377271a851966af1c3c700371d31da9ff2e8d1d3" or      hash.sha1(0, filesize) == "92ca42f51f3aaea36e0e3c6ba4bbad8dcdd334fe" or  
    
    hash.sha1(0, filesize) == "fa3aa53120cc7eb50740051e0c94aae34050f8e7" or      hash.sha1(0, filesize) == "2770c4f68b722e2f6e32d8b96fed8132c267e75c" or      hash.sha1(0, filesize) == "b35a5bcbe1a88b607d07eafb9eec4531eade3ba3" or      hash.sha1(0, filesize) == "5edb689475a63687000799f45bf20e2ce51d256d" or      hash.sha1(0, filesize) == "ec98d4f824570c4822f6d7d13191649230c215ba" or      hash.sha1(0, filesize) == "ec25ae8233b98bec08b1a33484ff10e740870b5c" or      hash.sha1(0, filesize) == "4e5e9da68d98b175ba252bfd16a1a4ddf2ffa9ab" or      hash.sha1(0, filesize) == "d28b26791aeb86c5261461efbe961b0c5ae1a575" or      hash.sha1(0, filesize) == "749062bd477dc948854ace176501cd510efbb510" or      hash.sha1(0, filesize) == "b6908610d8f632e82bed5d99abe9dfc5521fb849" or      hash.sha1(0, filesize) == "62d69e1402d43e281e1e37780602d346661733fc" or      hash.sha1(0, filesize) == "09e4af7aa0bc43d9cc574704766d5cf1934acdbd" or      hash.sha1(0, filesize) == "d2676acb8e212973c68a7e2efca4649960cacf2b" or      hash.sha1(0, filesize) == "3f37004ded4d1d5698c900a58b85b412aacd2ee0" or      hash.sha1(0, filesize) == "21ad83d8cdab8413d55bbd067031e3d313f3a1f8" or      hash.sha1(0, filesize) == "92ca42f51f3aaea36e0e3c6ba4bbad8dcdd334fe" or      hash.sha1(0, filesize) == "094b2b55695d8bfbb0941e3d5d3c4b4f072ef7d0" or      hash.sha1(0, filesize) == "8d343bb599325b685e402b14508e3681c63862d3" or      hash.sha1(0, filesize) == "a314059c41abac9f8f662ec8233c8515f6e948b2" or      hash.sha1(0, filesize) == "9fae3ea6be599d26f61673e4a43b64535b297d10" or      hash.sha1(0, filesize) == "0dcf9eefba5867321f75da069602bcaff14fb341" or      hash.sha1(0, filesize) == "9d7941b8de7a541ba1653feb92113ca0f598e8cc" or      hash.sha1(0, filesize) == "165550e6c724069a7a8c363744c616d04c3b01f1" or      hash.sha1(0, filesize) == "6b0754fe9ae57b3ab249c13fb3e8cf5fa1f7a3c4" or      hash.sha1(0, filesize) == "eae1b262d0f072c8b7376f717c6aa364cdcbccf5" or      hash.sha1(0, filesize) == "38a6344914ad89045e89c82e9bc4ce4c57938922" or      hash.sha1(0, filesize) == "c0f338c3e3d766c25cb5fc6d04e00023116e34ab" or      hash.sha1(0, filesize) == "59af18652900d072c261772864909934d0d7aced" or      hash.sha1(0, filesize) == "0c07b1d0b44dbe04d25c09c850965b3a7a02d88e" or      hash.sha1(0, filesize) == "8d028c462be2022a871a0dcd3d64c1152ca3e111" or      hash.sha1(0, filesize) == "739ff6dae69e09f1822ecc89f77e0a997f9dd318" or      hash.sha1(0, filesize) == "ceba773c122c4a5c012d888f8b0c2b95f3a34820" or      hash.sha1(0, filesize) == "895ef9918875bab93e701790fb9f8756b8481d2d" or      hash.sha1(0, filesize) == "11509527e22f8382feb3b77887bbceb3439960af" or      hash.sha1(0, filesize) == "66db725de8a5264d3c694d1cb7b7afdc0654eb0b" or      hash.sha1(0, filesize) == "a4e89483deb7a7558aff1d94b810ede509ab4f64" or      hash.sha1(0, filesize) == "d09d1a8c675ebf22568223293d3dd93a85873b7d" or      hash.sha1(0, filesize) == "05e19f190a991aa427499858037586eca4e186fc" or      hash.sha1(0, filesize) == "6b8ec471e3395781724da3d2a90fe0b40bea3dab" or      hash.sha1(0, filesize) == "91c081cac69bacd2520ba61cb913bec0730e5f5c" or      hash.sha1(0, filesize) == "d8b3da5ab9482eb4e9b3f5faef359d456d2e9c23" or      hash.sha1(0, filesize) == "895346452b20ab6a527dced12bdaf6700e32f9ee" or      hash.sha1(0, filesize) == "f48401d3311c0218c7de2c388a5704a52b5c8f0d" or      hash.sha1(0, filesize) == "f417af86c6c422b9c5e21f076be7d624b2c1df4c" or      hash.sha1(0, filesize) == "a75e482a805d0d5c12b192a03e15d8acc0ebf9ab" or      hash.sha1(0, filesize) == "3eb33e0d506cc2574100cae9fe3e8321b86ff755" or      hash.sha1(0, filesize) == "2433f9a2c9bb822e96d7bac1558ca584ec12f152" or      hash.sha1(0, filesize) == "6ccde72485efa4e2f5ed77afbe771023985800e3" or      hash.sha1(0, filesize) == "27b7b6d6c8f978ac2735160f8aeea123de50c0f3" or      hash.sha1(0, filesize) == "78b3d1cfbe187484d19faa6fcad9c390a4e57069" or      hash.sha1(0, filesize) == "fa503eae31c802f6de669751685cb7a1c9c3ae4f" or      hash.sha1(0, filesize) == "665c16e0527765279789a830a257032531548fbb" or      hash.sha1(0, filesize) == "7060148bf1607846e51ea034109e50c40d8ded74" or      hash.sha1(0, filesize) == "a6ac0831e94e1b7a55b112741ff5bc9486faab11" or      hash.sha1(0, filesize) == "14dbd6ea8884b2dbe345906301edea17904406e1" or      hash.sha1(0, filesize) == "c4d6bd4c84ff8daab7cf4289c7ad97bad51efbcd" or      hash.sha1(0, filesize) == "aacb5869c03c823dcac62422fae2011c62269da0" or      hash.sha1(0, filesize) == "28cab8b36661411ce4acf28631a7310ebd6f2b17" or      hash.sha1(0, filesize) == "5c6296a4a233f28ea083abb86541e361d70c92f0" or      hash.sha1(0, filesize) == "1a1ff3a7d29ce3af2ec0dc271ce76275b0083d13" or      hash.sha1(0, filesize) == "0d0a1f725b315b01bfb514df1b1056ead661dd3a" or      hash.sha1(0, filesize) == "2ca04936523885131d8bf4c223a9c363f9612fea" or      hash.sha1(0, filesize) == "0b744316240ccadc5cbccc1850eb2d810342f28a" or      hash.sha1(0, filesize) == "9a7e58db4eac152a5882ee8d54d41f632c2302c9" or      hash.sha1(0, filesize) == "64109b57ca7353c2abd5c7bb42e5435f8c12a448" or      hash.sha1(0, filesize) == "e97e9052cc55d40d4817163092ae93fd91cf8433" or      hash.sha1(0, filesize) == "89850ad0c8cedc3d3da2ad33a1ba553a06e8112e" or      hash.sha1(0, filesize) == "9ea7bcd0c1d7e00bae4364dc2fef0460b6a580cc" or      hash.sha1(0, filesize) == "8cd1622fe9d1b3b5144cae4e14da5e7cd172d518" or  
    
