ReplayGainAnalysis_ABYuleflt64_64_big_1512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule ReplayGainAnalysis_ABYule__flt64___64_big_1512_ (No description metadata provided).

rule ReplayGainAnalysis_ABYule__flt64___64_big_1512_ {
  strings:
    $a0 = { 3f a3 c0 3b 94 4e 17 32 c0 0e c5 ee 6d 84 09 69 bf 96 1f 45 e0 23 15 89 40 1f 42 93 b1 79 26 27 bf 54 37 93 20 3a 19 1e c0 26 ae f3 c4 93 b2 4f bf 18 5b 8a 1e 4c 7f 64 40 2a 1c 2e 7d 88 09 4d bf 90 f3 2a 69 58 43 39 c0 28 93 40 2b 75 b5 63 3f 96 22 50 1c 0d 30 47 40 22 f7 43 a8 66 db 6c bf 95 3c fc 2e cd 8f b7 c0 17 7d 85 3f c9 df 46 3f 78 57 aa b8 9b 27 91 40 06 09 8a 75 39 45 f6 3f 69 1a 42 ec 37 f9 4e bf eb d5 c2 97 ea 51 e0 3f 1f 86 0e 97 db 84 bf 3f c1 d1 14 bc 3f d1 16 3f 67 a1 85 9c 52 28 5d 3f ab be 57 61 13 da a0 c0 0b d3 e2 91 15 7e 06 bf 9d cf 08 45 83 67 0b 40 19 73 e4 df f4 66 7c bf 81 61 ae 72 6b e6 0b c0 21 18 53 ec 0d f4 74 bf 81 6e 8f 30 dc 87 c8 40 22 f4 30 f7 32 b1 e9 bf 81 19 c1 d2 55 25 9d c0 21 a1 45 f3 9f 09 ef 3f 96 fd e6 cb b8 87 86 40 1b 6a 83 03 f6 18 b2 bf 9a 96 25 48 17 b5 27 c0 11 94 2e d9 14 17 0b 3f 90 a3 7c 6b 0e 45 f6 40 01 91 a5 b5 e2 06 cb bf 63 bb 99 8f a1 5d 38 bf e8 08 8b 61 85 b1 9c 3f 7b a1 d6 50 6d fa 46 3f c0 d4 c4 bc fd 2a 76 bf 5e c3 62 35 36 2f 33 3f c3 c9 0c 47 17 77 f1 c0 03 08 2b 0b 3d 45 91 bf b7 e3 32 41 57 aa 88 40 06 ca 19 88 47 12 9e bf af fd 38 b2 95 d8 f6 c0 05 2a 8a 5a b0 6d 05 3f 96 27 98 62 3c 8d d4 40 01 e5 53 f9 6b c0 e2 bf ac 9c d1 a3 c7 40 0f bf fa be 63 6b b0 1a 55 3f a8 7b 2d 56 e8 4e ab 3f f0 18 69 0a 02 04 3b 3f 62 36 3b ab c6 3e d6 bf dd 69 03 ba b5 ed 1e 3f a0 40 58 b9 14 6b 2f 3f c4 f6 cc 0c 2e 4a f8 bf 8c 7a b1 87 23 21 ee bf a9 c3 a5 18 85 29 2f 3f 7a ae a4 0a 48 9b 50 3f 98 0a df 47 19 be 90 bf 82 0c e1 09 6b 8d cf 3f d3 63 d8 65 44 21 2d bf f9 cd bf b4 3d e6 bd bf cc f2 26 dd 1b f2 0d 3f f1 46 c2 11 b9 b4 cf bf b5 fb c9 d9 d6 9b 1f bf d0 6b 85 71 fa 8b 9a 3f a0 cf 00 92 88 6a 30 bf c4 d5 8e 29 8a d6 b1 bf 82 c0 eb ac 27 f1 2a bf cc fa 50 0d e1 fa 08 bf 98 35 74 4d eb 17 4a 3f d9 09 8d 4f f2 91 21 bf 77 f0 77 3c 61 52 3a bf cc 56 39 b2 07 4d e7 3f b0 11 1b 13 3b a2 2c 3f a7 0a 8c 6c 42 73 7c be e1 5d c1 c2 a2 77 05 3f 94 8a 38 5c 61 bb da 3f 60 dd 3c 95 1d ec 5d 3f 68 c6 9b 88 13 9c bf bf 9e 35 9a 12 e1 4f fe 3f d5 87 f4 89 cc 41 5c bf f7 fa 39 4a 9f 76 30 bf d0 5d c1 8b 85 45 f9 3f eb f3 bb f6 cc 1b ef bf be 47 f8 c4 b5 dc 8a 3f bf 3e ae f4 9a 09 cf 3f be 84 a4 dc e8 52 52 bf e9 d9 15 5e 20 02 ec bf