Domains: pastebin.pl phantom.app SystemProgram.transfer PublicKey.findProgramAddress ontopothers.com Sub Domains: solanaWeb3.PublicKey.findProgramAddress solanaWeb3.SystemProgram.transfer md5: 8650e83da50bd726f77311b729905c0d File Names: pastebin.pl Yara Rules: ruleM_Utility_CLINKSINK_1 { strings: $crypto1="solanaWeb3.Connection" $crypto2="solanaWeb3.LAMPORTS_PER_SOL" $crypto3="solanaWeb3.PublicKey.findProgramAddress" $crypto4="solanaWeb3.SystemProgram.transfer" $crypto5="solanaWeb3.Transaction" $func1="asyncfunctioninfo" $func2="asyncfunctionupdateConnectText" $func3="asyncfunctionupdateMintText" $func4="asyncfunctionstart" $func5="asyncfunctionconnect" $func6="asyncfunctionwaitForWalletConnection" $func7="asyncfunctionconnectSolana" $func8="asyncfunctiongetTokenBalance" $func9="asyncfunctioncreateTxs" $func10="asyncfunctioncreatePrizeTxs" $func11="asyncfunctionclaim" $func12="asyncfunctioncreateTokenTxs" $func13="asyncfunctionclaimSolana" $phantom1=".phantom" $phantom2=".isphantom"nocase $phantom3="phantom.app" $transaction1=".AccountLayout." $transaction2=".TOKEN_PROGRAM_ID." $transaction3=".Token.createAssociatedTokenAccountInstruction" $transaction4=".Token.createTransferInstruction" condition: 5of$func*or3of$crypto*andanyof$phantom*and3of$transaction* }