    hash.sha1(0, filesize) == "02382b1916b4adc1cb0891723427a0a420d88a3b" or      hash.sha1(0, filesize) == "77b81d39b518631d44dcebcd59e96076ed410af1" or      hash.sha1(0, filesize) == "45d83a9cea487c431ad616fef3578a84d61202bf" or      hash.sha1(0, filesize) == "ce13ad7b5a0ab0a911817b8de452a41cf9ad70b7" or      hash.sha1(0, filesize) == "35c632774a06ab697a274564861b6a268e958731" or      hash.sha1(0, filesize) == "4b2825805d7de3a5f94b499ba53b9bb34e10b674" or      hash.sha1(0, filesize) == "1fdfb61cf8a30f120193044d8ebfa66c26b12fbc" or      hash.sha1(0, filesize) == "b8b3871542b329db03fa8aa40d20f17b20a7d714" or      hash.sha1(0, filesize) == "d0f9a27d9293c295f7f7865ab509747a035761f3" or      hash.sha1(0, filesize) == "56d7208548312556b81e6df41a74cb57391cd57d" or      hash.sha1(0, filesize) == "d2e8d95820f582aa6e4a7f63b8325b908a8dd299" or      hash.sha1(0, filesize) == "6b70b946715e6c6c0c80b6b9e25d705135601f73" or      hash.sha1(0, filesize) == "e549ae29bede518d60a59d97716317e3490a41ec" or      hash.sha1(0, filesize) == "c96f626e843b6e21c91030e4386776dc4a664f5b" or      hash.sha1(0, filesize) == "aff8c299fd524c674efc18c436f321dc77beefbd" or      hash.sha1(0, filesize) == "2dff5acffa580f2ac8924262295b8c73aca434d1" or      hash.sha1(0, filesize) == "deb8a12afa3d9033e4c5151709029a7d593004a9" or      hash.sha1(0, filesize) == "3546b92fbf2cf41d6b7df983f25c3eaeb5b66203" or      hash.sha1(0, filesize) == "2bd7119b422327dd1c57104f7ef6857e1a698c7f" or      hash.sha1(0, filesize) == "db57aae4671333e93692df20294cc40d7711a6fb" or      hash.sha1(0, filesize) == "c2434cd78d5d2bcacc40f33e09b50aa520da063e" or      hash.sha1(0, filesize) == "1c91c55bbd39f41aa78664ef9209312c78e273fe" or      hash.sha1(0, filesize) == "afd368d0a1b3d6a001e6861b7e39e347df942c92" or      hash.sha1(0, filesize) == "c07153307b9897846341a56d5df8cfd21d9a26ae" or      hash.sha1(0, filesize) == "4c6c64654db99bff9bffefc5e2f03529ec7b2e12" or      hash.sha1(0, filesize) == "25ef7629092ade53b34bdb72f0c22743aae07895" or      hash.sha1(0, filesize) == "7df76f9f379d88ca050cbc4f3466f838ec6802b7" or      hash.sha1(0, filesize) == "6deceae47f17276138fead444e64947c00e1bd99" or      hash.sha1(0, filesize) == "9779407600eeb9dd1e6729771500a1d2b67e3bac" or      hash.sha1(0, filesize) == "e126115596f5ad511afbf0682bfb2747e831c2cb" or      hash.sha1(0, filesize) == "52d943c91c9909701b407f97b673adbd1d93b3cb" or      hash.sha1(0, filesize) == "dc9903d52d6adbab408373ab2cb5770fae9e8360" or      hash.sha1(0, filesize) == "3ff018798794d176b0bd193ff7ce32e8597cb268" or      hash.sha1(0, filesize) == "84b2bdb064cc7438102e238fe5d7caf597abe7f7" or      hash.sha1(0, filesize) == "95a0d8797a5151db07e86f9a5d2de9e7fb66d4ce" or  
    
    hash.sha1(0, filesize) == "7e6dcb1181e0c7f47e638abb408bf365aaed161d" or      hash.sha1(0, filesize) == "0f58accbc5172fe0ef4b4973cfd236d66da6b6a8" or      hash.sha1(0, filesize) == "29d2f6ffd69fd35a5cf1730c370eeb2ec5e9a460" or      hash.sha1(0, filesize) == "8e01742446ea863722407baa356e121c6db973f1" or      hash.sha1(0, filesize) == "f02735d8bf07f24f17dc01e48a10c2838d97f4d0" or      hash.sha1(0, filesize) == "ede4dbd5a9ef8a8f4c705a04469772b00368c5f3" or      hash.sha1(0, filesize) == "dd6e1624463e0da22b4ffbd0b27700f8f722498e" or      hash.sha1(0, filesize) == "839c9107a8db07273a66f2602e5ff68c662c5178" or      hash.sha1(0, filesize) == "a04a1141e4292eeceb7567db94715030a8865e58" or      hash.sha1(0, filesize) == "397981267bcf82bf12ce2032d13c373d7857d25e" or      hash.sha1(0, filesize) == "6b93d28af71f5bbf201d56922c72d1e2c784f51c" or      hash.sha1(0, filesize) == "196a2f0810b0034e34fa024e4bc63f7764332668" or      hash.sha1(0, filesize) == "bec5f7293da27cf49ff34c14274b056eabb3b3e6" or      hash.sha1(0, filesize) == "66f3dc50226acf0985b2c43afa069c95e3a0c972" or      hash.sha1(0, filesize) == "7594e1eae77c0aeda977f9d288bae3b9e6609322" or      hash.sha1(0, filesize) == "5ce9a61fc9ec4ebbe6c4f8d0435dbd85c6ff630f" or  
    
    hash.sha1(0, filesize) == "81b420c5d8fa7ae40e36c8c1a8720e945b8d0f9e" or      hash.sha1(0, filesize) == "92ca42f51f3aaea36e0e3c6ba4bbad8dcdd334fe" or      hash.sha1(0, filesize) == "7c1dd47776d00e5756ec22ea798e07b77fe6709c" or      hash.sha1(0, filesize) == "b1ac32e7b7d752337713e238acc5249a9cec648e" or      hash.sha1(0, filesize) == "4f9ac18927da5166fefe8158e61edf5485e01bc6" or      hash.sha1(0, filesize) == "01f81d802c442530ed2d83d7d3e328cffb867793" or      hash.sha1(0, filesize) == "bab64b6222cfdcb0bc5b5b533f4062a41bde671b" or      hash.sha1(0, filesize) == "1d5744a7c7b12143e199f280ad4db6e47a673f6e" or      hash.sha1(0, filesize) == "31952fa7458295239c4dc2d980685f7419afe4f1" or      hash.sha1(0, filesize) == "5edb689475a63687000799f45bf20e2ce51d256d" or      hash.sha1(0, filesize) == "efd42b45df2b2465a8370b4bfc3a67fdf4602320" or      hash.sha1(0, filesize) == "73c6ccc6c9d53ab473836a92105ade71533dcf85" or      hash.sha1(0, filesize) == "12c6a49c2211dcc36447993f5c302df0f99b696f" or      hash.sha1(0, filesize) == "2d98f498a619d0b3d663b8b76948ddb81b7c9950" or      hash.sha1(0, filesize) == "1cb353a3a28e1162acfffd331641c6f788031e7f" or      hash.sha1(0, filesize) == "34970ce1144ffcc03f1bc43cdb29f895de1be094" or      hash.sha1(0, filesize) == "a808d31309987adf310aedd356ab00555dd6505c" or      hash.sha1(0, filesize) == "0170e2cc9cec433f30bc2da9c35b239e36102e4f" or      hash.sha1(0, filesize) == "b833690de6a37ae35ec2cabf2794718fd0f4fd1d" or      hash.sha1(0, filesize) == "60977cb1dde0e8e9da170504320223bee7978780" or      hash.sha1(0, filesize) == "8dda5db858efab326ef487e80a60c05553cbbf62" or      hash.sha1(0, filesize) == "f0d6ff896487315561b31c0e187f879cc0546f86" or      hash.sha1(0, filesize) == "5b47e798345178be2fa24d1921e6aaedb3f9f091" or      hash.sha1(0, filesize) == "3e0a999ca21c23677f0c5fcea71328b1b66e8b4f" or      hash.sha1(0, filesize) == "fd2d5855e14a73f5a8d8c6a503ed20745feb7794" or      hash.sha1(0, filesize) == "c9f0bfae97d3a70d41a04aab432d73a5bdf4c2b5" or      hash.sha1(0, filesize) == "b5c2c9f05f4c5c83cf28693b5b080365cdd34e20" or      hash.sha1(0, filesize) == "4aef51aae0ffc29c5fe087edbbd1085ce18e544b" or      hash.sha1(0, filesize) == "0ef1c023cef7f94409b8d99df1fa854ffaf988ea" or      hash.sha1(0, filesize) == "43f7660872183c1a7163edd29e0d89af24439169" or      hash.sha1(0, filesize) == "20e6ff8533cbc9d2649e233734dd10934c7790f7" or  
    
    hash.sha1(0, filesize) == "55b8cd2d139bbb0d6e79cb42d0aafe15eb9e734a" or      hash.sha1(0, filesize) == "690cc587337797e2d563925dc0e9ec8791477f9a" or      hash.sha1(0, filesize) == "ace6033b09ed05cdd6dd436cacd82227a7e50d1d" or      hash.sha1(0, filesize) == "1e6f294bb2fab19c3a75ef8753cda945624217cd" or      hash.sha1(0, filesize) == "28b8e7742c6cc7e4464ffe88056fdb4210be2806" or      hash.sha1(0, filesize) == "eac9aaf750aca322290f40f3a8b0c119af7852de" or      hash.sha1(0, filesize) == "46b7fb0fdc7dab23bda8b0962973a44d36a7d64d" or      hash.sha1(0, filesize) == "53160f3399bda4824c24d35d63f4f5d76ed64997" or      hash.sha1(0, filesize) == "fce27ced44d72d1e79d59b6a3ebc09205fd65b73" or      hash.sha1(0, filesize) == "4009303dabc4e4da6f7030e1ab107910421bf4fd" or      hash.sha1(0, filesize) == "db0210610748cf9cff45d8c16a038be67a0fd965" or      hash.sha1(0, filesize) == "d2bfbe963981c734b90a08ddc1006583502d5751" or      hash.sha1(0, filesize) == "f1dfebdff574bd39f104427b5f629375445de110" or      hash.sha1(0, filesize) == "e81f747985ba3625a8f2c6f05a3b5f5279dbeeac" or      hash.sha1(0, filesize) == "e38c17c481b001663d0541ff4a18e793b3613fd1" or      hash.sha1(0, filesize) == "8d0e5eb4558d2ffc05b772141f23f8c6b4c4a4ff" or      hash.sha1(0, filesize) == "7efd55846aca109d9129fb01e5e67229612dc13d" or  
    