b4 0e 69 3e 89 1f c8 3f de a0 87 90 01 45 d8 bf 73 40 13 5b 89 65 4f bf bf e1 7f 92 55 b9 c6 bf 78 25 5b 9d 97 bc 14 bf a4 d3 5d f1 72 49 6e 3f ad 4e dc 3d 27 2b 97 3f b5 55 9c 1f fb 27 3e 3f 81 0a 4e 86 e6 79 bc bf a5 b1 fa 0f d8 d3 fe bf 90 bf 0d de 86 01 79 3f 9e 7c 92 02 e6 4b 5c bf 92 06 32 7f d0 ca 8c 3f dc be ea 67 8f d5 81 bf e4 1a 43 df 67 63 2b bf c2 5e c8 ac c0 73 c0 3f d2 fb c9 61 66 50 b7 bf cd 29 fd 88 ac b8 00 bf d7 d8 15 8a 63 51 e3 bf 8d 10 61 99 9f ec 0f 3f 61 83 09 71 b0 d4 b7 3f a4 e1 75 ea c3 9c b2 bf da e6 2a 6d ba 25 82 bf bf bd 42 a6 8c fc 43 3f cc 6a 61 a9 ca f0 af 3f a4 fa c2 b5 04 4a 56 3f 79 20 38 73 f5 ba 70 3f ba d3 31 2e bd af c1 3f b1 46 1e e8 3e 03 de bf 93 16 11 ef a7 5e 1e 3f ad 9e 47 9e 8b c6 4c bf a0 59 b0 c6 25 26 ec 3f a0 80 20 d2 dc 55 57 3f 76 32 50 89 4d a4 4c 3f e2 1e 44 5d 06 af d6 bf f0 c4 9f 29 7c 66 c5 bf e8 26 0c 5e 34 b4 6b 3f d2 a8 f8 5b f8 a1 d5 3f c4 ca 39 44 19 9b 48 bf d1 27 e5 2c 8a 3d 51 3f c5 6e c0 f3 02 06 66 3f 80 cb 28 e4 ef 72 23 bf c8 31 ad 7b 65 72 e8 3f dc d5 c4 88 12 8a ca 3f d3 cb dd 01 48 15 ec bf d5 24 07 69 da d7 16 bf d1 a3 ea 6a c7 80 be 3f b1 40 b6 61 dd 32 b3 3f 7a 83 8b 5e 42 7c 4a bf a8 7e d1 54 fd 2a 6c 3f b6 23 3a 63 49 54 13 3f 90 ca eb 84 fe d4 d8 bf a3 66 4c 3e f6 34 7c 3f 92 81 e5 aa 77 d7 3a bf 78 17 e2 ce cc 9b de 3f e2 97 97 b1 2b d6 0d bf e0 54 d0 62 04 a2 09 bf e1 04 16 ab 37 cc 1e bf d4 64 86 b6 0a 35 9f bf c2 4a 7b 39 97 b7 97 bf c9 ed 9f 1f 40 1a e9 3f c6 6d 2f 3f 5b 70 2a 3f c2 da 1f 1d af dd 71 3f 98 59 a4 05 a7 47 eb 3f d8 ee 00 23 01 b4 47 3f c3 ea 31 4f 11 9e ae bf cd d7 4a fd 74 96 8f bf d0 38 7d 8b 12 80 21 bf aa dc 0f e2 e2 9f a0 3f 90 ac ea 9f 1e 5e 66 bf 99 a9 3a 71 fe 50 8b 3f b1 b7 65 d3 31 38 0d 3f 99 02 7e 3f e9 62 a7 bf a3 0d fd 90 aa ef f8 3f 92 9f e0 c3 ac 60 e3 bf 7e b4 52 a2 ee 69 63 3f e1 2a e8 a8 26 9d 77 bf d0 08 2b c8 0c dc 1c bf da fb fd d6 17 45 dd bf db a4 e5 40 07 63 94 bf 66 9b 2a ac 4d ab bd bf a1 88 cc 43 67 25 ed 3f a5 d9 f2 37 23 33 d5 bf a7 f3 fa a6 90 aa 2c bf ba 26 69 d3 d9 10 2a 3f d0 e6 bc 64 43 df 8d 3f c2 ad 1a b1 08 11 dc 3f c3 58 45 46 e6 d6 63 bf 99 30 63 5c f0 4b cd bf c6 78 e9 68 34 ea 18 bf bc ad 8c 9e 09 68 a7 bf c8 17 ec 75 f7 27 69 bf a4 c9 91 63 ec 13 df 3f ac 0b c1 f9 f4 a9 fa 3f a8 84 99 86 6b 15 ba 3f a8 16 29 f3 26 33 3b bf 96 b6 30 31 04 c3 fb }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

7f838612-16e9-4a0c-9857-aaf648287147

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion