symguid.yara

rule symguid
{
    strings:
        $hex1 = {2B5CA624B61E3F408B994BF679001DC2}
        $hex2 = {334FC1F5F2DA574E9BE8A16049417506}
        $hex3 = {38ACED4CA8B2134D83ED4D35F94338BD}
        $hex4 = {5E6E81A4A77338449805BB2B7AB12FB4}
        $hex5 = {6AB68FC93C09E744B828A598179EFC83}
        $hex6 = {95AAE6FD76558D439889B9D02BE0B850}
        $hex7 = {8EF95B94E971E842BAC952B02E79FB74}
        $hex8 = {a72bbcc1e52a39418b8bb591bdd9ae76}
        $hex9 = {6A007A980A5B0A48BDFC4D887AEACAB0}
    condition:
        any of them
}