    hash.sha1(0, filesize) == "9dd9c432f75d1bdc44a5b140c830066780b04dc5" or      hash.sha1(0, filesize) == "3e4b5f39fbdb96ee82687bfe0aceb534e1f34557" or      hash.sha1(0, filesize) == "4a51e7e336d2278c090ab9e7775c69ccf534cbbe" or      hash.sha1(0, filesize) == "4fa17b4b59c66758755102dead7316b0e0daac79" or      hash.sha1(0, filesize) == "701b1c764ae042721c0002e39c40a2a9a2686c0a" or      hash.sha1(0, filesize) == "7cb4d961c830c3cf0d23f73a9bb7aa4f5d02f637" or      hash.sha1(0, filesize) == "4edd4035a384ed38d3619f3729d3ca538c872997" or      hash.sha1(0, filesize) == "3d76d4c8866ee5500a16fe65d5dedb14f39974e0" or      hash.sha1(0, filesize) == "5457d676715b35ba0b4342acd860401cd8ef9381" or      hash.sha1(0, filesize) == "cb69ad340bce9f1afd53d5a7478703d3b1b876be" or      hash.sha1(0, filesize) == "536123a61d5f1f2b43c18fa74b2de9dac3f124b7" or      hash.sha1(0, filesize) == "bdfbaf0a390c278baf589c23d4d67cfa1d985e52" or      hash.sha1(0, filesize) == "c29351b370bbb4c977d6b8472df2daf59644a163" or      hash.sha1(0, filesize) == "f553437c0b40abf613f598f5eae2035b47dda856" or      hash.sha1(0, filesize) == "947912282892826402fbb929c7eb50c0554b7b0b" or      hash.sha1(0, filesize) == "4cdbeb0f5e26ba6b0a88aa5a49ac37acfb36009b" or      hash.sha1(0, filesize) == "ecd533ff6fbd3dd10f7951c1e07750abb03fe01d" or      hash.sha1(0, filesize) == "f66871da2447b21e49afdbf9a917cc63ec4136bb" or      hash.sha1(0, filesize) == "b0f8be64d263ea837077b432752cee52fd28005b" or      hash.sha1(0, filesize) == "533b36787a8ffc351c1973aa6d302e505db8593b" or      hash.sha1(0, filesize) == "349361cee45792efbc3f08bdda331e8d3003736f" or      hash.sha1(0, filesize) == "29a168c1337c7c8724cd1eafbef8dea7f73d0f6d" or      hash.sha1(0, filesize) == "ce158ef43637d0ddaa6830cbe40ff1c8748a4701" or      hash.sha1(0, filesize) == "3124223ce6ee7c652df33e2d4b6a28f2022c1314" or  
    
    hash.sha1(0, filesize) == "3dab59e7732766859869780f0a32462043d0548e" or      hash.sha1(0, filesize) == "17bc6596b0bd2efd490512f3060e502c875fddff" or      hash.sha1(0, filesize) == "dc58024cf55557f91b67b956cf008c6e39d6ea16" or      hash.sha1(0, filesize) == "eda64e338f08f30810c457b633e443396872fa79" or      hash.sha1(0, filesize) == "f91b0683727f7c1cb2afb77b902c2b945b9ff225" or      hash.sha1(0, filesize) == "573db0ad3bc6374756a7b97bae5c7fbcb4256185" or      hash.sha1(0, filesize) == "b1ee8d2a78f4c0a2d33eae02db94b0720b6c8c3d" or      hash.sha1(0, filesize) == "b6f228c0dec08b702316343ff6424a434e966e0b" or      hash.sha1(0, filesize) == "93805053a42dd8b4bb933c9a63c89abcfcff11ff" or      hash.sha1(0, filesize) == "2b5d66b41ab7d1bccb90da8259ed6961c7817232" or      hash.sha1(0, filesize) == "df2d4dc8ded58796fa2eab93a8fbafa46aa40b68" or      hash.sha1(0, filesize) == "ab40ea0dc6703e483748a617f2ef174e6f4f6386" or      hash.sha1(0, filesize) == "3821c944b207fd70089df488dbf2b363fd46dbee" or      hash.sha1(0, filesize) == "6360a0e687bfb5fc31d0ebf86ba32b0d09979a12" or      hash.sha1(0, filesize) == "abd197535e680a39598c598a250079616e808ca8" or      hash.sha1(0, filesize) == "51d9030b48f61929ef8dabec5ab37b2d76c5476d" or      hash.sha1(0, filesize) == "8da15373f5177beefb1e77f5d8e9e791d5b7a3a4" or      hash.sha1(0, filesize) == "95696d6b23c411bdc3d2760d3030566a9dab8857" or      hash.sha1(0, filesize) == "a4bcc729ad6129919e8fcd9456b1ef1f294fd15a" or      hash.sha1(0, filesize) == "f313b4ef749cbeb6234bf177459e343102a4c578" or  
    
    hash.sha1(0, filesize) == "acc0e6bd294e064692680c605949ee728c0f0ca3" or      hash.sha1(0, filesize) == "099694e6dbc5c450cd5ec49aa95569d8226d5ba3" or      hash.sha1(0, filesize) == "cc99343c14fe8f59367d9a484cb572abca63cc02" or      hash.sha1(0, filesize) == "06b6499533a0d4ee957893498fd94559705e1bd3" or      hash.sha1(0, filesize) == "27511801177be19c73909ef622190aea13d97c7d" or      hash.sha1(0, filesize) == "27511801177be19c73909ef622190aea13d97c7d" or      hash.sha1(0, filesize) == "099694e6dbc5c450cd5ec49aa95569d8226d5ba3" or      hash.sha1(0, filesize) == "17be7ef93a37c61731af95a6cdf3c8be80db6330" or      hash.sha1(0, filesize) == "5df8065acb193d3eb8f8ad301da7f6ad4663a888" or      hash.sha1(0, filesize) == "d67005150a3d06f04e45f39ecb2fea3688e06ec7" or      hash.sha1(0, filesize) == "e2c7826775bc0448278e987cdf71e5bd01729bc2" or      hash.sha1(0, filesize) == "3a1f84dabe229d0cf576b9e30ef96db65837956d" or      hash.sha1(0, filesize) == "b3d1fbdf0a6062eaf1e253be351da787588b7f53" or      hash.sha1(0, filesize) == "f2967a1fb92a5c0808fc1b718e15e9d5df35e071" or      hash.sha1(0, filesize) == "c81a048c01d07c513524729fb392d68d7ac5d98d" or  
    
    hash.sha1(0, filesize) == "8be613d99da6561f41c29472aab1f2cca9db5106" or      hash.sha1(0, filesize) == "6f38f2cd54433b3c5f3c01faef2de8e279000831" or      hash.sha1(0, filesize) == "15b2c2f57b671b8d84f963659dd5e2c9f3634540" or      hash.sha1(0, filesize) == "603685ab446951a3c261fa2754b081ed9bff328a" or      hash.sha1(0, filesize) == "ae4ccf3c2da9b2f9c9139780c75447a5a35a531f" or      hash.sha1(0, filesize) == "cbe884a582670b1d8187dd14ad270ccef9f70a01" or      hash.sha1(0, filesize) == "cd42cecaede0c824a368fe24aed4e097ce3dd0ad" or      hash.sha1(0, filesize) == "0d46aa184356ca4a89f33285fc04063eb7990416" or      hash.sha1(0, filesize) == "a0f5bbac6b472156c3514d7fc0731abd97a7a855" or      hash.sha1(0, filesize) == "8ef6a8b75a20f034123233a9a91c0a50e28652c3" or      hash.sha1(0, filesize) == "32b6712ddb4ac6bcf6ff9776a8b32c505ba80053" or      hash.sha1(0, filesize) == "af6f0d6f89683d1b39c60562a55b811e2d88a408" or      hash.sha1(0, filesize) == "cc506804da42b2d05e655f2d44cc3dc3901a8310" or  
    
