drakrun/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/version.py,sha256=-reNiXr25nUU7em7_IKJzimCI10W4nA8ouxAiOr4FaQ,23
drakrun/analyzer/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/analyzer/analysis_metadata.py,sha256=1gQs3KN_wB_8ojNt08zwr4FVLJR1rwtLuJtJE2ifLbo,2007
drakrun/analyzer/analysis_options.py,sha256=gvSkPkTRWJOcny_uzvErkAYSIgRzKg2KDhoJS9HzqYg,3690
drakrun/analyzer/analyzer.py,sha256=7NMjjBmkbpNK2U1-uGI1JqsFAspNRQKt2w7IqxhaAkk,16805
drakrun/analyzer/post_restore.py,sha256=x17t0ASTGwuwUt_tHrKuIS1VRowJD7__x3putc1rQ_4,964
drakrun/analyzer/run_tools.py,sha256=MjmNijCL6b4efli9XCFQwD1ozXHh6TBlcLJf2gBF-JY,4648
drakrun/analyzer/screenshotter.py,sha256=d1IpgNkp49-wCiq4uMBz1GaZ4Eiqmquy-lh3tDnR84I,4235
drakrun/analyzer/startup_command.py,sha256=m5nBClK6_z3rTi07_g2V0o3_g-RGnW6HeL7pSJ3bkRY,3755
drakrun/analyzer/worker.py,sha256=rdxpTOMJkPpbSOzIA1bMq-dBmf8cBZHl2pGAO1zh64s,7550
drakrun/analyzer/postprocessing/__init__.py,sha256=_opx2D31pXk0hAZtJalXynmtj6l97wKRkLYxo6vpRZs,97
drakrun/analyzer/postprocessing/indexer.py,sha256=q7RekDpbFFZLcW7CAzBfCuo59yWWDyKc0trO2jbgxYI,5316
drakrun/analyzer/postprocessing/postprocess.py,sha256=frNmQJUOFnuEvqgTmcQTQIDNMVmYKb1TNQyBkChbzWQ,1633
drakrun/analyzer/postprocessing/process_tree.py,sha256=W8zzV60CsBXbbreAuxZfHOF3YftbWcujG-BBKkRIQaE,12801
drakrun/analyzer/postprocessing/plugins/__init__.py,sha256=6FmuAXBWUAWkkvBdZIeP-Kh8caCl-_GWVkCqICezUjo,3063
drakrun/analyzer/postprocessing/plugins/build_process_tree.py,sha256=grUuUq2rmib4rGpcGIhY56mRrfIZEfrbWoTpftHpsx4,1300
drakrun/analyzer/postprocessing/plugins/compress_ipt.py,sha256=JLPholSxn-aJ1VXyoMnYNeztpW0X3GLhPubztTBbH3A,684
drakrun/analyzer/postprocessing/plugins/generate_html_report.py,sha256=riQ4xEHZmVcRk3_77WUXV-qvph769rjHml8S0yN3eOs,1696
drakrun/analyzer/postprocessing/plugins/generate_report.py,sha256=ned43jdhYC_5cB5Hqd1ntB3u_Deoclvyv8KEUvM2NfY,1725
drakrun/analyzer/postprocessing/plugins/generate_wireshark_key_file.py,sha256=63QRk2zQIag5qgkl8n1A9fniDooSUmKvE6ke2BegGTk,1089
drakrun/analyzer/postprocessing/plugins/get_http_info.py,sha256=AIBxK-UT3KDOgEMKRCKY272pbaZuVhWGdjCuwS6W768,7684
drakrun/analyzer/postprocessing/plugins/get_modified_files_info.py,sha256=UUdbFuQs3payFIgjbHIcZsn6dU9h3aNw7Iufp_GE8Gw,3084
drakrun/analyzer/postprocessing/plugins/get_socket_info.py,sha256=fLD21yFW2BsAlxZ4xpgfII9Iz1kEzTBlekoNtj_gUC4,2663
drakrun/analyzer/postprocessing/plugins/get_ttps_info.py,sha256=u4WP-TiKBF-R7WVwjeykvG44OLPoU72eZxbskvjX5sc,873
drakrun/analyzer/postprocessing/plugins/gzip_syscalls.py,sha256=Fgm3c73tnfkDYXvDBAYRM6TOwHRAHGX-vZK_zkEVkUM,803
drakrun/analyzer/postprocessing/plugins/index_logs.py,sha256=xX8iSgioWcyVYPFKyOxjwDpt0fssl2S_Bnh1GKJnlk8,351
drakrun/analyzer/postprocessing/plugins/karton_integration.py,sha256=hoMD55qWYYDXQKo3GZmHatL3hKVUFcYDH1s8MvZsasM,5706
drakrun/analyzer/postprocessing/plugins/parse_utils.py,sha256=M_ZHEuJZAOkpIjw95Qx-d36C4Gr4iiMANfKHxGsEw6M,1979
drakrun/analyzer/postprocessing/plugins/plugin_base.py,sha256=QCObxjR4T_HfConjW14poqgIfTInSzr4pSioQdpZRoU,1644
drakrun/analyzer/postprocessing/plugins/process_dumps.py,sha256=TT-wI60SOF2tYXR7nU1L4gih-fH4E5peSfnKZakWb2s,5641
drakrun/analyzer/postprocessing/plugins/screenshot_metadata.py,sha256=KFwW81ryW_qC9-MQJ54sxD8Ul8OZagsnH19QKNXjOeo,654
drakrun/analyzer/postprocessing/plugins/split_drakmon_log.py,sha256=hrkIT3K8oRicY0W4L9xakjFHF6yPJU2WHkJVIAjKK6k,1947
drakrun/analyzer/postprocessing/plugins/capa_plugin/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/analyzer/postprocessing/plugins/capa_plugin/capa_processor.py,sha256=vpZgbaphyhFq-6I7VG4xPxs2CZ6hGi0zc2plL5dZL98,13924
drakrun/cli/__init__.py,sha256=9EVxmFiWsAoqWJ6br1bc3BxlA71JyOQP28fUHhX2k7E,43
drakrun/cli/__main__.py,sha256=vBQ82334kX06ImDbFlPFgiBRiLIinwNk3z8Khs6hd74,31
drakrun/cli/analyze.py,sha256=AXmYxoyLgf3LjY8lnfU9Blm2qvkoWD6CzWzLGvW-Jwk,6404
drakrun/cli/banner.py,sha256=HapDlfNCJ_ncWBP9mRpEx6Y6Nmku91StOqZtIQDH5pU,235
drakrun/cli/check_root.py,sha256=zo1t1KCz-Q7-fccZ7mGQrPuSL053n6aCIV4hd5CKAuI,337
drakrun/cli/drakshell.py,sha256=p87MU744TyA7ltJjA0nrHsBWYTqOdEeQ84Sz4-FDt2A,1979
drakrun/cli/drakvuf_cmdline.py,sha256=swq6nxtsM8GplgkMTsFXoQuCfgmt_RU0ea02gQU-gNg,2290
drakrun/cli/injector.py,sha256=OaSVMuL0uT3QXHNWXHc7SPCKykL638AD14xv4i28sFc,4805
drakrun/cli/install.py,sha256=KDvpeGiFTgPdphi1MffJt8-uVPsodgA_u2-WMOOQ4Y8,3396
drakrun/cli/main.py,sha256=aBiNeKaxIU-aJ8zEv7VrBQZu-N4CVnvrdDCbfqTyWa8,1247
drakrun/cli/make_profile.py,sha256=B-fueo5oz8jTMqqp0S3gYyDMbNekrRnPlQ5pyvss3x4,2039
drakrun/cli/modify_vm0.py,sha256=tQ35Li8E-OnwBYgdq8s6G1PZiHXQCzspNUURk-7WHRc,3034
drakrun/cli/mount.py,sha256=tubizm-okGY7eXsWW2xUg4aafN2x2xugmx7ZXQ0pmaQ,718
drakrun/cli/postinstall.py,sha256=BNCdc0pJnrL_xs2PhssOXVC8AhbEDR8HSdNdtOdbuzc,1005
drakrun/cli/postprocess.py,sha256=ocHzKhnR9CNx6A9cqZZwWjqximH8X6pcrhcF6IStk7c,749
drakrun/cli/s3_storage.py,sha256=oP3h92wnyJAB69OuGWYdRXH9LAeNM2Q6azojsHxyhnY,2225
drakrun/cli/sanity_check.py,sha256=bEGIV6egf9612j1kFQ5xwKglzrNz4hWuM9XCBfY9xok,1330
drakrun/cli/snapshot.py,sha256=3uhqqJpkJyhRjGaldlLqHF93xsprIJhWaUUqFQs1MgE,5654
drakrun/cli/version.py,sha256=yicG0C9XM3zEj3v93p-ZeIvJ3ewY-pEFCEUDplnObuw,1074
drakrun/cli/vm_start.py,sha256=oif5wlmGh32b5UQwbQy6u25kVvIagOx9igYtTCG1P_s,623
drakrun/cli/vm_stop.py,sha256=cSZluHCJjGyy5DBl-b9882GnCzFztZkwymPUofKOYrQ,627
drakrun/cli/worker.py,sha256=nd4f52FVRh5m-u-Gr4o7GRJb6kLhZ8IXTiYuoHm8Ez8,359
drakrun/data/cfg.template,sha256=F01AFaJcosqriHFdI97V5L2cpTqLu9IP752NdF7V9TQ,831
drakrun/data/config.toml,sha256=8UDQGMYS7eHOju9RSR93pALZJkWgK_nY3c8qtKPGFYY,278
drakrun/data/hooks.txt,sha256=lLfQMpxN10ciFdVctp1MuEntnKYyanI3jN82QG6ioiI,21704
drakrun/data/syscalls.txt,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/data/vm-post-restore.ps1,sha256=6f2Ub4EOuHikAiB8xRDCCKekI2OfRpRd5ExnLF-XEso,293
drakrun/data/capa-rules/.github/workflows/release.yml,sha256=qcZmkunXGMnp3Grt_0kwjYMArdUtYWqtrFuItos6SJs,690
drakrun/data/capa-rules/.github/workflows/sync.yml,sha256=JowFDIqkSknLIhbvRgxbWpopW5-ZpZ49_gIi28rfqZc,3190
drakrun/data/capa-rules/.github/workflows/tests.yml,sha256=iMiRXLw0TDCDhu762jFZL7fOMS7Iv4bcLvuOcath8MU,5468
drakrun/data/capa-rules/anti-analysis/reference-analysis-tools-strings.yml,sha256=AM1JmN50_2jw1ilHTBeTDebQvGUF8pqXGhhdab-0tSQ,1776
drakrun/data/capa-rules/anti-analysis/anti-av/block-operations-on-executable-memory-pages-using-arbitrary-code-guard.yml,sha256=fdvgM9xImjN-aTEzyHtcPWSBlmckwB4i9UJUW8Hk25M,941
drakrun/data/capa-rules/anti-analysis/anti-av/check-for-sandbox-and-av-modules.yml,sha256=-8LF1bEiVuxPX61k9NJKD9RYZoOOzUdjBHcVOIuX958,1400
drakrun/data/capa-rules/anti-analysis/anti-av/overwrite-dll-text-section-to-remove-hooks.yml,sha256=yeVWLR8kV3KyOhTyNkaKc-datzm89Z_I8ff1TcqHTZk,1044
drakrun/data/capa-rules/anti-analysis/anti-av/patch-antimalware-scan-interface-function.yml,sha256=IBIVuOKkEdfFzhoO5qqmweq-IQSXt1USvVKdxUtEANU,768
drakrun/data/capa-rules/anti-analysis/anti-av/patch-event-tracing-for-windows-function.yml,sha256=mO2YNJjYBm_h90U71tu9h4kRMHue7P5IfIc0-LOkbeY,1047
drakrun/data/capa-rules/anti-analysis/anti-av/protect-spawned-processes-with-mitigation-policies.yml,sha256=ieXczfZeMgjcG5AvpHX8uMneUZphhW5NENMUjB4KtVw,1200
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml,sha256=j5Wt64sRrMz_tkw5o7eMR3zu6Aa-lTfHTvkb6aXbGIo,1273
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-hardware-breakpoints.yml,sha256=d3OxUw-x6yZpOCCTFFeQ2xgV4dT0jPuqMfMHiXT6uik,795
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-kernel-debugger-via-shared-user-data-structure.yml,sha256=DelpyfBjjOWSfOAj51Nn213hyTJZMd21f1ti1yxu5YQ,898
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-outputdebugstring-error.yml,sha256=2C80KjcHFkOjZunIcLufEzCAR4_hyYh6ASvLTcv7bx0,530
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-peb-beingdebugged-flag.yml,sha256=GwJ1sFsILs1ffqso-fJJv1TOW0b-x7oOVxcIiYHFBko,606
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-peb-ntglobalflag-flag.yml,sha256=v6rKASiTDAbsOj68UFuhj3xSWC-sw7R_mljG8-UKXrg,1283
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-protected-handle-exception.yml,sha256=vMEcTErd3PIKI2mnV7lNoFdTHEipjCeulHsymFrEVVo,920
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-software-breakpoints.yml,sha256=ggduKqcR8qBlFdkGR738o6a4fIrSSOhXebMK6WLd9eg,1010
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-time-delay-via-gettickcount.yml,sha256=_yzUKcp1i68RjfS_NoEpSNly8TiMX5nrER37lc2zues,611
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-time-delay-via-queryperformancecounter.yml,sha256=-wk5mDJHe5byKes7iGreUZAVu2qNQvyGUHhQDZf0gsw,521
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-trap-flag-exception.yml,sha256=EknDDhd6lF-I2A5ZUsK6cjXjir7lZxkudrz1luCZnF8,1029
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-for-unexpected-memory-writes.yml,sha256=VHzalIw2xj5fryp353wIDf--6_KFtOESLBI9e119LXk,571
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-process-job-object.yml,sha256=RM_4q0xw2me-pjhmspiuHXBHvFN0Wvwyx53Dko4iHRQ,1121
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/check-processdebugport.yml,sha256=rnf5pm0oyYwvxVObdXvGn_mj28O8AUeQPBMue1XURQk,614
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-detection/execute-anti-debugging-instructions.yml,sha256=ciKSttAfME7sxjlCCMUYyAnvdA17RNq6NVHyTgQMONQ,526
drakrun/data/capa-rules/anti-analysis/anti-debugging/debugger-evasion/hide-thread-from-debugger.yml,sha256=ktpvzb50VnAwaE_K3zKvX3QzI8Swm8ubg2KXcqHWemY,1459
drakrun/data/capa-rules/anti-analysis/anti-disasm/64-bit-execution-via-heavens-gate.yml,sha256=aqwP2ZOgE4Y9VcV-NHtuEdXGSbjR6Qk-uN9Y3-x_kf0,1394
drakrun/data/capa-rules/anti-analysis/anti-disasm/contain-anti-disasm-techniques.yml,sha256=4oa0oGpHxNSNW74cN1yTuK9QpnSCDHnXvPUSwDZdC00,401
drakrun/data/capa-rules/anti-analysis/anti-emulation/wine/check-if-process-is-running-under-wine.yml,sha256=sV2r4j0Sl5qCw0Mj_lnqT091Q-04VsYMRTyFqjqt8ro,791
drakrun/data/capa-rules/anti-analysis/anti-forensic/crash-the-windows-event-logging-service.yml,sha256=lPMKfuMCm8gBh7S19awWAa-ygSlxT_J096RZKWWh93M,590
drakrun/data/capa-rules/anti-analysis/anti-forensic/impersonate-file-version-information.yml,sha256=nHmH-97ONcVuAVWnP9-56ETHuLwfAEt1Env-iZXvX20,1047
drakrun/data/capa-rules/anti-analysis/anti-forensic/patch-process-command-line.yml,sha256=EaR0r5ABh7S72l6e5UTJPyRx29ScetTbGUDjWwtQweA,1871
drakrun/data/capa-rules/anti-analysis/anti-forensic/spoof-parent-pid.yml,sha256=yu856vXfkGLWcM-dd4y0QJdF4a74Nqt5KNI2_iDJcvI,646
drakrun/data/capa-rules/anti-analysis/anti-forensic/clear-logs/clear-windows-event-logs.yml,sha256=tVFi57CHTJ8oBcmKJD-cIcb5UyM4gz3ykD6Ki9rjCMM,887
drakrun/data/capa-rules/anti-analysis/anti-forensic/self-deletion/self-delete-using-alternate-data-streams.yml,sha256=cDrdSTfv86BQMc3kxqVJ6U1LWi2g5GyYmYKmCEcMTHA,1567
drakrun/data/capa-rules/anti-analysis/anti-forensic/self-deletion/self-delete.yml,sha256=rNyprtEw0bvfvddh15xpDva5eYarKEXNhnYjoQCeEXk,850
drakrun/data/capa-rules/anti-analysis/anti-forensic/timestomp/timestomp-file.yml,sha256=hqmz6EpoOS-mP-2NyCbTHaUUMlEyJhRZeaKyJ2zzWb0,631
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-foreground-window-switch.yml,sha256=AB0U_s129Qp1hm_qfbqjUyeoWCO5c_X6266raPcwg8k,1134
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-microsoft-office-emulation.yml,sha256=YrH-ZFC7iBUQMnIRwbA5VOuIRH6vw-3KwDURR616MV4,677
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-sandbox-username-or-hostname.yml,sha256=G02LDjDetL0KF9rx08bxo3wbNL81Y6tMG_lX7QZv8Nk,2872
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-unmoving-mouse-cursor.yml,sha256=NG1Cb8-FOQ4BR6A0RIndDxcy8cGtWCY-u72O4wv0nig,698
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-device.yml,sha256=QGuH_tTGLkxkhlbIQyx3BBmnMHfuQLZc-Uz6HNUCH6M,615
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-dns-suffix.yml,sha256=U9_3qPfQ4kxYmbjQFVxb5aLQbHR9cj0eydWZr6nolfA,687
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-genuine-state.yml,sha256=IU2R5DyuRkRwbfhPT0j2HT6G_Qqtatk1dNbKE_4uE9E,1001
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-process-name.yml,sha256=OU8ZzrAbrYkrm-8nad2nLKMcWkqtoPN18DF7HCUo2Yg,598
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-registry.yml,sha256=RP24OXksHgY52qZ74NmHFOS1AS-99WDCOECy2Rq_4nA,719