    hash.sha1(0, filesize) == "22ff7bac1825b18b0a76cba6572c91d560fa886f" or      hash.sha1(0, filesize) == "bea9807242f5c142fc1e7943de293f574f25a385" or      hash.sha1(0, filesize) == "53d0df4b78b7fc47ebbc9d9e3e55c0d51e6ad3a9" or      hash.sha1(0, filesize) == "cde0b5269fb9cbd72f2ecde7ed05ec8de06859a8" or      hash.sha1(0, filesize) == "6ef1d73229d3f1dd8fd2267fe2476bc045653ee3" or      hash.sha1(0, filesize) == "2a8ee528479f857bdac121143ec2c1e237c67ef6" or      hash.sha1(0, filesize) == "ef8472e820d4f6cf1d872b22e12853083acedf32" or      hash.sha1(0, filesize) == "839877a3de44de99f5eb2ca9bef5325cc85bba63" or      hash.sha1(0, filesize) == "795978a02893a56414aad162d964869065f7ada5" or      hash.sha1(0, filesize) == "de9673ceed3845ed70da9f89ac18ace37867ff66" or      hash.sha1(0, filesize) == "05e6a4df5b538034355c3fc32cf6a44cffe5de7a" or      hash.sha1(0, filesize) == "9baa2abc25e67bd3bb5836c0ed7fcc7794e02d36" or      hash.sha1(0, filesize) == "8ba7854c0726ccc2dc52a0e1cf5fa2dffea8631d" or      hash.sha1(0, filesize) == "515958889d1f43f733c736403cae25ea112ff7ff" or      hash.sha1(0, filesize) == "b5e004690ddd4f874ffd29e3035affe123f444fc" or      hash.sha1(0, filesize) == "0e1787f25aaf7afe43bf7e070363d74a03b660f9" or      hash.sha1(0, filesize) == "c5675e45d36d28b03f157d003ddea1a4ddd857b3" or      hash.sha1(0, filesize) == "016c12de39e4cc3f669ffd32002392427b8a530f" or      hash.sha1(0, filesize) == "bc0e9e6b50830668c889b39f1a5bac17c9e47007" or  
    
    hash.sha1(0, filesize) == "72ec6a9b904ed21a5c28b5b473dfd971b185affb" or      hash.sha1(0, filesize) == "2e683c79aa381fff1d9d5ba4f54118cf0e7986b3" or      hash.sha1(0, filesize) == "a4c0d15be948337a4a52aa97c15f22a115e1cd4a" or      hash.sha1(0, filesize) == "9f1735fa1830d665029c2a55fa86facf6ce04d0a" or      hash.sha1(0, filesize) == "4f2847e12ce84a46bc8aeef5fa72cd6b1e805c46" or      hash.sha1(0, filesize) == "24ce20b535597656a9b569bdd1bbe1ca4b62d170" or  
    
    hash.sha1(0, filesize) == "d6f714325b08ae0efa1da983250fca7ec5b3bbb3" or      hash.sha1(0, filesize) == "64319668487fcb38d514f74b4adea4910ce97424" or      hash.sha1(0, filesize) == "f2a23e23c71a25fbcb0cacecf4441f8e8a6a6f17" or      hash.sha1(0, filesize) == "3ee65cc93e88e05e01498851d5f16e9d2b0c1507" or      hash.sha1(0, filesize) == "48aa2e97ff63d90191fcd75dcb7c164c693ff375" or      hash.sha1(0, filesize) == "6226f84423e99874b3e9c336e07a48af84122a24" or      hash.sha1(0, filesize) == "2164959b083e705e4091142a56c0a8d5f3ce125c" or      hash.sha1(0, filesize) == "b3ed5f5b7a28ec3b6324e2144bdf4bc9b3024ebc" or      hash.sha1(0, filesize) == "9a7832fdfe7d2d835aedb3496a983a3b716eb03a" or      hash.sha1(0, filesize) == "817d8d482ba662c417cd642577a1391ced1e2f36" or      hash.sha1(0, filesize) == "fe876f205ced3f5d675369bdb8e3e26f55c96969" or      hash.sha1(0, filesize) == "f166d20367aa526c5a97dfd149bfe04c678e7626" or      hash.sha1(0, filesize) == "6126aa1380c85f07e86693f314a55a603b594b2f" or  
    
    hash.sha1(0, filesize) == "a27db505ef30105452584226d12950ca10f03a20" or      hash.sha1(0, filesize) == "2914576203f8d9298bce1cf64ece9b13831f03c7" or      hash.sha1(0, filesize) == "2dd72770f25ab12c6463c95c78ca16c6eb93c9a0" or      hash.sha1(0, filesize) == "540b1021e81802b9e46a46ed93a53bcc56ef8d32" or      hash.sha1(0, filesize) == "cf42abf3acb66cd483f3eb702af63c569919a71b" or      hash.sha1(0, filesize) == "fd8841ef76a2842f8e290ea894eb27898fdf0da4" or      hash.sha1(0, filesize) == "3dd18d6eca2f46f305081ee4b91a6d44cfb78d0e" or      hash.sha1(0, filesize) == "a959a24c27c4acb8ffec330f445faba43c7e5bf2" or      hash.sha1(0, filesize) == "3dec82df45581048301b11938ab7e8864617519e" or      hash.sha1(0, filesize) == "4adf1915fbd6f83bff62d6938f5551ffd7b5ac26" or      hash.sha1(0, filesize) == "dc62d0faef36661c59714d82c81fabf97217bf72" or      hash.sha1(0, filesize) == "68c1d42a94e291d288bb249da31c1c46e94e6593" or      hash.sha1(0, filesize) == "e1d953c2e7dc2ad79f317ec1f44019c7b7857bd8" or  
    
    hash.sha1(0, filesize) == "b52eb8496b2775b9002101bab490633ceede43e8" or      hash.sha1(0, filesize) == "3777e46bf4d2ee17b4d63b28f8331cd37703bdc2" or      hash.sha1(0, filesize) == "f13f878250948e8631dc5c082ab0e91fe24b1657" or      hash.sha1(0, filesize) == "077149bc9622e696bf787e0be601ef8182c4a920" or      hash.sha1(0, filesize) == "b717c4c2cb31f4abd72b5594b5a341a936a9efb1" or      hash.sha1(0, filesize) == "c7bc9b8334d60019b87aad4f8227934fa651a8dc" or      hash.sha1(0, filesize) == "95ce8223bc1bb2f5b4ae64e2a1a3688590add147" or      hash.sha1(0, filesize) == "33b121b1710ec0295684aef7774755623f756cb3" or      hash.sha1(0, filesize) == "9310699b95e685238d4de81e2239938f435acda4" or      hash.sha1(0, filesize) == "b241f935a8cc39decbcbab51497b96ebc32c6956" or      hash.sha1(0, filesize) == "d739926e88305774f59634b7cd4e56418d8d0d3c" or      hash.sha1(0, filesize) == "5572b8b0a2d8f16993b312b1faeb7f3569b9d072" or      hash.sha1(0, filesize) == "1e407e54688e6781b41f3b8e4765e2164d3059ee" or      hash.sha1(0, filesize) == "4e828fbed04d70fb9e6a088ec18e6c9a0ece732f" or      hash.sha1(0, filesize) == "f9b1cf035f431ad5bc3cdac576543c43bca935eb" or      hash.sha1(0, filesize) == "29bbbdf03cb6cef01c8c25f665aee95e6b6e6c59" or      hash.sha1(0, filesize) == "03cd7b8ba03109c1c6eead5590aa3f9e1db1c385" or      hash.sha1(0, filesize) == "f92e1b3c6eb9a9600d82520a8ba48c5570565787" or      hash.sha1(0, filesize) == "a7c458761746f1d3338f51135c9e42d5bd123179" or      hash.sha1(0, filesize) == "29fa0df4fb7cb6b553a6f979919d685980a8f091" or      hash.sha1(0, filesize) == "4acfcdac1408da3ab7d6b765631c4c1c37c5ecbf" or  
    
    hash.sha1(0, filesize) == "034d0a6240de7cdc72129eeacc63b717d850e927" or      hash.sha1(0, filesize) == "39239e986d8cac6c7268c11d9ead59d8246e48aa" or      hash.sha1(0, filesize) == "78dca5078814418fc0e562981b6c519e2a97aa1f" or      hash.sha1(0, filesize) == "d5e03b73ebf9578b9847e860be4c699010c45110" or      hash.sha1(0, filesize) == "7e0166a95a3355a143e10b16d35c00a8abde584c" or      hash.sha1(0, filesize) == "eae3c3f2f866163f7f338b53bd4076e6075c4fab" or      hash.sha1(0, filesize) == "dd5aeb96c779524ecfd46ff7f9a4c3f94fbd71ed" or      hash.sha1(0, filesize) == "765205561a82ea891eac89a4aeaefed00a0d0653" or      hash.sha1(0, filesize) == "162a753296bae91b20d5e1a12f19a0586530c9d6" or      hash.sha1(0, filesize) == "65f5e60bfe83bed806224aad950a5e2841695227" or      hash.sha1(0, filesize) == "52c86bc1664083d510dd629cb5bf8c5bf0ab55dd" or      hash.sha1(0, filesize) == "6c3d219eacb1f5bcf67f86526cc5f6d53bf652f0" or      hash.sha1(0, filesize) == "3cc1310cef9f9168a6382519b3f01d785d9fb185" or  
    
    hash.sha1(0, filesize) == "b756e05efff2f24cbad3df5ccf4494d2435d5f1f" or      hash.sha1(0, filesize) == "905d6098fea83a484c6a31d269dc3e255fb300d7"  
}
[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

041cfec8-7592-4131-8a26-9ae1d096a14c
Propose edits, view related rules, and engage with the community through comments.
Executable code, not a declarative rule
This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.
Rejected pattern present
[[ reason ]]
What does this mean?
Format & documentation suggestions
Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.
[[ reason ]]
What do these messages mean?
[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion