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/detect-vm-via-disk-hardware-wmi-queries.yml,sha256=r3PBgXWNb_mXS-w-OETj5PZGg3RcUPEpjakl0A9Yabo,642
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/detect-vm-via-motherboard-hardware-wmi-queries.yml,sha256=aqqRxzkheS8nwglN1zCkL8tMXEvF_7SUva-Su5VeTRU,651
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings-targeting-parallels.yml,sha256=RAIAMN7_daQPrlRTEGRlGc6k23OREl81TeAjxl7mGSQ,689
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings-targeting-qemu.yml,sha256=yUfJiEQ82lU3Bas_MURyB8nSbJovH0ZJ6xAdhiX5Cv0,662
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings-targeting-virtualbox.yml,sha256=b91FqgfkqS83bFh0wUVMWYg-Uc_pUpriKZuxSsQHBDw,2927
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings-targeting-virtualpc.yml,sha256=aO-Y1iai7V5PsLES0vX-wFTgChs1L6Sa3jOBuzx3-MU,732
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings-targeting-vmware.yml,sha256=tCwPwOtDDD2mD7dokfgtNNCJmqSkQ8xrHIvxOLxZSbY,2244
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings-targeting-xen.yml,sha256=CnAtpSFunpcaVwMUfXKnk_MRYmIiQUEEBQJLp-UggrM,705
drakrun/data/capa-rules/anti-analysis/anti-vm/vm-detection/reference-anti-vm-strings.yml,sha256=qGPUMgIrXtU7qX2rmHbA50CP56cg5nZSpd4UCouuMpQ,2497
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-advobfuscator.yml,sha256=HMYIYKAMyso0U7DjmM86bf1Fd12e_0tCBEjG7DiyG64,556
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-babel-obfuscator.yml,sha256=co_wzcNhtEM1o6D10ivl398JPUvS95eB8plHX4zenTc,646
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-callobfuscator.yml,sha256=kouHBLToZrESIYHu26oA5g1zYQjZ5a57hR2aNXc9QhY,448
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-deepsea-obfuscator.yml,sha256=-kBTJz5K4JypYWAwj0rYIFMBSzGblN4SfnsWH_0XQjk,654
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-dotfuscator.yml,sha256=e6DSmY6p-5k7qnjcd9BeLfjGPh_s44p9xtJ7E7xzFzg,611
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-smartassembly.yml,sha256=uGnlsRhIyIlkkQZxrcVOqoJ2Cs47Ji4aczqTJeR0sYk,806
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-spicesdotnet-obfuscator.yml,sha256=Jvc0ECUOhROMCp1kPSKQI6fAV7dWNoRMNTgl3IILOIk,829
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-vs-obfuscation.yml,sha256=0kfw5qTihoGGMOkSWsHtW-K1WlKOwRBr-PD7GmIgAIg,753
drakrun/data/capa-rules/anti-analysis/obfuscation/obfuscated-with-yano.yml,sha256=syhDT31zVwKifKGVtJR0ful25967N60aj01fy2ZNYf8,575
drakrun/data/capa-rules/anti-analysis/obfuscation/string/stackstring/contain-obfuscated-stackstrings.yml,sha256=gbzVdU7avXhnKdwzdh32v8K-vcrSpUYqMrXIdjX_m1E,645
drakrun/data/capa-rules/anti-analysis/packer/amber/packed-with-amber.yml,sha256=WIQzWCENlbMAiEUO_I-b_tW7u7YuN2YidAYPdqhfufA,528
drakrun/data/capa-rules/anti-analysis/packer/aspack/packed-with-aspack.yml,sha256=DMEk1ZhgAqeFjb1N83TnjegShFeJUmSyeYGOzOtpNLk,837
drakrun/data/capa-rules/anti-analysis/packer/confuser/packed-with-confuser.yml,sha256=hb9Mzoq5zJ00Q9GCo14IQA4TbunPc_NGdI3oET8NhSY,519
drakrun/data/capa-rules/anti-analysis/packer/generic/packed-with-generic-packer.yml,sha256=C6lD-aKLy8rbJJr84u3Tx4b50oercFz4TOAN7AghkX0,748
drakrun/data/capa-rules/anti-analysis/packer/gopacker/packed-with-gopacker.yml,sha256=D6apjXGmo5LuJcSljBalfCssgsYGZTvgdi7Xb1m9CRU,875
drakrun/data/capa-rules/anti-analysis/packer/huan/packed-with-huan.yml,sha256=2VKeQXBPcumWLV6Bno6209cgZJvhXHEzZq0SjC-sh_A,916
drakrun/data/capa-rules/anti-analysis/packer/kkrunchy/packed-with-kkrunchy.yml,sha256=12pBralQdZx55uZ_qPe058N6UtTfS_8NsylkBHJ6s6o,580
drakrun/data/capa-rules/anti-analysis/packer/nmm-protect/packed-with-nmm-protect.yml,sha256=qCvSYdgbqZ8TP4xP9o2KQU6Nh0oMEMMsZunBLxV3Lm4,774
drakrun/data/capa-rules/anti-analysis/packer/nspack/packed-with-nspack.yml,sha256=qtRRfqPnXC_UYzV11rAYRNfYZmIgdewq7ng50g1Qo0o,572
drakrun/data/capa-rules/anti-analysis/packer/pebundle/packed-with-pebundle.yml,sha256=SWzFz9dVcjKAnCgcaH-P6GJvY0WQfGZo5gyThqiM7jE,559
drakrun/data/capa-rules/anti-analysis/packer/pecompact/packed-with-pecompact.yml,sha256=xtDK5_OFNE2YHpAX-W2KeDZNFmv1DH8tnJQRTfojYSI,762
drakrun/data/capa-rules/anti-analysis/packer/pelocknt/packed-with-pelocknt.yml,sha256=R2dYJP7Bcl20h6t0VEipwsRjlp2FAS4huM0UqTp61gg,533
drakrun/data/capa-rules/anti-analysis/packer/peshield/packed-with-peshield.yml,sha256=81k5PBzrGFXaTmacezagRl9ovElRUZpEmXspaB9OakI,604
drakrun/data/capa-rules/anti-analysis/packer/pespin/packed-with-pespin.yml,sha256=5IunOsS3_mRfLLChNCAwfesSZmtWVpz08wkROAcKeu4,668
drakrun/data/capa-rules/anti-analysis/packer/petite/packed-with-petite.yml,sha256=wOp7xlyISBoadVi87KC8kDvslMNpb0RstWvvMpaDhgE,528
drakrun/data/capa-rules/anti-analysis/packer/rlpack/packed-with-rlpack.yml,sha256=1jcG0_fHoD0Rdvs5IcqlTHh5jfDmhiToNM2QWyoUySQ,553
drakrun/data/capa-rules/anti-analysis/packer/themida/packed-with-themida.yml,sha256=6-QdfHPCNJtVfVoy1o00Fe-re1k7AMMp6ZlMChO_1BI,1118
drakrun/data/capa-rules/anti-analysis/packer/upack/packed-with-upack.yml,sha256=ZeA6cgtcGadppOUCDeGgNS7OsIEQDS6TqSdITytif00,583
drakrun/data/capa-rules/anti-analysis/packer/upx/packed-with-upx.yml,sha256=O7HGYdiot_oVaXNmgHHLp7BEQIPa-bTxaYjhyGxQt28,669
drakrun/data/capa-rules/anti-analysis/packer/vmprotect/packed-with-vmprotect.yml,sha256=sCuAoJCnYyZRTL0cTqMx1sOT_8dYkhgpzMUHYU4kHL4,1043
drakrun/data/capa-rules/anti-analysis/packer/y0da/packed-with-y0da-crypter.yml,sha256=IClLGhQaBXmBUWaw_7L2w8xewfKu7m936QdPIMEMszU,576
drakrun/data/capa-rules/collection/acquire-credentials-from-windows-credential-manager.yml,sha256=1w2hd7ATHwc6R8ynRebUGBWGebZY12Xr1dpa52O9wNs,842
drakrun/data/capa-rules/collection/get-geographical-location.yml,sha256=qXH0Mk1f_nPAtMyqIbN18NnoOyuQjJOs1-z5sB87C9Q,1077
drakrun/data/capa-rules/collection/use-dotnet-library-sharpclipboard.yml,sha256=qrdl6m8jkfY2kRDCGU8v7R7k9wW879VABuCBm4XdsvY,580
drakrun/data/capa-rules/collection/browser/gather-chrome-based-browser-login-information.yml,sha256=anUCuzuEIqHenN0nTc3RfpmN63EPZD-5cFdNPaJqsfI,1387
drakrun/data/capa-rules/collection/browser/gather-firefox-profile-information.yml,sha256=H__jAho4dNz0vJRCfK-MtIGKd485lCWUyr8cwxkl-GQ,1148
drakrun/data/capa-rules/collection/credit-card/parse-credit-card-information.yml,sha256=Qd2MhkXZAjjV7gPYacpJhzIDlW_pfIPsJn0IOE7biok,1556
drakrun/data/capa-rules/collection/database/sql/reference-sql-statements.yml,sha256=misVgeOj9iDYSNbLLZIlhWdD4imvgp1yiXiyXrpDP4A,398
drakrun/data/capa-rules/collection/database/wmi/reference-wmi-statements.yml,sha256=-Pl9e_o7snR_ylWsqXfjbFOgZx-ADGlyF2lvA06mzx8,482
drakrun/data/capa-rules/collection/file-managers/gather-3d-ftp-information.yml,sha256=VtmKfSF4p201cZZZkCaat9fZKSUGt16piU-_-biwHCA,502
drakrun/data/capa-rules/collection/file-managers/gather-alftp-information.yml,sha256=wgAsU_5ab5YU3Ovu8nqUgRjjCHuiRnjWSfuxaAZOLS0,552
drakrun/data/capa-rules/collection/file-managers/gather-bitkinex-information.yml,sha256=WZpKDFPQDU7UnBy0phlokOgPTkAZkr7dxxjGM55yboc,466
drakrun/data/capa-rules/collection/file-managers/gather-blazeftp-information.yml,sha256=ito1TmuqxtBxMZj7xc8BsK-_VHuLVQdn1LljO3e3y64,658
drakrun/data/capa-rules/collection/file-managers/gather-bulletproof-ftp-information.yml,sha256=0zN1LY3MiPbPdVevCfo8ioShf-ESzK6Vupri25Grw3k,919
drakrun/data/capa-rules/collection/file-managers/gather-classicftp-information.yml,sha256=rEbQVzI151eQU29EvGWiX4eRym3yXWINQvJfxMERTWU,489
drakrun/data/capa-rules/collection/file-managers/gather-coreftp-information.yml,sha256=zx_XQdol27hfxYREGzIpd4xPuh8yYO-3WNOcjVR0A6I,562
drakrun/data/capa-rules/collection/file-managers/gather-cuteftp-information.yml,sha256=Xj3KlBbSbVlMOKVnyhjVf6s3zBGYuLnXxNZsKZEt76M,620
drakrun/data/capa-rules/collection/file-managers/gather-cyberduck-information.yml,sha256=2ywNbScrzAsQr_xlmjKEqQv_yc9Q__eFVBK6JuDCanM,502
drakrun/data/capa-rules/collection/file-managers/gather-direct-ftp-information.yml,sha256=NY2U6_Etc0FT3kLzw1tHP41NWjHXHC5AnoYNIdXTSys,1161
drakrun/data/capa-rules/collection/file-managers/gather-directory-opus-information.yml,sha256=77lP9M5oLIGiYO6_JUtlzhvqdJAA5y3kJYT7714An4I,531
drakrun/data/capa-rules/collection/file-managers/gather-expandrive-information.yml,sha256=HmnukjCh_gsT_PE-BMZlNWHZrBgbCqHFypRgmphO-LQ,598
drakrun/data/capa-rules/collection/file-managers/gather-faststone-browser-information.yml,sha256=DpAMDtSPvVI9O0cah1-sD0XkiSi7OhcxoDMXxfxm5K8,476
drakrun/data/capa-rules/collection/file-managers/gather-fasttrack-ftp-information.yml,sha256=ZMgKvlMZPY1gm_VohE8ZBrIqzewf1VnlNUfXD1OlMJk,481
drakrun/data/capa-rules/collection/file-managers/gather-ffftp-information.yml,sha256=SKZjT8UeculXg4ib4Jq9fZq_ZKevBD2v_EvbVsrurYw,792
drakrun/data/capa-rules/collection/file-managers/gather-filezilla-information.yml,sha256=HcdjV2eduPxTOYgaSoNQUicXdqnQC28yXynoVQMyA5Y,1040
drakrun/data/capa-rules/collection/file-managers/gather-flashfxp-information.yml,sha256=m8O6QoIY3DVpBGjrk_LY1hGIL84K1vLmBmc9Gr3In9M,642
drakrun/data/capa-rules/collection/file-managers/gather-fling-ftp-information.yml,sha256=w2A0kfyOh8uO2wknkhdGCfgaxLZQhSCqFFwrzOZglmA,651
drakrun/data/capa-rules/collection/file-managers/gather-freshftp-information.yml,sha256=0VOxo_nq8IfOV1ihghU_m_-iO3gd1WgzYw9loVOtnI0,398
drakrun/data/capa-rules/collection/file-managers/gather-frigate3-information.yml,sha256=8MpPnJ9mE5AkD4oAGIU_L6MZ8T8yQNbEn16L_e0FKBU,471
drakrun/data/capa-rules/collection/file-managers/gather-ftp-commander-information.yml,sha256=4oRTShFNNhU7kc3KAsmM10ySRo8AhfgK5JPW7o_p4Fo,545
drakrun/data/capa-rules/collection/file-managers/gather-ftp-explorer-information.yml,sha256=XnGcJhDhnt-qLqFpfWIVKpbkslcvbCYzJJhXROGBJA4,829
drakrun/data/capa-rules/collection/file-managers/gather-ftp-voyager-information.yml,sha256=u6SYXAjbTgX_LFnxkc2ruZeCXNkQLXueCDhaX3osqeU,546
drakrun/data/capa-rules/collection/file-managers/gather-ftpgetter-information.yml,sha256=SAftXJQyaNRPwguDoZtzBxNkUtkkLP1Xlsc_Yczhy-c,463
drakrun/data/capa-rules/collection/file-managers/gather-ftpinfo-information.yml,sha256=XAMimmIzrjSArz-ByExu2wy92y5hQVxqrgjjZV0JDpI,555
drakrun/data/capa-rules/collection/file-managers/gather-ftpnow-information.yml,sha256=bSQ4Q7tFRPUPTkTV4-BvxDjSLn3ZKicTlctj6cACEkg,425
drakrun/data/capa-rules/collection/file-managers/gather-ftprush-information.yml,sha256=RF7wym8BQwIwT7cVcbXQ6Tww4qgVJ4_1JAqfzrQHFhQ,475
drakrun/data/capa-rules/collection/file-managers/gather-ftpshell-information.yml,sha256=7YhT3baE8IThiXc8VYy5vE07NakbqnC7Zcx-ccOMUN0,456
drakrun/data/capa-rules/collection/file-managers/gather-global-downloader-information.yml,sha256=B8-6-WDto8KIU8UTHuf9SGst2U7v40-fSZ_2NWHmyJY,473
drakrun/data/capa-rules/collection/file-managers/gather-goftp-information.yml,sha256=NLHfcho13rbofcwXFdx8yPMY40HWOvQi2K86C0Q2-0Q,450
drakrun/data/capa-rules/collection/file-managers/gather-leapftp-information.yml,sha256=vpJF-F0szhcPoHGrGQvbNJTHYFw8kc4m4KK1CEex6D8,710
drakrun/data/capa-rules/collection/file-managers/gather-netdrive-information.yml,sha256=I7yFxTN1d43cHc_xTpyfEOleNL-gWzgx24BCVJvWqus,460
drakrun/data/capa-rules/collection/file-managers/gather-nexusfile-information.yml,sha256=JCYlJ_IXy3qa60GRRXCOF5i3EwtU6seoaw-8Bqcuy0g,454
drakrun/data/capa-rules/collection/file-managers/gather-nova-ftp-information.yml,sha256=AdmqdwwT6LyRhMLl1RkEJ257B92GtnUgfLQ7D9LdRJg,436
drakrun/data/capa-rules/collection/file-managers/gather-robo-ftp-information.yml,sha256=GdgU_i8RmY58LfVwEbpWIAOLeC6jb1I6o0wqaa-X9hs,769
drakrun/data/capa-rules/collection/file-managers/gather-securefx-information.yml,sha256=xv_R-WOHzU-YqcE8i8aWzfqiHvu_IE1sei9_Gf0HO58,626
drakrun/data/capa-rules/collection/file-managers/gather-smart-ftp-information.yml,sha256=Kj2FXws3gieQSCxAHoFjekqVljolZFlrgwQtgq1x4Z4,546
drakrun/data/capa-rules/collection/file-managers/gather-softx-ftp-information.yml,sha256=K8rNz37l6g6QrVU7jVsMFv7YVZyNIEieSfrhXNtucjs,509
drakrun/data/capa-rules/collection/file-managers/gather-southriver-webdrive-information.yml,sha256=g1dq-mtED9JfUGoa7KmpUSFM7Ab8GjtX1LcLmZ6plnY,674
drakrun/data/capa-rules/collection/file-managers/gather-staff-ftp-information.yml,sha256=sRe-8M5AYH_e9vT51zeIwf7WSH5pjKEUhgaxqfuror0,473
drakrun/data/capa-rules/collection/file-managers/gather-total-commander-information.yml,sha256=M9_y6Cwej-WEey9hOyfVGLD78oVVeY-YINKgZLPCEL0,673
drakrun/data/capa-rules/collection/file-managers/gather-turbo-ftp-information.yml,sha256=mmh7aARjEzpg4A8tbTSB07HV8ZKXh8rrOPZ9vECjbp4,615
drakrun/data/capa-rules/collection/file-managers/gather-ultrafxp-information.yml,sha256=Ek0lQhthl_kNhc9Taz6L2WCsYMw0DxEBwWkJWOvS9Ps,411
drakrun/data/capa-rules/collection/file-managers/gather-winscp-information.yml,sha256=NYM4ZxvVsg9ietI1VhQVlpWidm3Us0BpaN_I476l3KE,579
drakrun/data/capa-rules/collection/file-managers/gather-winzip-information.yml,sha256=h_mkUpagIuFUoYtGuVdHpSzeyQerRhGKsmJm18pXKFM,739
drakrun/data/capa-rules/collection/file-managers/gather-wise-ftp-information.yml,sha256=xXbyr9LLWicO3NB4JsLm9pjdX0EMiZehDlbXt7832pc,655
drakrun/data/capa-rules/collection/file-managers/gather-ws-ftp-information.yml,sha256=KbOiFh0jZShtPQJbzZUjRqxt15LRCoPn4gwFDAh1p2Q,505
drakrun/data/capa-rules/collection/file-managers/gather-xftp-information.yml,sha256=5vx-cy5lfCBpihfwbVbLrARahoST6larLTTJw8ZKulg,468
drakrun/data/capa-rules/collection/group-policy/discover-group-policy-via-gpresult.yml,sha256=d55Rv0vA8FtDodaotgJB8rs5zoS8IuyRMBw-7Nn3Rwk,455
drakrun/data/capa-rules/collection/keylog/log-keystrokes-via-application-hook.yml,sha256=pcEIbSbW7oYPlxIYmega8IIasrMxYHK_94BDG6h4u9U,558
drakrun/data/capa-rules/collection/keylog/log-keystrokes-via-polling.yml,sha256=uhOXj6F0f4jW6pPq3vU-Tauykkp9kgX0mZa8njGvIbk,620
drakrun/data/capa-rules/collection/keylog/log-keystrokes.yml,sha256=JmOj8hF6f5XkZYUF_692BZL_hlJVlv07VxasWhoLoQg,745
drakrun/data/capa-rules/collection/microphone/capture-microphone-audio.yml,sha256=gAyazFE9Ouxtg1uE0pHCQTYZbd12r4-5G9oy0i_eY2o,540
drakrun/data/capa-rules/collection/network/capture-network-configuration-via-ipconfig.yml,sha256=sGDY89s8xcYTvb3X2amBswPrOV73yjON83lG-JQB7Y8,602
drakrun/data/capa-rules/collection/network/capture-packets-using-sharppcap.yml,sha256=fM7s2a7ToYvi9H5XVnXiRKTpai4skITWObPXOYMP4xY,518
drakrun/data/capa-rules/collection/network/capture-public-ip.yml,sha256=huVrzWPp5esTQEI4_gsYN8epaOjcr9rVxg3NOqwtFE4,1158
drakrun/data/capa-rules/collection/network/get-domain-trust-relationships.yml,sha256=0p8RuVStAJxKb7tUcYAP2a4Lq341_1oVYWb5xacrjRc,572
drakrun/data/capa-rules/collection/network/get-mac-address-on-windows.yml,sha256=2bDdsaIL_KilZC8-gyB4ncsglWYeSeWhOvaWBP7suzE,1230
drakrun/data/capa-rules/collection/password-manager/steal-keepass-passwords-using-keefarce.yml,sha256=cd_EJuuk4sUcLNFCKaM_SFyGx-qRJ07EA3Ux0I9IgXk,617
drakrun/data/capa-rules/collection/screenshot/capture-screenshot-via-keybd-event.yml,sha256=8mifS6J19G9xUlroJLEoie91KlfmIXwyPyjcJbqSijg,1006
drakrun/data/capa-rules/collection/screenshot/capture-screenshot.yml,sha256=pkqnFl-bU5Rj_Pa2Mh2Dzz8yirZ8HA0Iarm-ZxdR_GQ,1258
drakrun/data/capa-rules/collection/webcam/capture-webcam-image.yml,sha256=kL_BhO-7Yya29WoXQinmJm8vaxI4HKtyjpiBDvcpmj8,1228
drakrun/data/capa-rules/communication/receive-data.yml,sha256=lw6I89AKiR0W1V8AJX_F-23o5tZyjr7-Y71NfKjUBvo,534
drakrun/data/capa-rules/communication/send-data.yml,sha256=BbSDN8mfYN9C6Z_lPlGJUlqcUmsxr0G78l8gCveMVVM,931
drakrun/data/capa-rules/communication/c2/file-transfer/download-and-write-a-file.yml,sha256=vvX9zv4Ry3s7m7aZNTeughsEvagOgh1ebcokiGZ9Mlo,573
drakrun/data/capa-rules/communication/c2/file-transfer/write-and-execute-a-file.yml,sha256=y0Gxv8T77DO786GJZNQ9HKARUQzGBfsBIoPr2dFgcRU,541
drakrun/data/capa-rules/communication/c2/shell/create-reverse-shell-on-linux.yml,sha256=Dm7Ea1LaDeQ4MaicieX6HFYFT2ixWyL8r--fHCfadDM,538
drakrun/data/capa-rules/communication/c2/shell/create-reverse-shell.yml,sha256=z7n5xK5KVYWspipErJY0A0NpRdAgtWMhiP-bLVa-PCQ,1143
drakrun/data/capa-rules/communication/c2/shell/execute-shell-command-and-capture-output.yml,sha256=QJV6Va_POGY0n-HobmNewITk3VlZRt_A0PAzBMQWkrs,996
drakrun/data/capa-rules/communication/c2/shell/execute-shell-command-received-from-socket-on-linux.yml,sha256=U2dvJ1tSmKx6F5vs3F2de6xy8s9zpRPYPQVJPHyFwoc,463
drakrun/data/capa-rules/communication/dns/reference-dns-over-https-endpoints.yml,sha256=_W9Bzlpg4rLBlV1ZDJxf3YG4Z1-XNiBgRc4rOUtFvNg,4161
drakrun/data/capa-rules/communication/dns/resolve-dns.yml,sha256=ahgajxiM0ZQeow1OsDdLLde-x_Z1XiHknCsv8KbGzsM,903
drakrun/data/capa-rules/communication/ftp/send/send-file-using-ftp.yml,sha256=V-aZBaKtbklFwBQKkyF9HABJ2pbYVld_Uz4mNF_OcLI,837
drakrun/data/capa-rules/communication/http/get-http-content-length.yml,sha256=o-38TJqK_Ope9PBVkzhIMzddaiq-LMLBLK5HYvEd79I,455
drakrun/data/capa-rules/communication/http/initialize-iwebbrowser2.yml,sha256=6wMB7bI7fTc8eB95UreK24PohVBZxOPYS2Uw7q2AJUA,742
drakrun/data/capa-rules/communication/http/initialize-winhttp-library.yml,sha256=f6MzajSeoMUynN6AbRKRD8akRAYr85K7hbXptScanrY,384
drakrun/data/capa-rules/communication/http/read-http-header.yml,sha256=TmdUcnGTqrBEOHPoW-NqtbACUcwVJjc_8k0Y9rSqtZw,478
drakrun/data/capa-rules/communication/http/reference-http-user-agent-string.yml,sha256=ANQhU90HvAgq6Nea5gYqL1OLnW9WiQBNWw-7KExQUoQ,655
drakrun/data/capa-rules/communication/http/set-http-header.yml,sha256=31YMljZs5Zw0XkFPCrvydzYJC1JVscj3EmWFtFbUy_A,625
drakrun/data/capa-rules/communication/http/client/check-http-status-code.yml,sha256=1z2tSt0lXJFkXlKz1yltCIt_DArsZw6rxCHyT2b6z5k,1015
drakrun/data/capa-rules/communication/http/client/connect-to-http-server.yml,sha256=3ocu9be3artuVRop3SNn_rRNhqvYOUqodRZA5spCVAo,456
drakrun/data/capa-rules/communication/http/client/connect-to-url.yml,sha256=ApLMMFm0oJrK4BAjI6RB6FTjA0iZLX4z7bxnJryqD1I,439
drakrun/data/capa-rules/communication/http/client/create-bits-job.yml,sha256=tW9Aqf6KHkt7410zjsSvNhZTBCfH72g7KVN8lnf9EVM,1201
drakrun/data/capa-rules/communication/http/client/create-http-request.yml,sha256=aLeNTfaecg-WtTTxo4Kk08yozfZEsWdYv0y6VF1AMPc,653
drakrun/data/capa-rules/communication/http/client/decompress-http-response-via-iencodingfilterfactory.yml,sha256=fMmdbq0LTxGl6j_baIJL4Q4RiIwwguiIXSeXeZyHRyk,497
drakrun/data/capa-rules/communication/http/client/download-url.yml,sha256=-D7yqqSC_kpvMf0UJygRm7q2_86SeDZA7yktT05Cf6M,903
drakrun/data/capa-rules/communication/http/client/extract-http-body.yml,sha256=xTR9Ezf3dH_par4fa2qGeCkluAuh3wknW7F4UiT3-Wk,732
drakrun/data/capa-rules/communication/http/client/get-http-document-via-iwebbrowser2.yml,sha256=qmuGypXo1e763O0A2B1vXgDWV8JNg32N8vKhSwZfIhU,892
drakrun/data/capa-rules/communication/http/client/get-http-response-content-encoding.yml,sha256=ath9kU_E8aMvWjzLKzwAbnJ9gA11zqZGRNN1S4zscYs,459
drakrun/data/capa-rules/communication/http/client/prepare-http-request.yml,sha256=1KcSdcvWCIbzNaTM2x6amcAlVP1Jwa1XNTRnqYVtJBU,398
drakrun/data/capa-rules/communication/http/client/read-data-from-internet.yml,sha256=grbGhTyeEA17utVDwVBvM9nCnAD5bCFlv1ip7XVjn84,936
drakrun/data/capa-rules/communication/http/client/receive-http-response.yml,sha256=ih6n6x-XAHYzPOuNLviS2CuFF2wpwENssmcFcC26nM4,574
drakrun/data/capa-rules/communication/http/client/send-file-via-http.yml,sha256=HdlrF28Upntjl5oZ6f3nFpR5v7AU_5feagmuBc_Lyh4,503
drakrun/data/capa-rules/communication/http/client/send-http-request.yml,sha256=ZxSUvRRdvFCm827wZiMNRB1nOIv6JTA_WIFnLM8LntE,1044
drakrun/data/capa-rules/communication/http/server/receive-http-request.yml,sha256=-Xs1IZCAqJ8sQwZsMvHfZeZBSBVZyl8RlgMa2puFXpU,875
drakrun/data/capa-rules/communication/http/server/send-http-response.yml,sha256=ZjFdFR4urefaG_ApNAUJOn2mzHHkydW0GNH6uJ0CndI,445
drakrun/data/capa-rules/communication/http/server/start-http-server.yml,sha256=3-IKomhsCva7D4vfxEULcJZ6L5H5gksDlfRy3lAqqpk,627
drakrun/data/capa-rules/communication/icmp/send-icmp-echo-request.yml,sha256=7t5Kl6O6ni73x-6Yqm-ibZ9Lt7n_zLOCHxffPshFknA,680
drakrun/data/capa-rules/communication/ip/convert-ip-address-from-string.yml,sha256=kApJjbvV535B1co6AxXYN6TrdAPv2GwwExqBv4RMQcA,427
drakrun/data/capa-rules/communication/mailslot/create-mailslot.yml,sha256=N_btcbeW4NyNDHkYJ1KF3pyzFUSdGhDfA6unrGrvKdc,563
drakrun/data/capa-rules/communication/mailslot/read-from-mailslot.yml,sha256=jSlYUaltgCaivTNS6UZ_brexP5puc1tSbadx0N8il5E,558
drakrun/data/capa-rules/communication/named-pipe/connect/connect-pipe.yml,sha256=ZN_DKsmLe9EKlwju0t43bZ9uC0no0sHa_Xa75x5g02Y,692
drakrun/data/capa-rules/communication/named-pipe/create/create-pipe.yml,sha256=WfnVHWfqnVdxRzGvY6BOtubHiAIqvngyQ0gj5gqbW0I,838
drakrun/data/capa-rules/communication/named-pipe/create/create-two-anonymous-pipes.yml,sha256=qE9ZpSgSzE9ZZZzIxoJV68k6LI3JQRilifIuK_aX-I0,420
drakrun/data/capa-rules/communication/named-pipe/read/read-pipe.yml,sha256=VH1yEiNrVCZKxCs3h5979LbXil73M8Wb_y-vmGPrYLI,959
drakrun/data/capa-rules/communication/named-pipe/write/write-pipe.yml,sha256=M5gdMW0mEk5UlSdpO0bNfkT_mAviBqQ3L1Mt3bDzPSg,728
drakrun/data/capa-rules/communication/socket/attach-bpf-to-socket-on-linux.yml,sha256=R1niYj1G4P_xiDVE-Z2VwgiBRT5qQF8oBfogYtYjNzc,667
drakrun/data/capa-rules/communication/socket/create-raw-socket.yml,sha256=G43W3iR-aw1zvfPvR7_dTmV0WaLS8tjLxZj5fc22nJM,961
drakrun/data/capa-rules/communication/socket/create-vmci-socket.yml,sha256=rDyjTTdLPFGeCTXKs4gcMuBY-iQEJ2w_XVhG_Ga6R4Y,777
drakrun/data/capa-rules/communication/socket/get-socket-status.yml,sha256=ZDG8gbsfzaA8SgAo4XPb3MoFh496kKzmqTYMexjAky4,493
drakrun/data/capa-rules/communication/socket/initialize-winsock-library.yml,sha256=4XFqnt23eFmcXfB_PWtBbrN7g3vKQJsp37lfGyHby6Q,442
drakrun/data/capa-rules/communication/socket/set-socket-configuration.yml,sha256=R4D97GmGxTuKD1TFUkzvxaoJuwcsazYHdjdP3AuKeM0,500
drakrun/data/capa-rules/communication/socket/receive/receive-data-on-socket.yml,sha256=AUHaLnYung3b6hwvZdzo4jbOUj868uRrVs0ZH60Qyy0,1542
drakrun/data/capa-rules/communication/socket/send/send-data-on-socket.yml,sha256=Ch5PmTGeCgfJGfJ2fOM8Mm_sCzVOmlHFmYauBTDSY5Y,962
drakrun/data/capa-rules/communication/socket/tcp/connect-tcp-socket.yml,sha256=0KyXRvdOI0n81rl_qc5d85Cjnim3aH-TomaZVqkfNTQ,2345
drakrun/data/capa-rules/communication/socket/tcp/create-tcp-socket-via-raw-afd-driver.yml,sha256=mRog7357EDosdXY8B0cQSI_JjlKwIVAPlmJ2MhQtitc,3205
drakrun/data/capa-rules/communication/socket/tcp/create-tcp-socket.yml,sha256=zaC_MhcZ0I95f7HYTWpEsUDkum0EWIk5Gms9KAoOUCE,920
drakrun/data/capa-rules/communication/socket/tcp/send/obtain-transmitpackets-callback-function-via-wsaioctl.yml,sha256=mRU5O0KNOvxswYOXNcOEdyQEqek41ZtQBjb8XeFtL_A,1656
drakrun/data/capa-rules/communication/socket/tcp/send/send-tcp-data-via-wfp-api.yml,sha256=7xNhOCHoXj7lCFnshYgExL1pl-46QiV6Hx10ERzBIwI,462
drakrun/data/capa-rules/communication/socket/udp/send/create-udp-socket.yml,sha256=YYy5s4_hBmTCYvBu-u880ln3IfeJznGFhkBDJL_XEL4,849
drakrun/data/capa-rules/communication/tcp/client/act-as-tcp-client.yml,sha256=mRbnWr1xzcw1WSdKWxLnKyZmWrcoB4fzVhztHYWzbkY,485
drakrun/data/capa-rules/communication/tcp/serve/start-tcp-server.yml,sha256=ErgD1je0oP5Dm46TeOPAxc7uuXvnauodPup_dphWznc,961
drakrun/data/capa-rules/compiler/autohotkey/compiled-with-autohotkey.yml,sha256=WR8QJkti2T7-NEfu3y91sLXwVu6l7Sp7us2Fg0jsW0s,583
drakrun/data/capa-rules/compiler/autoit/compiled-with-autoit.yml,sha256=St2bPMhf3dtPfOlcMq0qCu1ypgmJidk4eV3KeM2XAno,1098
drakrun/data/capa-rules/compiler/cx_freeze/compiled-with-cx_freeze.yml,sha256=5jNDliq9K1JFjF-QYGsfIEyPW5YoBhqPQIohiex7goY,1738
drakrun/data/capa-rules/compiler/d/compiled-with-dmd.yml,sha256=HMQQr4lGsLa__3sxDbGxwyJkPS3XsMe1L9HmTxZ3OQ0,371
drakrun/data/capa-rules/compiler/dart/compiled-with-dart.yml,sha256=0KP5gL8NS2jTy039o76klDS33Zeb8uU3kSSEs_rhfh8,645
drakrun/data/capa-rules/compiler/delphi/compiled-with-borland-delphi.yml,sha256=8KS3k3lJvYg2k6NOOa6B1IncQ_onzPpcZgznObtF2WU,554
drakrun/data/capa-rules/compiler/exe4j/compiled-with-exe4j.yml,sha256=4aucJID8OR9nA96lRapzBFWk0w7bFCPkiNWOZzAGHSY,658
drakrun/data/capa-rules/compiler/go/compiled-with-go.yml,sha256=e1vHinB-rcQJpOW12ZmSoEoaVFnUKXZADFFCsUM4BAA,471
drakrun/data/capa-rules/compiler/mingw/compiled-with-mingw-for-windows.yml,sha256=ZXCsYHZCWr0mDWzrgJ29tOyoI3GyGw5_zvSorpfS-Jo,377
drakrun/data/capa-rules/compiler/nim/compiled-with-nim.yml,sha256=Z5M1Wq5v4ObPIvJ9Q_ujP4cc7eB9_mrfrhFOjLdF1w4,506
drakrun/data/capa-rules/compiler/nuitka/compiled-with-nuitka.yml,sha256=n7KOGc4O7FLWL-nl1UynouHvTUWZlFiXSeJOBZxcU10,1276
drakrun/data/capa-rules/compiler/perl2exe/compiled-with-perl2exe.yml,sha256=xBVD6cDNYVMUkZoribpAGQg3owwHlbS4ZnDNTkk2IJk,566
drakrun/data/capa-rules/compiler/ps2exe/compiled-with-ps2exe.yml,sha256=GkEyvY4gXkfPGu_kIV1iB1oeZUCALMnDxBUp52r9lko,796
drakrun/data/capa-rules/compiler/py2exe/compiled-with-py2exe.yml,sha256=t2yoPqcEhV1hjemJRtC5NLZpI7lcJRfa0tS8Hv8iR_8,306
drakrun/data/capa-rules/compiler/pyarmor/compiled-with-pyarmor.yml,sha256=ucSoxpOAsR5AVoqVgyGhog3fkupt79OlGzr21e0zxw0,646
drakrun/data/capa-rules/compiler/rust/compiled-with-rust.yml,sha256=-9cmakpTyjgNE_MPkfZeb70cy_RQ4STBfIpfVqq9xTk,481
drakrun/data/capa-rules/compiler/v/compiled-with-v.yml,sha256=EPUPhaQ76Ey6SbO5Jh-hAOvqS3bpuXf5M3zlgnfeBd0,654
drakrun/data/capa-rules/compiler/vb/compiled-from-visual-basic.yml,sha256=gFCMjSyb0wRbYNQ4VTLz-6H6930_CtBLgqNCo5DhtO4,308
drakrun/data/capa-rules/compiler/zig/compiled-with-zig.yml,sha256=f8f7FNgT7BAizzsgv-L8oBQLPKTeeJF0mniVwmvyPWQ,829
drakrun/data/capa-rules/data-manipulation/checksum/adler32/compute-adler32-checksum.yml,sha256=sk_c-2n6b5ltBnbvMDOfs80Y-GlAj2WCWfAYX48Grs0,2077
drakrun/data/capa-rules/data-manipulation/checksum/crc32/hash-data-with-crc32.yml,sha256=XoqoVKEfCmyYErPGvHhJLtc83gW5Ufu1cCDS5YRF9A8,1138
drakrun/data/capa-rules/data-manipulation/checksum/luhn/validate-payment-card-number-using-luhn-algorithm.yml,sha256=0UcfGFe-RVkt5TMZGYAZxxafBgkhmLwuRCAKR4E5EV0,570
drakrun/data/capa-rules/data-manipulation/compression/compress-data-using-lzo.yml,sha256=KyPDuqD5Gwyvs5yrs70oMNP5HHaL8K_JdYw6vtLnAaI,764
drakrun/data/capa-rules/data-manipulation/compression/compress-data-via-winapi.yml,sha256=qO_w4TPwYoxLL4gsvJjiRyfILgPr9MTENgaMW2Il5IM,928
drakrun/data/capa-rules/data-manipulation/compression/compress-data-via-zlib-inflate-or-deflate.yml,sha256=XY_oLzRwoi80QS7TH0lW8X32Jv3m6_yky8xc3B49Xz4,1653
drakrun/data/capa-rules/data-manipulation/compression/create-cabinet-on-windows.yml,sha256=wg5QMzbE9A0Pk8lfvjLQXw7vhQnRbjiJN7cdabMip5I,937
drakrun/data/capa-rules/data-manipulation/compression/decompress-data-using-aplib.yml,sha256=2XIek5RZiI2O2JVgQpnoIriALcfkHuhvZ8uHDax5hgs,1377
drakrun/data/capa-rules/data-manipulation/compression/decompress-data-using-lzo.yml,sha256=ftf_IS-QEuNO98kaAd2f-flvL3qRWPTzgjvLqkohxjk,1351
drakrun/data/capa-rules/data-manipulation/compression/decompress-data-using-quicklz.yml,sha256=urqvMoRdWoi-f_PeKDVCJ6QQKqGo8OlDyhA5otzifcA,1680
drakrun/data/capa-rules/data-manipulation/compression/decompress-data-using-ucl.yml,sha256=2C57unRoTRGD4tYIIP7m1hKRrf7S2hGaCwp2cKzDzUI,1324
drakrun/data/capa-rules/data-manipulation/compression/decompress-data-via-iencodingfilterfactory.yml,sha256=2LjL08umsNTt3CdnSOBjXrYACepKUYH4mtQwAmJfa3M,843
drakrun/data/capa-rules/data-manipulation/compression/extract-cabinet-on-windows.yml,sha256=_5vpVROQ7PNFrW-vPnb1B7iYcf_JcOR3dmlCpP3ojag,715
drakrun/data/capa-rules/data-manipulation/encoding/encode-data-using-add-xor-sub-operations.yml,sha256=_ZjFuiOPVc_519URr1VEOtjdEAYTACTWLlptIYaQyJw,949
drakrun/data/capa-rules/data-manipulation/encoding/base64/decode-data-using-base64-via-dword-translation-table.yml,sha256=ehUBMWCJg7CUEz4advwYviWF02ID9pr1ZiQy4EmQBkk,3036
drakrun/data/capa-rules/data-manipulation/encoding/base64/decode-data-using-base64-via-winapi.yml,sha256=N3fKjaMg9DBpXM5E4AeWo2U-IdMILXmw3tvgWjPfUcI,846
drakrun/data/capa-rules/data-manipulation/encoding/base64/encode-data-using-base64-via-winapi.yml,sha256=g-u0MxyaVwvKrekdRd5x18OSt_jSV-AIH2lYDP3ZMHU,1533
drakrun/data/capa-rules/data-manipulation/encoding/base64/encode-data-using-base64.yml,sha256=iADVMyM1MkIr2wXoYQJ3voAL0T-HwrwwMwJdDQQF9YA,1318
drakrun/data/capa-rules/data-manipulation/encoding/base64/reference-base64-string.yml,sha256=IUhKqAO1_X-89VWPSigWj2UzEj3duO_9RPywOSHdilM,591
drakrun/data/capa-rules/data-manipulation/encoding/xor/encode-data-using-xor.yml,sha256=anU5Dw3zVtzfr1UZSRCp6LthlUidw58hwSdBvWQvaqM,1907
drakrun/data/capa-rules/data-manipulation/encryption/create-new-key-via-cryptacquirecontext.yml,sha256=ymY0eL26wIzLfzTTs8fQkCroFnDMPfzaZZ0_uwwqX68,897
drakrun/data/capa-rules/data-manipulation/encryption/encrypt-data-using-memfrob-from-glibc.yml,sha256=fgemsJcdW3JMt4_Knv1kw0Ekv3CRPMKCdfoKyufqHAU,543
drakrun/data/capa-rules/data-manipulation/encryption/encrypt-or-decrypt-via-wincrypt.yml,sha256=AMfa8NRYaAYdQGnDgJXDsQZo2IrCQ_sVqfpPGmdMLR8,661
drakrun/data/capa-rules/data-manipulation/encryption/get-outbound-credentials-handle-via-credssp.yml,sha256=NOdJ2r2FWX6dvg56dSxVONcNVlXSWC34uFjEzGIIa2g,675
drakrun/data/capa-rules/data-manipulation/encryption/import-public-key.yml,sha256=qP0vb_9bXHG8YIxdlaelm2DEi8_LZqBUcnvBEEO9-Ro,571
drakrun/data/capa-rules/data-manipulation/encryption/aes/decrypt-data-using-aes-via-x86-extensions.yml,sha256=p5MX0Gh5gtnS9Jy0BIbSrFcKgze0DxMqYXOzbfdQZrY,688
drakrun/data/capa-rules/data-manipulation/encryption/aes/encrypt-data-using-aes-mixcolumns-step.yml,sha256=cjMSNBIWBeN8c7i7WmyEoeH-38_nD65m7nuW_nsoIYM,1484
drakrun/data/capa-rules/data-manipulation/encryption/aes/encrypt-data-using-aes-via-dotnet.yml,sha256=bvEFdBx2KvL8vdzzeptXbiknLrNx8z-nR4W7dUXUgmc,675
drakrun/data/capa-rules/data-manipulation/encryption/aes/encrypt-data-using-aes-via-winapi.yml,sha256=M6Gqa0Myx-hI8jU6jUz-9cLLnPMteFlJix7na4KULcs,971
drakrun/data/capa-rules/data-manipulation/encryption/aes/manually-build-aes-constants.yml,sha256=Pp_AVmNErHIz9Ir6Gt0QABZwdhzWyJ2QN97Sla3pBEU,1134
drakrun/data/capa-rules/data-manipulation/encryption/aes/use-dotnet-library-encryptdecryptutils.yml,sha256=txn3kQocMGK1HRFYLZQeG787lsiDJdhaLu_M6067aP4,661
drakrun/data/capa-rules/data-manipulation/encryption/blowfish/encrypt-data-using-blowfish.yml,sha256=_O_8GrEv3_NRh4lRPH4IG9fs_KMVlZnyIDGiIjvOcUo,3172
drakrun/data/capa-rules/data-manipulation/encryption/camellia/encrypt-data-using-camellia.yml,sha256=7Hqgz6_iw5Otd20TehS76GDc8K19VE32Rl6pDxCE9xw,5023
drakrun/data/capa-rules/data-manipulation/encryption/des/encrypt-data-using-des-via-winapi.yml,sha256=_ERuIt_6dhiigFfuNCkhzZrifKneQMY7D2ENJTBFygE,875
drakrun/data/capa-rules/data-manipulation/encryption/des/encrypt-data-using-des.yml,sha256=J6nYQgeA3pUJqMvRgNGRtPbn9b8kNMBBxPBz8NMzG3A,10468
drakrun/data/capa-rules/data-manipulation/encryption/dpapi/encrypt-data-using-dpapi.yml,sha256=KRGgnXOSjt0I7mbkP7Y4XPkqfdeMJq2J7IFfjC2NzMQ,1284
drakrun/data/capa-rules/data-manipulation/encryption/elliptic-curve/encrypt-data-using-curve25519.yml,sha256=XDHtKsDZBJyfySbp6-yoaC5Mm75Fbct4-NidnrnCmqo,1687
drakrun/data/capa-rules/data-manipulation/encryption/hc-128/encrypt-data-using-hc-128-via-wolfssl.yml,sha256=DpMGPlCIkKlIZ6FoWqoHL1auxP-fvI9Nn5v663SUn-g,1315
drakrun/data/capa-rules/data-manipulation/encryption/hc-128/encrypt-data-using-hc-128.yml,sha256=7hyycfSXv2NBxHZKOF8MSEM-10Ier5bEdmnRybjiub0,2108
drakrun/data/capa-rules/data-manipulation/encryption/rc4/encrypt-data-using-rc4-ksa.yml,sha256=WzfIX9LHQQee1ncMDVlfZZ3YALjT4aQD6jCdH3itqf4,1908
drakrun/data/capa-rules/data-manipulation/encryption/rc4/encrypt-data-using-rc4-prga.yml,sha256=sVBo41_M1-oBrugEyJ5bkaS-jr7ncxPwl2zsAbOu-FQ,1315
drakrun/data/capa-rules/data-manipulation/encryption/rc4/encrypt-data-using-rc4-via-systemfunction032.yml,sha256=Ue7eFdQuEcoXg81gQhVB8jqpRWHh4MtbAqPxzArNRDQ,950
drakrun/data/capa-rules/data-manipulation/encryption/rc4/encrypt-data-using-rc4-via-systemfunction033.yml,sha256=9J3u9jEAvxAGKIWCInTjDI5X8fzq-l9rxMJo0P0Qp5Y,958
drakrun/data/capa-rules/data-manipulation/encryption/rc4/encrypt-data-using-rc4-via-winapi.yml,sha256=Yb7ijkyg1_OarenhynrRB-Cs7FnEGQdwK_BNN_NMyiQ,901
drakrun/data/capa-rules/data-manipulation/encryption/rc4/encrypt-data-using-rc4-with-custom-key-via-winapi.yml,sha256=a_nmXCdrinrq1Xp7y0-3rmX0Bvm6KHDlKhzRtKCJNoM,1934
drakrun/data/capa-rules/data-manipulation/encryption/rc6/encrypt-data-using-rc6.yml,sha256=FyYKSlcyznxmM4X2RQZjUY8fKiJXHRU0nd1X1AP5pcI,1097
drakrun/data/capa-rules/data-manipulation/encryption/rsa/reference-public-rsa-key.yml,sha256=-F64sjwGMnaLgpyfIVdN7mZ-zT7p4k3jCN3kN4J3iOQ,1513
drakrun/data/capa-rules/data-manipulation/encryption/skipjack/encrypt-data-using-skipjack.yml,sha256=hCd-zmHKPVPZLD2yDjscIoiipfM4Gz_Mhl-xdqYxIo0,1353
drakrun/data/capa-rules/data-manipulation/encryption/sosemanuk/encrypt-data-using-sosemanuk.yml,sha256=g-94IgmEQ58pSxBck5VgBTFK3jPKGEL-gP2SjNk7QWg,2618
drakrun/data/capa-rules/data-manipulation/encryption/tea/decrypt-data-using-tea.yml,sha256=j6oM-GVfIuxw5cUjxm8lqfjjaUCfi1ajOQktc0jpsKM,1566
drakrun/data/capa-rules/data-manipulation/encryption/tea/encrypt-data-using-tea.yml,sha256=7moZdK11K8ohajDUB9qe1BFm7FiODugQzURk_go827Q,1566
drakrun/data/capa-rules/data-manipulation/encryption/twofish/encrypt-data-using-twofish.yml,sha256=tRHd8IuN1e4ymd5F0D_Cf76n0M3ZLgQJg2waGuu1xIo,4847
drakrun/data/capa-rules/data-manipulation/encryption/vest/encrypt-data-using-vest.yml,sha256=07-5YHIs-ec6ZkcrL2eL4HUFRIX1rn-U-km8q8Wp2Hs,1637
drakrun/data/capa-rules/data-manipulation/encryption/xtea/encrypt-data-using-xtea.yml,sha256=cZtwTZvEfGtQSsYvx67NUQXPyvc9MOxhLnQ6MDaFYvE,1245
drakrun/data/capa-rules/data-manipulation/encryption/xxtea/encrypt-data-using-xxtea.yml,sha256=yLAPmmwP4k5o7sP16bzxKhBhNfE2qpjGIosKnaORfP0,1544
drakrun/data/capa-rules/data-manipulation/hashing/hash-data-via-wincrypt.yml,sha256=ekwSwpcCN6VwdsCBi3SMy7NxXitAHWdbjFWE7imr74s,830
drakrun/data/capa-rules/data-manipulation/hashing/djb2/hash-data-using-djb2.yml,sha256=VF6-kncps5U7VcJ3BBY0lD3hsUKiTnwPm5uSXughm_U,899
drakrun/data/capa-rules/data-manipulation/hashing/fnv/hash-data-using-fnv.yml,sha256=I-zreb9XUT_MgR4fwpxIJSdlaRx-PUY9M1UyAxifrxc,1638
drakrun/data/capa-rules/data-manipulation/hashing/md5/hash-data-with-md5.yml,sha256=SqliIY9Ij3MNyWyP79WTu_xGtg9EytR8_6phCVVKD_I,1885
drakrun/data/capa-rules/data-manipulation/hashing/murmur/hash-data-using-murmur3.yml,sha256=mfjQ_QVt_9TULOumh6LLn6LQKl_Kpe5yM-758_Kyv50,2043
drakrun/data/capa-rules/data-manipulation/hashing/sha1/hash-data-using-sha1.yml,sha256=VGkZS23LdJR95WY1We78WIfQ_N17hcFVYOChzEATh94,1907
drakrun/data/capa-rules/data-manipulation/hashing/sha224/hash-data-using-sha224.yml,sha256=qL9uCrpSvB7V-ZPK-D6orojZ9AOkglT4YNDMEtKLQC8,702
drakrun/data/capa-rules/data-manipulation/hashing/sha256/hash-data-using-sha256.yml,sha256=pF44V2hZHSMGzn4hRXIbjOf9HfQIvL-Qg4sUszdOXys,1965
drakrun/data/capa-rules/data-manipulation/hashing/sha384/hash-data-using-sha384.yml,sha256=d-9LpPy4YlvBtVQNK5xvpe4JjH9qKahw9dcec5L4Wz8,943
drakrun/data/capa-rules/data-manipulation/hashing/sha512/hash-data-using-sha512.yml,sha256=ywGheiy5d-6QLFLTmjobJmwmsPZLUKjOL85EgDZzvXQ,2094
drakrun/data/capa-rules/data-manipulation/hashing/tiger/hash-data-using-tiger.yml,sha256=eOqcGq3hQxewTE2UvoxtUSmx-h8gYFQaaY73OW4oSA8,2835
drakrun/data/capa-rules/data-manipulation/hmac/authenticate-hmac.yml,sha256=QzauMNlm-0X_nPIIyOjTAIFR8iZSPQyt3L3tup3BU50,982
drakrun/data/capa-rules/data-manipulation/json/use-dotnet-library-newtonsoftjson.yml,sha256=re3FbBmSN7cXwjuGyYeQh_zvAbryUB5i8BwHMicKFQM,488
drakrun/data/capa-rules/data-manipulation/prng/generate-random-numbers-via-rtlgenrandom.yml,sha256=a7sXUidShZB5cLHsDZClujqmbs6xam13xI1c_mcDWLk,843
drakrun/data/capa-rules/data-manipulation/prng/generate-random-numbers-via-winapi.yml,sha256=qEbcvtCyOlbE-JChq9dpMR3ZWfsEdTUZH3jG6kSGxJY,756
drakrun/data/capa-rules/data-manipulation/prng/mersenne/generate-random-numbers-using-a-mersenne-twister.yml,sha256=aMjBU-JHFf3XVGf7CrKK5h_QjJPiOx-bcLqAA-H9MGA,586
drakrun/data/capa-rules/data-manipulation/svg/use-dotnet-library-sharpvectors.yml,sha256=NAjiyfhKc12AJyP0gZwZTf7N1YxfZQvSvVbbPHT_88c,496
drakrun/data/capa-rules/executable/dotnet-singlefile/bundled-with-dotnet-single-file-deployment.yml,sha256=KTAKQOWzwteGkopqBmitRsr0lBYQ8-gWvbr-6X5ztcs,810
drakrun/data/capa-rules/executable/dotnet-singlefile/packaged-as-single-file-dotnet-application.yml,sha256=DSCQ2wEG5LcRHeWK82oX6uWjNr_Jb3Pq8JFK1-gnJO8,971
drakrun/data/capa-rules/executable/installer/iexpress/packaged-as-an-iexpress-self-extracting-archive.yml,sha256=kRrXIvdisRKivsohDlwO0jGnMYN3vZ2GRCYwGydGozA,781
drakrun/data/capa-rules/executable/installer/inno-setup/packaged-as-an-inno-setup-installer.yml,sha256=0owGRsHKmD5I967-nhTWlh9Mx81qFqMv9EqfZZOzCi8,420
drakrun/data/capa-rules/executable/pe/export/forwarded-export.yml,sha256=niFPaITFmpCQjgy4iFENVb8WfIRrF8NDKaHGB-6fLTE,340
drakrun/data/capa-rules/executable/pe/pdb/contains-pdb-path.yml,sha256=8HORlGo3-BUHk5DyNPOOe5P6uNN5H65mCrJiJLKd0MU,282
drakrun/data/capa-rules/executable/pe/section/tls/contain-a-thread-local-storage-tls-section.yml,sha256=6csBh7-PgIkKPtHXt70pgbz9mBrw97LiLzleZzAq3mk,308
drakrun/data/capa-rules/executable/resource/access-dotnet-resource.yml,sha256=V9MKS5hPfZw6I-J-yo9pg8X0ZEnbQBo_kfQ5LRJ-ELc,446
drakrun/data/capa-rules/executable/resource/embed-dependencies-as-resources-using-fodycostura.yml,sha256=K20iDg9F67oUJfSQceumuOS6vDi7q-pbWwdSJqi_noc,636
drakrun/data/capa-rules/executable/resource/extract-resource-via-kernel32-functions.yml,sha256=HNiKRDoFOwMPilq7o-gfbTy-zP1foIvnL0ENP3xMEQ8,1022
drakrun/data/capa-rules/executable/subfile/pe/contain-an-embedded-pe-file.yml,sha256=ZQYTfOlexisvAz_KEiUnzbfqN3Q1I1HpD52SEhfXurc,471
drakrun/data/capa-rules/host-interaction/bootloader/disable-code-signing.yml,sha256=zCZQijqr4_0q08wL89eKkDr-TCw3aQLv0UuTdLl4rkA,517
drakrun/data/capa-rules/host-interaction/bootloader/get-uefi-variable.yml,sha256=LIiAiYV7_AyxXYZZGtqUAzcQ6owSDkkMHcL_sACZ2sc,842
drakrun/data/capa-rules/host-interaction/bootloader/manipulate-boot-configuration.yml,sha256=3j8sQbClJkl3Xj7hcmcpeeS4qIV5_43r_bx8zxlC7sk,821
drakrun/data/capa-rules/host-interaction/bootloader/manipulate-safe-mode-programs.yml,sha256=oaav8kO1x3p5g5WOKZBaVlzfXfzTNwVbdlu9ea1GAf8,643
drakrun/data/capa-rules/host-interaction/bootloader/set-uefi-variable.yml,sha256=wEUkDFtQQFNyAJjxe8IIVXOlQAPe-PTWMYW2hN4JUqw,685
drakrun/data/capa-rules/host-interaction/cli/accept-command-line-arguments.yml,sha256=obqW1JPdVlcJg_Kmetew1zK798o0aJhkamrWqHwVnBw,572
drakrun/data/capa-rules/host-interaction/cli/resolve-path-using-msvcrt.yml,sha256=I8Ym34XfdcMmr-_X3CH1Zc_krMFg1xu7x1GnihliyIg,517
drakrun/data/capa-rules/host-interaction/clipboard/open-clipboard.yml,sha256=1AaXk8AS2YRlSFauPgU68jFSDGHPF78QiXBVVIJEvfw,419
drakrun/data/capa-rules/host-interaction/clipboard/read-clipboard-data.yml,sha256=oz4icWsAntouFBkdF6PZngUKLGlHzI55fjFiPtcpLnY,1533
drakrun/data/capa-rules/host-interaction/clipboard/write-clipboard-data.yml,sha256=v_G2KoY_0XjDAO2QrG0dse9tGXeOVFwPyZaoXYtAhH4,1015
drakrun/data/capa-rules/host-interaction/console/manipulate-console-buffer.yml,sha256=KfvnkrcOeXnLsm8qU_Q6U2fgEwIm3umzVnNqyBQV2LY,901
drakrun/data/capa-rules/host-interaction/driver/complete-processing-asynchronous-io-request.yml,sha256=GXcjQoYDDD7DE0qa2astb_2B-bklX7_ZKhD2HSlfen4,477
drakrun/data/capa-rules/host-interaction/driver/create-device-object.yml,sha256=Ekx_ROYyAWSQ-9WO1NBBWc1TbLWUzKooTz-NoE0OJ0o,466
drakrun/data/capa-rules/host-interaction/driver/disable-driver-code-integrity.yml,sha256=IoXA0VUgnd1i0m6zNm2zLDgcCz9oqaJh-O9XEa1hqvI,1089
drakrun/data/capa-rules/host-interaction/driver/install-driver.yml,sha256=YgjnvQPcicx1KaGDzLCvUnW-unzVRRU08wD8Gfqj8yo,728
drakrun/data/capa-rules/host-interaction/driver/interact-with-driver-via-ioctl.yml,sha256=l-_kPwztEmxjtqxKjOWlCd4eTc1AX7MloKJASP7UzfY,325
drakrun/data/capa-rules/host-interaction/driver/unload-driver.yml,sha256=5b6YSRFo_hyuIsprqf4cH6rsxmB8IgyZBb6IxuhXNIQ,421
drakrun/data/capa-rules/host-interaction/environment-variable/get-comspec-environment-variable.yml,sha256=KklgqEw7FR_oxSTmASQ4BNvjsapEm-CrhbBtY5eYdIg,558
drakrun/data/capa-rules/host-interaction/environment-variable/query-environment-variable.yml,sha256=-AumfHXVTmWozzAWbM3o6BihQBKtwxc4vuzXDWQbyGE,872
drakrun/data/capa-rules/host-interaction/environment-variable/set-environment-variable.yml,sha256=bD5pPIDOeg9_ogXfe_zCIFQGOAh_bmm6M5FE6U_2qok,520
drakrun/data/capa-rules/host-interaction/file-system/bypass-mark-of-the-web.yml,sha256=GthKV1AuFTQhV-QKMC7O1GnNwlb0aNLU-4Jxwne3-zk,656
drakrun/data/capa-rules/host-interaction/file-system/change-file-permission-on-linux.yml,sha256=kzwqHVxhQuvJQikIDpHhyITbnZa8PAxgJJ0iioI6-m8,594
drakrun/data/capa-rules/host-interaction/file-system/create-virtual-file-system-in-dotnet.yml,sha256=aEnmrI5jQly14Eqj8u5PnLAnCKP_YWyitH2g7yaf-R8,696
drakrun/data/capa-rules/host-interaction/file-system/get-common-file-path.yml,sha256=v50cFRumDM3FepiiLIKxPDpiKXJeeyEwlO6S9hXeHqM,1447
drakrun/data/capa-rules/host-interaction/file-system/get-file-system-object-information.yml,sha256=LrBIAlR0RNWxe_cUWLzYJ7UVyciRvcIfdZFxHHkxhhg,392
drakrun/data/capa-rules/host-interaction/file-system/get-program-files-directory.yml,sha256=MlKSqeeZyedDrru2LSn9Wpw4vNOoEnW8z8IGJn-w45k,683
drakrun/data/capa-rules/host-interaction/file-system/get-windows-directory-from-kuser_shared_data.yml,sha256=H32RAvPfxQo64fffSczy1gpCiutnaQXKhUVjpCmJBBE,712
drakrun/data/capa-rules/host-interaction/file-system/reference-absolute-stream-path-on-windows.yml,sha256=vESG6x68LUIcV3vShnjULhtFmxGB9AYcLEU863p7yCA,1472
drakrun/data/capa-rules/host-interaction/file-system/copy/copy-file.yml,sha256=9fqg0KihMlCvNQjLWtS3d9Xdvk6UoE6RgWJSUDNRZWk,829
drakrun/data/capa-rules/host-interaction/file-system/create/create-directory.yml,sha256=7eAK3k6G-GqBIunkz7RRqD4hXITQqvXwDJuE2fHZX8U,910
drakrun/data/capa-rules/host-interaction/file-system/delete/delete-directory.yml,sha256=mJFMTFKn7bG--WCxOauqNnrdXwRUcinnUoXYPtNcC2s,679
drakrun/data/capa-rules/host-interaction/file-system/delete/delete-file.yml,sha256=SVNirk7uVlZuD0GbrXOBC2z0-O_Sm6ZTBzUEOWZC0e0,1351
drakrun/data/capa-rules/host-interaction/file-system/exists/check-if-file-exists.yml,sha256=g6OT9f4BuI98kOBZZqSeB3GJDJh1WCXUgXk8IZhKxXc,949
drakrun/data/capa-rules/host-interaction/file-system/files/list/enumerate-files-on-linux.yml,sha256=WnUGT226fOPxiLjNCvsyFqAZRj1IvAwOgxSU9LWUeAY,693
drakrun/data/capa-rules/host-interaction/file-system/files/list/enumerate-files-on-windows.yml,sha256=z3XR9QevRrJdFR8zrnCT9xVln1-ENQ4XQuvWJcut3q4,1657
drakrun/data/capa-rules/host-interaction/file-system/files/list/enumerate-files-recursively.yml,sha256=hCWXpmlgaFO6RwnGRg5y0X6DUWDyA-Lcbuvdjbg3Cqw,598
drakrun/data/capa-rules/host-interaction/file-system/meta/get-file-attributes.yml,sha256=FmKLimNTVyAdTCMc_PyVARp40Dxm5Irmf6BKC68tZc0,1133
drakrun/data/capa-rules/host-interaction/file-system/meta/get-file-size.yml,sha256=-TaLkZitTxV2pBhsjv7pgiHjI51WJYhtXEC6LGCk8gY,552
drakrun/data/capa-rules/host-interaction/file-system/meta/get-file-version-info.yml,sha256=I40c0BMOmaYYjhPYyQISekxQP7qLzJHyUs9yLqztnFw,874
drakrun/data/capa-rules/host-interaction/file-system/meta/set-file-attributes.yml,sha256=32plnfUm9SnoGvtiBEmswaLvC_QmLxUHOFNMQFxvCEs,1096
drakrun/data/capa-rules/host-interaction/file-system/move/move-file.yml,sha256=ed4I6b9-YX0eVdBTttAokyt1su2rpEfrYEyBPiXTvt4,844
drakrun/data/capa-rules/host-interaction/file-system/read/read-file-on-linux.yml,sha256=qbn33YXuB0_CCXROfYu75zZ7F_kN4Li1nvmubz52QcM,706
drakrun/data/capa-rules/host-interaction/file-system/read/read-file-on-windows.yml,sha256=xLCwQ7rbbraGY3Kumuwbfg8jXyVdbOlvS2P5BxXQbjY,1042
drakrun/data/capa-rules/host-interaction/file-system/read/read-file-via-mapping.yml,sha256=XgFoYKm-E-_TNduqjWk5FDEdtarw87yREpg42xFYh2I,1424
drakrun/data/capa-rules/host-interaction/file-system/read/read-ini-file.yml,sha256=YGBmw9rzALZN8OnQbQyp7t_N_PbKS3wAX7Z4FybMH9Q,688
drakrun/data/capa-rules/host-interaction/file-system/read/read-virtual-disk.yml,sha256=w_RvEIRBCPb7XIHqAGF4oqKSWWhPdo8TZCPtIY5sefY,847
drakrun/data/capa-rules/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml,sha256=7zOc9EaVFnTmxcrzAzcgHPOoMH6QnIHdLvxZWzJuA_Q,593
drakrun/data/capa-rules/host-interaction/file-system/write/write-file-on-linux.yml,sha256=iZup9vNo_mphHmk2ko-wN0fbqfWrtQbMz2WXJxC1iZQ,766
drakrun/data/capa-rules/host-interaction/file-system/write/write-file-on-windows.yml,sha256=Moq72vR3_bkHJeBJlygtpTGzcJHoQoAJArqC6nFmGXI,1638
drakrun/data/capa-rules/host-interaction/filter/enumerate-minifilter-drivers.yml,sha256=wZ5efTmIpuQzlSeuODor1rX8m6q5a13jk8398qyYLpU,542
drakrun/data/capa-rules/host-interaction/filter/register-minifilter-driver.yml,sha256=Wr8HCHI6rFX0N-gDPXvsKNM9CFKvJ7vzBkwFdaxqSXY,492
drakrun/data/capa-rules/host-interaction/filter/start-minifilter-driver.yml,sha256=7GQj6gwhsUuvAdZjP2IeI5t32N9s-zVgUtWg7I7wQ2E,486
drakrun/data/capa-rules/host-interaction/firewall/modify/access-firewall-policy-via-inetfwpolicy2.yml,sha256=yDr73IaA2584vZb-22enMG7pZ6K-qQwxDWTNNypDYDc,736
drakrun/data/capa-rules/host-interaction/firewall/modify/access-firewall-rule-properties-via-inetfwrule.yml,sha256=iFTcou-4eUZj_4obr11RTff--IAIfNIxdvupSHEwUYQ,733
drakrun/data/capa-rules/host-interaction/firewall/modify/access-firewall-settings-via-inetfwmgr.yml,sha256=MZ3uOtEQqnU4ZGC_ms6QRg98_rKyPQs5Q6lcFk_2zxk,710
drakrun/data/capa-rules/host-interaction/gui/enumerate-gui-resources.yml,sha256=f0s9lb7q_6kSuLmVgwza1U60iMtQKZyf_NLaM6Idi6g,691
drakrun/data/capa-rules/host-interaction/gui/set-application-hook.yml,sha256=sRq7kEBlNyHirx6e3pb-f6T-9MSq9s84pj8PK8arFRk,361
drakrun/data/capa-rules/host-interaction/gui/switch-active-desktop.yml,sha256=Z0bItB_md12yENiz1XuGcdhPVxQoe3O6wYbvQnXXDaM,606
drakrun/data/capa-rules/host-interaction/gui/console/set-console-window-title.yml,sha256=J3hAB3gJyHG6ZjdmMDeRyPoR9TxD5Now4yMhjtg4Pug,354
drakrun/data/capa-rules/host-interaction/gui/logon/references-logon-banner.yml,sha256=Bs0pCunnGnoxCbmmCnfWZVwvIkxil5aYzi9gA-KsNNA,438
drakrun/data/capa-rules/host-interaction/gui/session/lock/lock-the-desktop.yml,sha256=YoWx-Wmr75bps_EjGdH2me9TL1tgMtC2vNbz3DWWAm4,404
drakrun/data/capa-rules/host-interaction/gui/session/wallpaper/change-the-wallpaper.yml,sha256=mH0_B1koP3rOwsx1jjJvp1hXPWenBuL40gBw7t5pkOQ,462
drakrun/data/capa-rules/host-interaction/gui/taskbar/find/find-taskbar.yml,sha256=n9yXo4fTQcoItdMpebplTUnBthnPv70GDwHfV25lUqM,402
drakrun/data/capa-rules/host-interaction/gui/taskbar/hide/hide-the-windows-taskbar.yml,sha256=aGYetVsi3S7NYsdTrkjRQt1lTMf3ZVnLKNsnHXLj_24,451
drakrun/data/capa-rules/host-interaction/gui/window/find/find-graphical-window.yml,sha256=cZwFTxLxclycw2MS5EvawA2Xl1O1tChEoXLMZm4PNM4,414
drakrun/data/capa-rules/host-interaction/gui/window/get-text/get-graphical-window-text.yml,sha256=kCG0VxRMWvrKadklMbNqg3l3RZjrSSKKMi5mW_JGvE0,863
drakrun/data/capa-rules/host-interaction/gui/window/hide/hide-graphical-window-from-taskbar.yml,sha256=JuJgRJEUdFoEYKkzzzuOSwFotnM2RCX5q4oDtOgz3Gc,1007
drakrun/data/capa-rules/host-interaction/gui/window/hide/hide-graphical-window.yml,sha256=vhlhRQnXi6G2Sm423KTCCsL6oAY8bZvcd0IWAjUv2F8,463
drakrun/data/capa-rules/host-interaction/hardware/enumerate-devices-by-category.yml,sha256=kzfd8BtO5VEkeT-k1aGWoMOgMuUt9RBchPXvrKfpN8E,1105
drakrun/data/capa-rules/host-interaction/hardware/cdrom/manipulate-cd-rom-drive.yml,sha256=vP4ojuIcx5tG3WDbVQm26tD_ua0Rr6MR0YMJBSkktv0,519
drakrun/data/capa-rules/host-interaction/hardware/cpu/get-cpu-information.yml,sha256=5Y1yRB5ZiYELWpj2--Ocni1C3IleWnJ5fzNZvzPrH_k,741
drakrun/data/capa-rules/host-interaction/hardware/cpu/get-number-of-processor-cores.yml,sha256=HEH4eCHLrW6wfPTBbCsqP51Xd-lVXhUY5yQzwSmGNng,548
drakrun/data/capa-rules/host-interaction/hardware/cpu/get-number-of-processors.yml,sha256=1mUFDxJuoKP7Wb2AgJnKTkJiIqnCqkqfDOQGwDl9Qyk,868
drakrun/data/capa-rules/host-interaction/hardware/firmware/get-system-firmware-table.yml,sha256=Eh8U494G5kGz5SCjI6GHccsLTfixajRXgl93s3zcWUk,725
drakrun/data/capa-rules/host-interaction/hardware/keyboard/get-keyboard-layout.yml,sha256=a-28W5MUgnd7XgomCy1btcLuvvnxJWIi8c_36b0Rq7k,630
drakrun/data/capa-rules/host-interaction/hardware/keyboard/simulate-ctrl-alt-del.yml,sha256=WxxKezVyy_3v7zigs8Br-Gj2hkpqEPWtoeMDnUj3GK0,1169
drakrun/data/capa-rules/host-interaction/hardware/memory/get-memory-capacity.yml,sha256=JUdU25TIysSkFKkJ6LS37QjPyCXzlxV91lkytzOYzBw,482
drakrun/data/capa-rules/host-interaction/hardware/memory/get-memory-information.yml,sha256=4SElvUHaO8LjTVRChOEPZ_Ifd3M93MWe3KYAXVCS4k8,680
drakrun/data/capa-rules/host-interaction/hardware/mouse/swap-mouse-buttons.yml,sha256=nXq4FmMOAiIK39ZwbCWBzfW2yBpNXmmaig9_du8VuC8,376
drakrun/data/capa-rules/host-interaction/hardware/storage/enumerate-disk-properties.yml,sha256=UnDEsWof2-zRgqEUy4fykXkgnAc-HZ5xvaaGR19sFKk,838
drakrun/data/capa-rules/host-interaction/hardware/storage/get-disk-information.yml,sha256=BCEpe4HvBZM1LrD2aPvK1TVUD-Wio-YgpbrJtNztUfM,1028
drakrun/data/capa-rules/host-interaction/hardware/storage/get-disk-size.yml,sha256=2w2Ug6yWblHJWUTley2mPJnnZ4gg9xobczRlVDXs2v0,1400
drakrun/data/capa-rules/host-interaction/log/clfs/read-data-from-clfs-log-container.yml,sha256=sySn8XQgSy4Kv5qulaNe-V--fX4mE2w2OOJietTXOto,793
drakrun/data/capa-rules/host-interaction/log/debug/write-event/print-debug-messages.yml,sha256=Yl0zWVDS922erkg-oXDCT2JKkOevO3G53o900L7V7sQ,422
drakrun/data/capa-rules/host-interaction/log/winevt/access/access-the-windows-event-log.yml,sha256=2n9eSgaE_t4zHoLVbxlW69P6OuzOcLgpE0bGCWi_sbc,461
drakrun/data/capa-rules/host-interaction/memory/create-new-application-domain-in-dotnet.yml,sha256=2YDlvML_0AqPvx-sCm-GyOPPH6GlA-r4-9FYEvK4dcA,868
drakrun/data/capa-rules/host-interaction/mutex/check-mutex-and-exit.yml,sha256=kYtws4ti7kxDCq3oSW7pk95cduJ2hzRehbIh6bcimYE,839
drakrun/data/capa-rules/host-interaction/mutex/check-mutex.yml,sha256=95IJoDS5gNfD-RMkfb60QFsVv4tjpzbf1y3uUnkiHN4,712
drakrun/data/capa-rules/host-interaction/mutex/create-mutex.yml,sha256=wAyRzLF5iafmqgmMJlWCdUP7MB6rLWowFkJlFYCCqCI,470
drakrun/data/capa-rules/host-interaction/mutex/create-semaphore-on-linux.yml,sha256=KxFhLvJWmhJszFfPqvkWyTFK0w0-qgAR5mW-pvHZ6Jc,374
drakrun/data/capa-rules/host-interaction/mutex/lock-file.yml,sha256=3Tu2XnoeLaQvuwJjshUaC7Yo5Rvg4GrGP_Dj0tubrDo,433
drakrun/data/capa-rules/host-interaction/mutex/lock-semaphore-on-linux.yml,sha256=QMoso7sWnRENxvQh1nVGUYZSdg_0_bDaeCCoZIX4VxA,415
drakrun/data/capa-rules/host-interaction/mutex/unlock-semaphore-on-linux.yml,sha256=sptTyYAg1tT4b-aYfD4e106URhj1ByY16MvOttx_jiQ,374
drakrun/data/capa-rules/host-interaction/network/address/get-local-ipv4-addresses.yml,sha256=hvauBaoG2Esq-gKR8mcpa2RdBfaVQSMzpp_wIEvWvNc,803
drakrun/data/capa-rules/host-interaction/network/connectivity/check-internet-connectivity-via-wininet.yml,sha256=tbX8d-ftqWWuDAJDzivBAl7Joxzw0MtrqRfitul0n70,828
drakrun/data/capa-rules/host-interaction/network/connectivity/set-tcp-connection-state.yml,sha256=43i_tFTmbgzBfEIaZ_Uc3XwKxh8amAg3t9FxfMvacSE,707
drakrun/data/capa-rules/host-interaction/network/domain/enumerate-domain-computers-via-ldap.yml,sha256=maR7LH9HXPGVxi5BJlQVaTzmr7YmIAUQvyzu1Ot_I-o,1294
drakrun/data/capa-rules/host-interaction/network/domain/get-domain-controller-name.yml,sha256=6yRUDgpS4fyb1fLtBliaHww30B3OCRfdKm3069evwpw,934
drakrun/data/capa-rules/host-interaction/network/domain/get-domain-information.yml,sha256=WjdMqr4lQ7JqxxtGXpmXB0RBNHy9UchbzrscZir4ngc,717
drakrun/data/capa-rules/host-interaction/network/interface/get-networking-interfaces.yml,sha256=_OSBWhRldyvb6mq6Y06w1v2nDuwXQtBgGzt8m7JUz3I,987
drakrun/data/capa-rules/host-interaction/network/traffic/copy/copy-network-traffic.yml,sha256=_lHZ7WvSjhLv8RHtne5-6HC1nePkABtUWKUvFV0hElk,396
drakrun/data/capa-rules/host-interaction/network/traffic/filter/delete-network-filter-via-wfp-api.yml,sha256=nWyvRYdpG74e0uZ0mSIXJDv9x0THpisHnfnusZaquGE,887
drakrun/data/capa-rules/host-interaction/network/traffic/filter/enumerate-network-filters-via-wfp-api.yml,sha256=hr6dTuWH3rGgOL_TwCVASTz-QphFZqQrBqH_qNlQAqU,612
drakrun/data/capa-rules/host-interaction/network/traffic/filter/register-network-filter-via-wfp-api.yml,sha256=7CC8z-0PTZHupfDaaDeZ9tps76GUU50K1QYdgimA2DA,433
drakrun/data/capa-rules/host-interaction/os/hide-shutdown-actions-via-policy.yml,sha256=P4QEQ4DTx2tQt3wUtL3o2tuv7bTnN9uPDyji4AGumYc,861
drakrun/data/capa-rules/host-interaction/os/shutdown-system.yml,sha256=aJRYrhNsIUNhxyfyldnnFcOnpKce1PNs12b11_PKsKw,556
drakrun/data/capa-rules/host-interaction/os/hostname/get-hostname.yml,sha256=faPWoRBP6NGmRjLBvtkCyheMM5zr6Lu5KMwN_4LiXqk,744
drakrun/data/capa-rules/host-interaction/os/info/get-system-information-on-windows.yml,sha256=uLBa94LDqqt2ngSwO9D5hqE2nAfOhGaL_ebm1lpj_r8,748
drakrun/data/capa-rules/host-interaction/os/version/check-os-version.yml,sha256=lOBESTUQ3ipxUdpNp-yzRCTuozqPJJB3HLvgYQnKAKc,1580
drakrun/data/capa-rules/host-interaction/os/version/get-kernel-version.yml,sha256=S_lnaLuxVVMDow8fiUYUE-BOMhlpqViZcRlCvh9v2pw,456
drakrun/data/capa-rules/host-interaction/os/version/get-linux-distribution.yml,sha256=H5ooP7kp0V7H-0pva3qqlOx4wYs8PSDy-hT-BB59z60,525
drakrun/data/capa-rules/host-interaction/process/get-process-filename.yml,sha256=D2n65X-xlkKMzXGbkGW1aSwV5E_kzewv9O0XG_JgUFQ,1179
drakrun/data/capa-rules/host-interaction/process/get-process-heap-flags.yml,sha256=LbRAXoqtVJrt1K8zoCQsFnO4KwBxVyoSCdQl0YyH4ak,968
drakrun/data/capa-rules/host-interaction/process/get-process-heap-force-flags.yml,sha256=ka_2jCGQl5zx-nNr01FcxmYffah0aW2EI9LWgddnr58,984
drakrun/data/capa-rules/host-interaction/process/map-section-object.yml,sha256=nkRdM7EoP8FOBbwixGD0jFVk9wNe9Qxw-Kd_hrY0ntI,517
drakrun/data/capa-rules/host-interaction/process/create/create-a-process-with-modified-io-handles-and-window.yml,sha256=uVicAKpEnz3Xhav2beSZdR_67Br0SnX2BIiDvAMktYM,2484
drakrun/data/capa-rules/host-interaction/process/create/create-process-on-linux.yml,sha256=EawMpAPnYTDfvBuBB5IevVScon3i0kM6NJ5Ou0XmNB0,783
drakrun/data/capa-rules/host-interaction/process/create/create-process-on-windows.yml,sha256=guyd0s78YXOiBE6K3lDbkovV4vV5DGTkpcNFMmyg21I,1062
drakrun/data/capa-rules/host-interaction/process/create/create-process-suspended.yml,sha256=nUmhC2wTLEu2ZLsGcly7-5aVFNWB1Y0rbTnJ6jeADkA,594
drakrun/data/capa-rules/host-interaction/process/create/execute-command.yml,sha256=uJJUppaY8-tZ8o5IIDla4-DygrPE92dEmk_RWpHwJFc,391
drakrun/data/capa-rules/host-interaction/process/dump/create-process-memory-minidump.yml,sha256=VWLMNav3cNZSA2t24YvQzBSFOnQb6mqYT8k-LKVdxng,427
drakrun/data/capa-rules/host-interaction/process/inject/allocate-or-change-rwx-memory.yml,sha256=sA0EE8Nn_PSfY_nvTcoPB0ogmZ5jwD0b-H2s94GpJpg,761
drakrun/data/capa-rules/host-interaction/process/inject/allocate-user-process-rwx-memory.yml,sha256=_xqbeXMS83rNsbVWwjwAGVZmqUXDTo40VR0cU9E1bWc,551
drakrun/data/capa-rules/host-interaction/process/inject/attach-user-process-memory.yml,sha256=Kg4UDcf4DY_0--CcpgV1ygwnAE4qNY0az5QA5QCk_l8,503
drakrun/data/capa-rules/host-interaction/process/inject/free-user-process-memory.yml,sha256=VsPPQk1Au221B6IVka2S7lIZe721QHwEeXYwz_Sz0wU,576
drakrun/data/capa-rules/host-interaction/process/inject/hijack-thread-execution.yml,sha256=lqM3b3LN-LA2ifpXsOjTQZ5sWw8eapHeUxl6nNSsH5A,836
drakrun/data/capa-rules/host-interaction/process/inject/inject-apc.yml,sha256=9kwRCcJ2KpG3zm-CZUNaQ7MsXJj8aHpXnsnvI9rClYw,745
drakrun/data/capa-rules/host-interaction/process/inject/inject-dll.yml,sha256=j_FpGC2g2FlIjA2m4ZQ-nkKZLWXts3G8z743HL04Re4,1419
drakrun/data/capa-rules/host-interaction/process/inject/inject-pe.yml,sha256=GWmrEAPPuL3tr8f5QzKG21se5yup2w1I6r6GNfisF_M,1037
drakrun/data/capa-rules/host-interaction/process/inject/inject-shellcode-using-a-file-mapping-object.yml,sha256=TJyRS0FPSJiJ5wWJ729_DicZ7dVjLlT206KrE-wiwrE,728
drakrun/data/capa-rules/host-interaction/process/inject/inject-shellcode-using-extra-window-memory.yml,sha256=hXdFXIL4lG2axRFWBRJQiXleMup3j9QXpZ_tnJJ0elU,919
drakrun/data/capa-rules/host-interaction/process/inject/inject-shellcode-using-window-subclass-procedure.yml,sha256=TeWqQ-GXIrHG8RaFJVkOCk03woo8GNA_bM4amjuyk_Q,1076
drakrun/data/capa-rules/host-interaction/process/inject/inject-thread.yml,sha256=8LQ8haEWl-EVJw3ww1-GKpz5wmZS7LfdG8Fe1djigYI,862
drakrun/data/capa-rules/host-interaction/process/inject/process-ghostly-hollowing.yml,sha256=qKSiQUlxcGuhYZY6ZC-lCaFrkVare6t_DErrn3xQICk,915
drakrun/data/capa-rules/host-interaction/process/inject/use-process-doppelgänging.yml,sha256=F0T3k1QGKHADEESwzxfz57spmNiDKGcvPUJ3sJhUDm0,630
drakrun/data/capa-rules/host-interaction/process/inject/use-process-replacement.yml,sha256=3vQfmphjyJVNlFU3Xp21wKXYsVPxG6pSn_eI18qq4iQ,705
drakrun/data/capa-rules/host-interaction/process/list/enumerate-processes-on-remote-desktop-session-host.yml,sha256=MhDjBpAhe9KHdPvDfU24zF9-SWX0BxCvQsF9-T09N7Q,589
drakrun/data/capa-rules/host-interaction/process/list/enumerate-processes-via-ntquerysysteminformation.yml,sha256=emymD7R05C8RsAEUC5pqQUKEots2QMxZCDPcwkneNCY,625
drakrun/data/capa-rules/host-interaction/process/list/enumerate-processes.yml,sha256=TNj46baUIxXM7O-HteN7h-ZHHvmp4d7D8jPH4kHf6YM,1062
drakrun/data/capa-rules/host-interaction/process/list/find-process-by-pid.yml,sha256=BXSr7faxka09PloOszRyUMnx10aGu4VQOfv_3nCAQAE,564
drakrun/data/capa-rules/host-interaction/process/list/get-explorer-pid.yml,sha256=QXDswgud0A3SNL8oVIWPwVDEDp9jpzTGpx2X4bhB8BY,510
drakrun/data/capa-rules/host-interaction/process/modify/acquire-debug-privileges.yml,sha256=62l-MQZytRMPyBdvw1UTXHkdCchrEFCDlrhqDBG2jmw,476
drakrun/data/capa-rules/host-interaction/process/modify/modify-access-privileges.yml,sha256=noog4Gk4DCLt2PzCQWSxTHye1DCJ8yVBnVgWr2I9ZEM,486
drakrun/data/capa-rules/host-interaction/process/modules/list/enumerate-process-modules.yml,sha256=s3b4jqf_Sd1v3kORRd7FyvYa0X0sYTjz_uUNHMKyEbY,1730
drakrun/data/capa-rules/host-interaction/process/terminate/terminate-process-via-kill.yml,sha256=F6ktG-LHHMk6jsXdWsv2XwqCkG_Jm4eAPU3m2oHa-58,808
drakrun/data/capa-rules/host-interaction/process/terminate/terminate-process.yml,sha256=OuurhKXVAeQLdot2SzQyXfebSHPq5NHpUtk4TLkGonY,948
drakrun/data/capa-rules/host-interaction/recycle-bin/empty-recycle-bin-quietly.yml,sha256=BA3zY6OikVVMITniAtZ7ZLAimlYiDMH4lYlLiw84ZNo,832
drakrun/data/capa-rules/host-interaction/registry/create-registry-key-via-offline-registry-library.yml,sha256=a-bpg3P-o1JhE6JRopm88QUccTeMQk4p9aENCP3mnrM,475
drakrun/data/capa-rules/host-interaction/registry/open-recentdocs-registry-key.yml,sha256=pGcFL4mLAFPBcQE36sSuVDbqN9nC07jFcQA3Kn7vqSs,858
drakrun/data/capa-rules/host-interaction/registry/open-registry-key-via-offline-registry-library.yml,sha256=X9Gt9X3NHawQj8s6kxYcdI5Fchx3tjE5LMQSLRfk62U,404
drakrun/data/capa-rules/host-interaction/registry/query-or-enumerate-registry-key.yml,sha256=P2cpDIM_H0Fcq9y41djH-9rMYXK5CzvET2mv04eNLP4,1160
drakrun/data/capa-rules/host-interaction/registry/query-or-enumerate-registry-value.yml,sha256=SHvnaIqYzE7ISI-JwZr9W9nKUVL4QdEcoUHEMy0d7TI,1676
drakrun/data/capa-rules/host-interaction/registry/query-registry-key-via-offline-registry-library.yml,sha256=ck3IV5zDuEaysGYNYuaioifOw_2SP62wboJcBIvZ81s,440
drakrun/data/capa-rules/host-interaction/registry/set-registry-key-via-offline-registry-library.yml,sha256=UpliNC1KYevlsZKxWoBHk5z8VxXBsZcufbBA6Iu6mvw,487
drakrun/data/capa-rules/host-interaction/registry/create/set-registry-value.yml,sha256=BF6RzbH1rIKDGrQ0gdEHhukTRfD9_YnqVZjePe3jPsA,1440
drakrun/data/capa-rules/host-interaction/registry/delete/delete-registry-key.yml,sha256=i5BocJjiYNchHGf5dPGZcnDWshS5O2XeJT0ywGOw7eA,1028
drakrun/data/capa-rules/host-interaction/registry/delete/delete-registry-value.yml,sha256=fNjgIcnjkdcMD_YgYXiFWQ0AXSzDms-71_vTtLXeOaE,845
drakrun/data/capa-rules/host-interaction/service/continue-service.yml,sha256=oPkIV9AITtxKI4F9BOMN4rkTFWfLx19bd24t1X112tE,825
drakrun/data/capa-rules/host-interaction/service/pause-service.yml,sha256=yY4qwANoIlrGF9MFOugD1tzyzv5Dhjp1S2_CamgsY-o,816
drakrun/data/capa-rules/host-interaction/service/query-service-configuration.yml,sha256=AwjNH6ZxBJPJOaqbRY3RgjSnrF1uFmYelhBiCp8I9TY,423
drakrun/data/capa-rules/host-interaction/service/query-service-status.yml,sha256=iIIPOSnM30L7rfuiJCvEHa24ePNmHLbYFDMH6_UblT4,424
drakrun/data/capa-rules/host-interaction/service/run-as-service.yml,sha256=v_zejg7bUbx012w1MxbOSIBVz2Y1ty_v1vNRvPSExNM,644
drakrun/data/capa-rules/host-interaction/service/create/create-service.yml,sha256=67zqfERQfOa4T2q-d_I49KU9ET7koLzm5N1Zq7fNYOE,540
drakrun/data/capa-rules/host-interaction/service/delete/delete-service.yml,sha256=kAHsjfMgXkTxtV3Ol2eJoAuqUU7MFBPkDPJIyFKGphI,522
drakrun/data/capa-rules/host-interaction/service/list/enumerate-services.yml,sha256=NkYdV2P5yU5NlPRkzWoUjq23zWr5pcgdvbOUUXzlGe4,516
drakrun/data/capa-rules/host-interaction/service/modify/modify-service.yml,sha256=ogfevZ7XEvkNpz_R33sLogSTTNFTiOc6QGPeVBZ7dQ4,592
drakrun/data/capa-rules/host-interaction/service/start/start-service.yml,sha256=WY2qO-fjsYTy6w5UkSItn2Iut_WjMLemgpzqIDBKFgI,458
drakrun/data/capa-rules/host-interaction/service/stop/stop-service.yml,sha256=N8IG2r8Qy3SCUCAhMdPFm6s37zabkOgdYi97ctvwodY,861
drakrun/data/capa-rules/host-interaction/session/get-current-user-on-linux.yml,sha256=c957g7TzGCFEMY0g3QZmKO1qaiGjGiCYUXMG2pN6sMk,527
drakrun/data/capa-rules/host-interaction/session/get-logon-sessions.yml,sha256=uwhqX7-ncL8DzAP9FVq4PAMyUfcWHLEG6cmw2i3TFxU,527
drakrun/data/capa-rules/host-interaction/session/get-session-integrity-level.yml,sha256=g24f-1Chy9hnMrcGpAINjg70fCankz5yDunJFsCKQQ8,628
drakrun/data/capa-rules/host-interaction/session/get-session-user-name.yml,sha256=_dUFIHTrZlHB_n6wpdA80uGMRMsABs9UE1ggzX-jtwE,924
drakrun/data/capa-rules/host-interaction/session/get-token-membership.yml,sha256=pkkD_xV8z-fgyoWPC4brnUpdswflGMo1v1QSHGtPq8g,469
drakrun/data/capa-rules/host-interaction/session/get-user-security-identifier.yml,sha256=hgqgiuf0nC2g8hCiU1sxEhk4HCKzZoXKMGk52694Wi4,484
drakrun/data/capa-rules/host-interaction/software/get-installed-programs.yml,sha256=gidBLwuDZgjvrYq_m38-wex-EVnaziN8qPwpFYCFyeY,596
drakrun/data/capa-rules/host-interaction/thread/create/create-thread.yml,sha256=PABesi_s_LinAzZif3xTd8WheI6c_LsBg_lf_t0rRFI,1257
drakrun/data/capa-rules/host-interaction/thread/list/enumerate-threads.yml,sha256=_bTvxN8fYln_wRVSRQbcbScFSHxtEp7mWpg40nnWbwU,882
drakrun/data/capa-rules/host-interaction/thread/resume/resume-thread.yml,sha256=dY-BYaki7n7Wdmw9frOjf_qgLSIprBnlPLZXrgdySek,595
drakrun/data/capa-rules/host-interaction/thread/suspend/suspend-thread.yml,sha256=B4bP0p3djag1Qvb2mQ5MnQlGmdHg1r5DA77fCCFBZL0,587
drakrun/data/capa-rules/host-interaction/thread/terminate/terminate-thread.yml,sha256=WWLJaoO-DHbBY8bFnYZsLUfNqSkSW6fXyUPNm4teuBU,619
drakrun/data/capa-rules/host-interaction/thread/tls/allocate-thread-local-storage.yml,sha256=FtCq0OmT77it5CCykj6HxC_YQkwr0rly5RQ6QwLUtvo,386
drakrun/data/capa-rules/host-interaction/thread/tls/set-thread-local-storage-value.yml,sha256=QsJo_EwDx_FD13Da5qUtGRCVL1kVGtSkkthfxmAm4Tc,459
drakrun/data/capa-rules/host-interaction/uac/bypass/bypass-uac-via-appinfo-alpc.yml,sha256=eoMxzuYE25kIOXsah6GdTicbOXZKSC36A5MfL1oImIc,728
drakrun/data/capa-rules/host-interaction/uac/bypass/bypass-uac-via-icmluautil.yml,sha256=n_wcX3aqqZ6rEaOAcWD0SRREyDL2X1-4XhkGZHXVPlo,968
drakrun/data/capa-rules/host-interaction/uac/bypass/bypass-uac-via-rpc.yml,sha256=g0sdKdJ3ZnEos9aUkP291z40TMQ3vZ61rGe35RaSvqo,1342
drakrun/data/capa-rules/host-interaction/uac/bypass/bypass-uac-via-token-manipulation.yml,sha256=FWCJktyGDOmLGwpKnbRir7S8pw_YLpLB5ToH-NXdJWU,1432
drakrun/data/capa-rules/host-interaction/wmi/connect-to-wmi-namespace-via-wbemlocator.yml,sha256=7I-eYzYVCF1O5anWDFKdLXIPZ0_LbEnBLpX2hKz4iqY,1038
drakrun/data/capa-rules/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml,sha256=ENVB-6gHLHJ4aNNhfaSfoXan1z_6FwehgwapiIv7_nE,637
drakrun/data/capa-rules/impact/wipe-disk/delete-drive-layout-via-ioctl.yml,sha256=ExeYHEnkkV-cvwail0g5svsr6kxrAkdZacE97xBTH8g,819
drakrun/data/capa-rules/impact/wipe-disk/wipe-mbr/overwrite-master-boot-record-mbr.yml,sha256=xwVaMqiJBuF-35H0IvxNz8IUO7iBRTCTRqZ-tW8Pqf0,726
drakrun/data/capa-rules/internal/limitation/file/internal-autohotkey-file-limitation.yml,sha256=QCmFkrLxDsAPxv0t6iaA0EOUrGo8AshjH9VEi8y90tQ,770
drakrun/data/capa-rules/internal/limitation/file/internal-autoit-file-limitation.yml,sha256=llIQUdgisBSTzPfV34HCfsSzq2ACydQQUXBWJxG5ozE,886
drakrun/data/capa-rules/internal/limitation/file/internal-dotnet-single-file-deployment-limitation.yml,sha256=1lntRHHvXYjfwILmtHB_B-ZlMkvGOA2AShqm6yMYOqY,986
drakrun/data/capa-rules/internal/limitation/file/internal-installer-file-limitation.yml,sha256=eet1bsKj5q7y4adAp0xqNkNRt5pyRA4l72FDd8qm2DQ,688
drakrun/data/capa-rules/internal/limitation/file/internal-packer-file-limitation.yml,sha256=Yjw9MPOW-mE-raNPDMMpOcthEjhRLcYHHdj956rvquk,786
drakrun/data/capa-rules/internal/limitation/file/internal-visual-basic-file-limitation.yml,sha256=gdlLEznWrEWBAsQWysbzcuN1pAKymZj2cF6ubs2qqzI,727
drakrun/data/capa-rules/lib/allocate-memory.yml,sha256=h2crZhcfTXGMrUBP6iYL8S4mj83WQ7Kk6mBJnEPCwvU,1049
drakrun/data/capa-rules/lib/allocate-or-change-rw-memory.yml,sha256=kPleZjbBZJYcxfgf2_1tcV4uVMkMBbIG0doO5FD30DE,635
drakrun/data/capa-rules/lib/calculate-modulo-256-via-x86-assembly.yml,sha256=06pAOcXikoUwQhANBiFoTbLnd4baEBGDXgQvaHKdH10,531
drakrun/data/capa-rules/lib/change-memory-protection.yml,sha256=3zUBrzKhHTNy17CARDwHSWU5zvFkz5TdYKNarfFpilk,700
drakrun/data/capa-rules/lib/contain-loop.yml,sha256=x9geLzTrNozXSdU7Y5pyUunTRcuFbc5fke0ZudJuXn4,385
drakrun/data/capa-rules/lib/contain-pusha-popa-sequence.yml,sha256=lxBWdebQizQbPMqLrCHFeeR1ktcfQ1qwG-PwbCwhQw8,532
drakrun/data/capa-rules/lib/create-file-compression-interface-context-on-windows.yml,sha256=S31WUH61ibnfCuBKE3yN7uVKe9FjdYck9wcVaOrrhpI,437
drakrun/data/capa-rules/lib/create-file-decompression-interface-context-on-windows.yml,sha256=cG-fIzhWUy_UVPEDdAcux8MLTAqJ2ZrjPTKk0VSDvRk,437
drakrun/data/capa-rules/lib/create-or-open-file.yml,sha256=nvM4uYQXQdgtfC3eS_XsiHLQTFYuCe3RVAfKtSVaU2E,702
drakrun/data/capa-rules/lib/create-or-open-registry-key.yml,sha256=PE3pzpx82Z90zvt8j8bEkkvuYdUmUh8Tse3BEMBDQqk,1566
drakrun/data/capa-rules/lib/create-or-open-section-object.yml,sha256=XIqlDBZ2JD6VATAucrr1AS7Hk4in4rl-c1o9OXHwHio,417
drakrun/data/capa-rules/lib/delay-execution.yml,sha256=-FHx-VN5i9_UOJn_LudWOsRFV6FmVdvmGwPTpekV7FI,1383
drakrun/data/capa-rules/lib/duplicate-stdin-and-stdout.yml,sha256=FeZNcXI8dQKdkdrPuXpovVr_6qWf8x4IxM4mf4vjK4w,375
drakrun/data/capa-rules/lib/get-os-version.yml,sha256=s9oib1L4dLp8KhQjH0KKz6gEoJwK9MIZ6DKYzkeBkIk,997
drakrun/data/capa-rules/lib/get-service-handle.yml,sha256=JZnDuGBwHt_1joqzpYLfafA_8sFI2YiyAaEKW-ThBZs,326
drakrun/data/capa-rules/lib/open-process.yml,sha256=8Ro2dknxQFWO3KzyU9RKDtmFYXukSpfuCV21J71Bpjw,381
drakrun/data/capa-rules/lib/open-thread.yml,sha256=ugwoNTWkg97duE2T-EbP4E1T5IUCDQbdLKr5zZfAy1I,397
drakrun/data/capa-rules/lib/peb-access.yml,sha256=MRwpHMTJB4EEaMQQ2ZJXh36sw-iT-59cYbWpksxhh3Y,1572
drakrun/data/capa-rules/lib/validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml,sha256=pzJiaxQ0w4I1TRnnQnApbkAXHixttMyidIfBTTxjtZQ,2115
drakrun/data/capa-rules/lib/validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml,sha256=yADXKNj2gr3tFlSdyo2Ytjmm5kUkqq2ubgwLfpZUKTo,2465
drakrun/data/capa-rules/lib/write-process-memory.yml,sha256=oGwFzqzWmJlmKph6mTSIdAl6oJTq8e8CvdzwkiJd6Xs,472
drakrun/data/capa-rules/linking/runtime-linking/access-peb-ldr_data.yml,sha256=P_isXIw_qcOxaQnd3AuB7ZmC-1PfmY08LJH7ABdOO_g,1570
drakrun/data/capa-rules/linking/runtime-linking/get-kernel32-base-address.yml,sha256=6sskNJAye-a35_E0LFIf2peW-BH3AY7eQi-bQ54lNEw,1020
drakrun/data/capa-rules/linking/runtime-linking/get-ntdll-base-address.yml,sha256=LIQaBAxx-a6opejQYb4861uABiTJqxAJNkSSUHYVCXk,1005
drakrun/data/capa-rules/linking/runtime-linking/link-function-at-runtime-on-windows.yml,sha256=UjdVy94etqbfmd7jJDL70FB7Yqw9_WeV4x3CV8baMCo,556
drakrun/data/capa-rules/linking/runtime-linking/link-many-functions-at-runtime.yml,sha256=VM3QxEqKTmy-H8qp8U81o-J2skZiF3EZ_WaXy092f0w,811
drakrun/data/capa-rules/linking/runtime-linking/populate-syswhispers2-syscall-list.yml,sha256=_eM9ChqWJQU5PtelpTL-CKFqkJZ1fgc8Wnye1UoJKVc,1444
drakrun/data/capa-rules/linking/runtime-linking/resolve-function-by-brute-ratel-badger-hash.yml,sha256=bqI8OtrO4BXilyy_LpL47VB4LlsTtNYG6Serfo1nzJA,1285
drakrun/data/capa-rules/linking/runtime-linking/resolve-function-by-fin8-fasthash.yml,sha256=wq7k10SIT0rfncwmWFrAM253klbDlk0NnCrD2w_7bFA,1340
drakrun/data/capa-rules/linking/static/linked-against-cpp-standard-library.yml,sha256=lPr9NeXwG9vS2Gl2J5MS_IxgJsVRMriqWK8vYUO8GSU,560
drakrun/data/capa-rules/linking/static/aplib/linked-against-aplib.yml,sha256=I9TTfmp9N__JHoSA7dK6f_fjk45H_5nhRO8tJKkfWu0,381
drakrun/data/capa-rules/linking/static/cryptopp/linked-against-crypto.yml,sha256=5dHv8P0YducOVUlrjwAkvygVTgN2ApxzO0k_BoruYb4,733
drakrun/data/capa-rules/linking/static/libcurl/linked-against-libcurl.yml,sha256=5exQx4WuLRk3MYNe5SjFQ0pYqbGbcT_G2MH6pFkEEec,330
drakrun/data/capa-rules/linking/static/minhook/linked-against-minhook.yml,sha256=HsUSsfUbEXxzoKXxasXUi0YobYBVM4TsZIMP__Fz-eE,1776
drakrun/data/capa-rules/linking/static/msdetours/linked-against-microsoft-detours.yml,sha256=iO9Z9mkNrbYG67oR0MTU4pohRUTV3vM3qWr8TWt_kBI,484
drakrun/data/capa-rules/linking/static/openssl/linked-against-openssl.yml,sha256=iNn2IqBWjkf-iFq3X4zrrCmF_HJg8n6AVDtNH452vC4,602
drakrun/data/capa-rules/linking/static/polarssl/linked-against-polarsslmbed-tls.yml,sha256=xP92B6ae6cG11wyaIbaD8x3vpejjTdIekOLj-H5k9PA,554
drakrun/data/capa-rules/linking/static/sqlite3/linked-against-cppsqlite3.yml,sha256=KFkZR02GW47BXURHgg9LKmU_Gc7QrHcTv9pGwt8YwLE,326
drakrun/data/capa-rules/linking/static/sqlite3/linked-against-sqlcipher.yml,sha256=7i4ZrS-2G-2GBNs91F6SY9zX3mu-rENE11iJcULhcKU,734
drakrun/data/capa-rules/linking/static/sqlite3/linked-against-sqlite3.yml,sha256=SVn9rxL7iGFe5DgIKX6P2c93zZRDPyT6nr5jcoeU31I,649
drakrun/data/capa-rules/linking/static/wolfcrypt/linked-against-wolfcrypt.yml,sha256=J1KN9rIKEpOyKXaNShVwAltD2MxlznJdeBNWM9CIHD4,761
drakrun/data/capa-rules/linking/static/wolfssl/linked-against-wolfssl.yml,sha256=LF_tO_kxjwHOfrxaGJfY9E8eohYY_X1fjKpCQBZ0qrY,837
drakrun/data/capa-rules/linking/static/zlib/linked-against-zlib.yml,sha256=hHPym9Y9KjSldktGSFax_srvruVUCp7KyRC_dvEq_3k,389
drakrun/data/capa-rules/load-code/execute-vbscript-javascript-or-jscript-in-memory.yml,sha256=S_dxTC-co7mk3Jd4SAzUuIfIZNNkUxUc0AI-aJFxnyE,889
drakrun/data/capa-rules/load-code/dotnet/load-windows-common-language-runtime.yml,sha256=va77tPZUXtW6-vV3wHny0pH1QZiOshEpZXTiT5dqQiE,1877
drakrun/data/capa-rules/load-code/pe/access-pe-header.yml,sha256=mvx8k3hNnlN-7lBeZf8OEoRfJT5j1FOp42DpD7qJVCo,447
drakrun/data/capa-rules/load-code/pe/enumerate-pe-sections.yml,sha256=8UyUpxyvzQmvbc5iDiRgq5qrbda0wVo6RngnIYbP0CU,2290
drakrun/data/capa-rules/load-code/pe/inject-dll-reflectively.yml,sha256=Q2_69ec8qKgoM6eht0VfKg4tjZ7ClYtWPhIISV8KnaA,1022
drakrun/data/capa-rules/load-code/pe/inspect-section-memory-permissions.yml,sha256=tWEUuzm7qxb4BxZubZX7dZB9AEb0zvqlU5GYsZXEe8A,1762
drakrun/data/capa-rules/load-code/pe/parse-pe-header.yml,sha256=hUjgwkOUc5wNNs3p2nBsLsBPTVzt1mY-PLeS42uqN20,2384
drakrun/data/capa-rules/load-code/pe/rebuild-import-table.yml,sha256=9OqGkb9QkwJ8G6FCYUHjnNMeQI5U5v4BUn1AMyAMy8M,1323
drakrun/data/capa-rules/load-code/pe/resolve-function-by-parsing-pe-exports.yml,sha256=eqqohDisuAE6vCK19t2Sl4M_ayJnQ-C2pQ_20kwnwEs,1202
drakrun/data/capa-rules/load-code/powershell/run-powershell-expression.yml,sha256=u7sGRReMkuNfdpf_Tzv03pAQ9oSVoldaxWZl4uy_Uyw,801
drakrun/data/capa-rules/load-code/shellcode/execute-shellcode-via-copyfile2.yml,sha256=T2FxnSh-h2l95lVpEFXfztrz1mELHYOTm94SR8bMS1I,636
drakrun/data/capa-rules/load-code/shellcode/execute-shellcode-via-createthreadpoolwait.yml,sha256=Ub9oahu1gTbuMa-jo8lM_HDHZxhEfdBvDRWqrCyQdEI,688
drakrun/data/capa-rules/load-code/shellcode/execute-shellcode-via-windows-callback-function.yml,sha256=4KruUDBVRAlfSjrJzJmoLCKZIWKRj3-ngVChwVYZars,2979
drakrun/data/capa-rules/load-code/shellcode/execute-shellcode-via-windows-fibers.yml,sha256=J6G9ono2Mm8G0fh7geb1pFEIP0k864mq3sQBBKJzeWk,778
drakrun/data/capa-rules/load-code/shellcode/spawn-thread-to-rwx-shellcode.yml,sha256=svsVpGm_LiXdiVg2YdGv4ETT6QrX2EexICcraE0TBDo,451
drakrun/data/capa-rules/malware-family/plugx/match-known-plugx-module.yml,sha256=hfZczcBdDDQ7DF4juv_b7Etfv3vZ8sbtwEKfKwUWILA,4365
drakrun/data/capa-rules/nursery/access-camera-in-dotnet-on-android.yml,sha256=31-jthIm1a5FGuhJ1lINtWe_2RkE59VwHPQTqHTOLBs,311
drakrun/data/capa-rules/nursery/access-unmanaged-com-objects-in-dotnet.yml,sha256=UCpg9Uk0yyX-w4Eh7Ka84JWrJNgxDlh0q1BkdRuIPv0,322
drakrun/data/capa-rules/nursery/access-wmi-data-in-dotnet.yml,sha256=-QJ6E8dgveYJGX4WTeTKLJukcsOSLJpxdIR88jz_FEk,679
drakrun/data/capa-rules/nursery/add-user-account-group.yml,sha256=AbA2YoLOg-wKMdNjB7NEgW_hfhoWNUDfqdsUbv4B2kI,397
drakrun/data/capa-rules/nursery/add-user-account-to-group.yml,sha256=yohcZ6u0pH-uv2YSFnTOWUeuyE2XWDxdtEDgpi-NJKw,495
drakrun/data/capa-rules/nursery/add-user-account.yml,sha256=OVcBnhto1EosZqIdSTbrCR0Eh_qH9YABRIqrQpisOXY,345
drakrun/data/capa-rules/nursery/add-value-to-global-atom-table.yml,sha256=mZVnLwqJbi9ujAIq6_Dqj_aN8boEPoZ0jgGDmicjj-M,482
drakrun/data/capa-rules/nursery/allocate-unmanaged-memory-in-dotnet.yml,sha256=9pi-Y_BTWLqRaZgFSDxJYC6_QcwMwwia8OWhG-cUzeI,290
drakrun/data/capa-rules/nursery/append-data-to-clfs-log-container.yml,sha256=qHovTAQOFiKnxqcY7paHTHBOn33DF0pasVeTqqtY0yc,664
drakrun/data/capa-rules/nursery/authenticate-data-with-md5-mac.yml,sha256=gOM9X41q3oCFsj7xsGhXTk3GVuo0lgawlhsyaWsNcZ4,691
drakrun/data/capa-rules/nursery/build-docker-image.yml,sha256=8y8My90MSE1U0IQue6DheLD9Zubao7PBm5r1wiJrtDM,550
drakrun/data/capa-rules/nursery/bypass-hidden-api-restrictions-via-jni-on-android.yml,sha256=9e85HOrCDoOIHqrG2dbX9xZGxD7JAbkEUm3sbsZCdos,631
drakrun/data/capa-rules/nursery/bypass-uac-via-scheduled-task-environment-variable.yml,sha256=sCdLXfM_7NMLw3Wimumqa5GA1j9vyAWKf5x6KZlEsxY,829
drakrun/data/capa-rules/nursery/capture-microphone-audio-in-dotnet-on-android.yml,sha256=tpMhhrb62twjUIJQEV3zvQEDjwuWnfuMatfBrvMJbt4,440
drakrun/data/capa-rules/nursery/capture-network-configuration-via-ifconfig.yml,sha256=JrzhQ_zKSGXjVmbg6HmTDFMAbi8j-FkpAzMfCLk59EU,369
drakrun/data/capa-rules/nursery/capture-process-snapshot-data.yml,sha256=755OeMgqHy3EVdrPX09lVMCWkxXz7NK7O4CgPLmtCPU,297
drakrun/data/capa-rules/nursery/capture-screenshot-in-dotnet-on-android.yml,sha256=D_XoPmfHorPF2BPBau5nc1lpQ7_z4z5mVCjfTNATJr0,350
drakrun/data/capa-rules/nursery/capture-screenshot-in-go.yml,sha256=fONegj4-ULktuGNHAV4LgrcJIIOJgbY4i2nLxHf3Im4,874
drakrun/data/capa-rules/nursery/capture-webcam-video.yml,sha256=u6KCCDT6QSbL7qbaL12CG73vgMeVyna9bvjRCuUmf9I,1274
drakrun/data/capa-rules/nursery/change-memory-permission-on-linux.yml,sha256=ug2liy5N6OE7wuB5M2JNjWaFbUh4tpkag-3l7iwAgFQ,336
drakrun/data/capa-rules/nursery/change-user-account-password.yml,sha256=8llUak5IH0pMuto81d4_mYHykdzpBSIGGztGb2XgvUQ,374
drakrun/data/capa-rules/nursery/check-clipboard-data.yml,sha256=3oevzzgNV4CiFqMhnaKkbqoJmcUkl6jxJ3eRSw-zHbk,572
drakrun/data/capa-rules/nursery/check-file-extension-in-dotnet.yml,sha256=5JSP_QuaWYpXgvVkPzxO0s2QZU5R_Qiyl1-f-pHZ8XQ,308
drakrun/data/capa-rules/nursery/check-file-permission-on-linux.yml,sha256=XrYeSq2BuAVX7hmM2pKy3q-hl6tYfB2oMFL3plML42s,332
drakrun/data/capa-rules/nursery/check-for-incoming-call-in-dotnet-on-android.yml,sha256=ZOXUbM1fPqwr-npY_oNVODgwDCNnjIsNLEEhSDbZUO0,438
drakrun/data/capa-rules/nursery/check-for-minimum-number-of-windows-on-screen.yml,sha256=-wWVUar5aBvhDkwO6pGR4AqJ9qi6PciH7XJBBdReQfA,793
drakrun/data/capa-rules/nursery/check-for-outgoing-call-in-dotnet-on-android.yml,sha256=8XD_FmizxGBaqXvqRxpmqmGLvTd1N18Sug8XuE57uhk,367
drakrun/data/capa-rules/nursery/check-for-process-debug-object.yml,sha256=s0qc-KtjF2rCJTwvAawkwNgnyhegbZTYdcyL9Amx9_k,1030
drakrun/data/capa-rules/nursery/check-for-sandbox-via-mac-address-ouis-in-dotnet.yml,sha256=DbwvEKZuS3ZSCw7SIpGQxzOaA-3qsGgckQ-d1Ft7Pcs,1286
drakrun/data/capa-rules/nursery/check-for-vm-using-instruction-vpcext.yml,sha256=D62RRvfozEaNUMH6fctGiOJK6B_3bdh1BYUoXmlp6jM,1159
drakrun/data/capa-rules/nursery/check-for-windows-sandbox-via-mutex.yml,sha256=C2YlFgcaq-At-1Qx0MCYl-crHqNGzCYhUoEtioMRxxk,523
drakrun/data/capa-rules/nursery/check-for-windows-sandbox-via-subdirectory.yml,sha256=PGa-8TW-plVaee8B9Qet9IZb64lFGBSpP7uDGl45dZI,853
drakrun/data/capa-rules/nursery/check-if-directory-exists.yml,sha256=qyEsPxllOGLE7tuYC1UuFxPW5oDWnvtjUIgp8VNGfjs,337
drakrun/data/capa-rules/nursery/check-if-process-is-running-under-android-emulator-on-android.yml,sha256=X0ms_UXTpBMWJqSe89W-7L-UWBqeTAGLfGRp8Bi3koQ,559
drakrun/data/capa-rules/nursery/check-license-value.yml,sha256=X-3Ciggro5EBMseR4tAzJCd1OQyzayGisBA86RDUN-o,512
drakrun/data/capa-rules/nursery/check-processdebugflags.yml,sha256=h_6pMD2evdWzm17eZN9GODfrJODpncvRcQINS1qgPN0,571
drakrun/data/capa-rules/nursery/check-systemkerneldebuggerinformation.yml,sha256=Zgo-pTq00Vi4WQaen6g-dJui886sT_Vt00BzCcObMFc,718
drakrun/data/capa-rules/nursery/check-thread-suspend-count-exceeded.yml,sha256=bFeoFrBpu4u5Uqw9Fptrp3GHsiaFOPxqN-dAljMkMjk,841
drakrun/data/capa-rules/nursery/check-thread-yield-allowed.yml,sha256=LnMLK2Ay8pvLeeLEpzPLIx1Nl9N7FeDRHfEKZVXJFm4,667
drakrun/data/capa-rules/nursery/clear-clipboard-data.yml,sha256=U-9EZYaz8VppYTok9krHmHdrep6z8I6PLChE2onKO-M,324
drakrun/data/capa-rules/nursery/collect-ssh-keys.yml,sha256=8HY8Cn9s18R2A87vXjebKTbtNuvcLgLLqwHeQ4PPaWI,371
drakrun/data/capa-rules/nursery/communicate-with-kernel-module-via-netlink-socket-on-linux.yml,sha256=bBhIvhYsW9vL4cXwMGu7JUS9JbDPoDJyUur2KcHJ_XY,481
drakrun/data/capa-rules/nursery/compare-security-identifiers.yml,sha256=25ATyolEuW1lq3DwuW2pJiKbbisY1IbY_ByQ8huuwVk,294
drakrun/data/capa-rules/nursery/compile-csharp-in-dotnet.yml,sha256=96GFbEsPJOlrFsci4_wTQp_hvDP66sRW0viIkT5CPRY,413
drakrun/data/capa-rules/nursery/compile-dotnet-assembly.yml,sha256=iXyYVqaC1P3wFw0Xew82L7ju9821xocvGDJ2l0ndM0E,548
drakrun/data/capa-rules/nursery/compile-visual-basic-in-dotnet.yml,sha256=j1iTEO6kEyvfEFa0DplYxRESRYKOGYkzw2R4nQdmGKM,416
drakrun/data/capa-rules/nursery/compiled-from-epl.yml,sha256=_9J1SByKM-hkmslgSxca7SGgdL2jJ0RBfRLAAGl97wA,687
drakrun/data/capa-rules/nursery/compiled-with-exescript.yml,sha256=3fnJ49ho9fIrBII-5vxp8TfQF19oGv6UmDHtx71qPew,827
drakrun/data/capa-rules/nursery/compiled-with-xamarin.yml,sha256=GBzbcEtcqVimoVJhJtJKjM2KMxotHcZVqMXP4p44Sfg,239
drakrun/data/capa-rules/nursery/compress-data-using-gzip-in-dotnet.yml,sha256=1vxmV4nVcqEJAt5CfRVXdkTP0wysX6_FKfbJaW2yAKQ,414
drakrun/data/capa-rules/nursery/connect-network-resource.yml,sha256=3yqF3PT8SrTZjVMp6XuWmMUoRWRPYA0YL-U7NN0hLOk,488
drakrun/data/capa-rules/nursery/contain-a-thread-local-storage-tls-section-in-dotnet.yml,sha256=_xPiCKBKWqNeWOiKMhIj_vRYopEFkVcfXEh5moxgxtg,451
drakrun/data/capa-rules/nursery/covertly-decode-and-write-data-to-windows-directory-using-indirect-calls.yml,sha256=xSepscTTRa3iV0sEIyf9S23kGz2uoB1BKOGG5Q1I94A,767
drakrun/data/capa-rules/nursery/create-container.yml,sha256=PTcteFwqrgdg6Eq1KnvWal1Y8O9__y0Ive4MjO1IdQw,810
drakrun/data/capa-rules/nursery/create-process-via-wmi-in-dotnet.yml,sha256=tZNbydod6P1Fj-AnFsK8PeQNK183tRo5PoAX9Pn98oo,641
drakrun/data/capa-rules/nursery/create-registry-key-via-stdregprov.yml,sha256=c-0FRyenOOI2nG9OnR0q20R7oGDTI9cfVaMmrGyRO78,449
drakrun/data/capa-rules/nursery/create-restart-manager-session.yml,sha256=6tGHQ_wXFCQmRoL3buTvsGBVKXu18DIec3_aoWoHdI0,467
drakrun/data/capa-rules/nursery/create-thread-bypassing-process-freeze.yml,sha256=SoF2jwoN3IGHnX70yyaaaXbnI7Lo6DL1BIFvicqLc20,829
drakrun/data/capa-rules/nursery/create-zip-archive-in-dotnet.yml,sha256=AliAqYt8RS6vO6G895xXynClKTZ54xPxMbfue7Rdq-4,447
drakrun/data/capa-rules/nursery/debug-build.yml,sha256=ZViBwN5rc7_PZD1YEA90I3gwECAS17jTUPQInMgC13A,269
drakrun/data/capa-rules/nursery/decode-data-using-base64-in-dotnet.yml,sha256=Li5OAxtdaj_8RmIk3BPHbL_YNwyyqJV-RJevevkGvKk,565
drakrun/data/capa-rules/nursery/decode-data-using-base64-via-vbmi-lookup-table.yml,sha256=8L5CFX9DAlYVBPbQMBvB-GAQIw1mjWgSwTOnwBpeVK8,1724
drakrun/data/capa-rules/nursery/decode-data-using-url-encoding.yml,sha256=PCBQpq8u0F6d6lQckfrq9x-5guxH6jwjVXq54sa88TI,513
drakrun/data/capa-rules/nursery/decrypt-data-using-rsa.yml,sha256=AwfD9ozV_FMX3Bj2Ux20X_QfNRvrFidygF7XtzYEsdc,574
drakrun/data/capa-rules/nursery/decrypt-data-via-sspi.yml,sha256=R5_rZx_LMa0fXIoJN76iV2YBeJY9kBiLy80v4RIEQGg,446
drakrun/data/capa-rules/nursery/delete-file-on-linux.yml,sha256=3NnkKHKpeXpqkDWiBEDnAyQP_o4ni_hortx_d85bviA,381
drakrun/data/capa-rules/nursery/delete-internet-cache.yml,sha256=AZUZk8dOjzWGtOsM21LHVmYvavLw6_kyXm9Nrdpg6g8,369
drakrun/data/capa-rules/nursery/delete-registry-key-via-offline-registry-library.yml,sha256=sxgMX72Uqyzo4-6ZD1cuSzgWcCrc6RKZ-T2YgErf440,480
drakrun/data/capa-rules/nursery/delete-registry-key-via-stdregprov.yml,sha256=Pw08ulxWy5nFnud-at9FFI35R8vNhhc3nyyUsr-cOuE,449
drakrun/data/capa-rules/nursery/delete-registry-value-via-stdregprov.yml,sha256=RUoXRdUbqNn5mGK25-qfVclX6FxcD_zQ7gL2bdK0LRY,453
drakrun/data/capa-rules/nursery/delete-user-account-from-group.yml,sha256=low50jo4ilkxK0ZLiVT3yWOK5F_jgmw_jqNQY2YdcpE,461
drakrun/data/capa-rules/nursery/delete-user-account-group.yml,sha256=Yhr8XlIpesMfXa49KEfmQHyqQvrqSkxliCJy4taUIDo,400
drakrun/data/capa-rules/nursery/delete-user-account.yml,sha256=9tlZ8b3_CSkKdCErSQTmWJSL11MtEV4NiAW5czL5jh4,351
drakrun/data/capa-rules/nursery/delete-windows-backup-catalog.yml,sha256=n3oDmGZ8IrOSfxVfw5l08ZyXSFI_caI-OQ6Ol5IowuE,365
drakrun/data/capa-rules/nursery/deserialize-json-in-dotnet.yml,sha256=cFnfjFawqZwVs31DUBwlvZnuPbZz4WHHAx9e1a7Bz-0,572
drakrun/data/capa-rules/nursery/destroy-software-breakpoint-capability.yml,sha256=jVulcgT9fCONCQxAjZyq-i2_U_SX90DkQyU-f97pRu0,732
drakrun/data/capa-rules/nursery/disable-automatic-windows-recovery-features.yml,sha256=XpIowlsltAdNfQBjFCBlafcy_7Fcs7UK1YBg-INhU1Y,670
drakrun/data/capa-rules/nursery/display-service-notification-message-box.yml,sha256=20HtMx2uDcoBFnvSHqpFMs0eHl5sZwj1EddXH-IkGtU,333
drakrun/data/capa-rules/nursery/empty-the-recycle-bin.yml,sha256=hItlztB8GQiiZnl5NKGzOs6yH2WOg0pwK_5vvKeXNkw,245
drakrun/data/capa-rules/nursery/enable-safe-mode-boot.yml,sha256=J1O7aZbRfl4HO2w0FhL8BxTPTnDQLPm2TxOP-rfw0H0,701
drakrun/data/capa-rules/nursery/encrypt-data-using-aes-via-x86-extensions.yml,sha256=H7aPMDqWXi4EoFrp0SU21mXy9_5rDcrjvKy-gjNaEVA,916
drakrun/data/capa-rules/nursery/encrypt-data-using-aes.yml,sha256=CtSEr6U8LlV06_IGDCoXOnCz6ixWOwx9JdPfh2HU3AY,3417
drakrun/data/capa-rules/nursery/encrypt-data-using-fakem-cipher.yml,sha256=IENkm9NGrBi72OVujPDJAquz9raGVMvypCz5dmpAxn4,867
drakrun/data/capa-rules/nursery/encrypt-data-using-openssl-dsa.yml,sha256=Wz0RaNvkjQdEvn6mEZ3tbIxmxCbTFPUEaFYrvoJP-X8,655
drakrun/data/capa-rules/nursery/encrypt-data-using-openssl-ecdsa.yml,sha256=eQglm__9eU_Q-Wts69_zNKWoQz8qSRg6fbcm0HSTSCU,998
drakrun/data/capa-rules/nursery/encrypt-data-using-openssl-rsa.yml,sha256=f1JzpLX6FgoOTdmab_TBSy-mgIagHQNQxzIMgGJWdKE,1433
drakrun/data/capa-rules/nursery/encrypt-data-using-rsa.yml,sha256=Jh6QFxwdDAbTJ8CapiIgO_D3eogZ5_ixMpYA-C4QWBE,666
drakrun/data/capa-rules/nursery/encrypt-data-using-salsa20-or-chacha.yml,sha256=sUDH_ZQLOtJaIZn3fDgnkY8n_aqI1GVwb9WrVQJGeCg,1233
drakrun/data/capa-rules/nursery/encrypt-data-via-sspi.yml,sha256=pKmkk9fb9zkIiR4ByeN28jSU_aAjKSsD0TT4fnZKXbg,438
drakrun/data/capa-rules/nursery/encrypt-or-decrypt-data-via-bcrypt.yml,sha256=SmDOGb4SlUpxQs8a-6lNKkEfuoyo0Y965voggTb6JIs,757
drakrun/data/capa-rules/nursery/enumerate-browser-history.yml,sha256=VYgyd_r_kmi7t1sT95h7rYtk0j2fYV-ypFWQ4at-9aU,669
drakrun/data/capa-rules/nursery/enumerate-device-drivers-on-linux.yml,sha256=pGU8M2824ZLFX8p8FtKfLM7px0grSDe42T5ZQ3lXxQE,367
drakrun/data/capa-rules/nursery/enumerate-device-drivers-on-windows.yml,sha256=w4ZWjNsg_joCTxIQRa3hLcQYpEBhhCMHC-jgPcXrnV8,880
drakrun/data/capa-rules/nursery/enumerate-disk-volumes.yml,sha256=Qxwwr3PW8juL9MyA6ufLtJWxGzm9MaanO9LI0ScEGdw,692
drakrun/data/capa-rules/nursery/enumerate-drives.yml,sha256=DwBrTXTPaO01l27__4S1OF6NIyGSSF2GB8KDTGG0WlQ,256
drakrun/data/capa-rules/nursery/enumerate-files-in-dotnet.yml,sha256=U2-KjvsfulU2Zfki5pTMCJM6UzPxNFYlBS-OT2p6eNw,972
drakrun/data/capa-rules/nursery/enumerate-internet-cache.yml,sha256=6zwzN4zOiXeFC60f_7fUtUqRGhtAL-qZgV_XNIsj0Bw,404
drakrun/data/capa-rules/nursery/enumerate-network-shares.yml,sha256=Qtgvy18DylM15HrjeR7XKmdoQUX2Aq8Py9ArdPxI9cs,395
drakrun/data/capa-rules/nursery/enumerate-pe-sections-in-dotnet.yml,sha256=ijlCsjH58qBJQyfqa57kp-lc8b3mV87FVZvTdmlEQjE,695
drakrun/data/capa-rules/nursery/enumerate-processes-that-use-resource.yml,sha256=UKuqL-rEolarfM5F-aaPok6rSjwmfR7CQ1MFQFM_PH4,576
drakrun/data/capa-rules/nursery/enumerate-processes-via-procfs.yml,sha256=-rWkIMIQQISeeiKaDutxWfirS-TOBE6qQ1sq4TBsRVU,420
drakrun/data/capa-rules/nursery/enumerate-system-firmware-tables.yml,sha256=4NeD6h0piS_0FDvPPhlbtU_YlicqTTTWXxsqvyuFg_o,394
drakrun/data/capa-rules/nursery/execute-dotnet-assembly.yml,sha256=IBgwjYTQxZpBlxFHGNR1l0bMUGopQOCLgN7leypUvfA,377
drakrun/data/capa-rules/nursery/execute-shell-command-via-windows-remote-management.yml,sha256=wav6uhALtvz7_1DeRF98ZEuWUhfZbnVMaXKJboPtmus,454
drakrun/data/capa-rules/nursery/execute-shellcode-via-indirect-call.yml,sha256=RTRO5IjKfG-CnYAFad0haZQS2D3D9SAnYfGuKQkvxBk,459
drakrun/data/capa-rules/nursery/execute-sqlite-statement-in-dotnet.yml,sha256=NpDXK-k7yOb2ngv6JGZpu6xORP7h5hRVaTjtXiorc6s,719
drakrun/data/capa-rules/nursery/execute-syscall.yml,sha256=4x8fqeu6D_Amv0buTAr0oc6CgufKmUjnWH7ptflJMpY,938
drakrun/data/capa-rules/nursery/execute-via-asynchronous-task-in-dotnet.yml,sha256=eVsSK0euNvasA5FFxshb4Dg74_vuXtxLej4robdRP3A,280
drakrun/data/capa-rules/nursery/execute-via-timer-in-dotnet.yml,sha256=LROlAyVOitSBHTTPy77bCBNJ-TaV7L8rxMVw1Lk0uAc,264
drakrun/data/capa-rules/nursery/extract-zip-archive-in-dotnet.yml,sha256=gjGl6I1UcFxNbxiod6h-0z3dXGrWpq0KquT5Fr1HGA4,706
drakrun/data/capa-rules/nursery/find-data-using-regex-in-dotnet.yml,sha256=A4yzFR-Sjj7qAgWxcl1gixqotbpzKozzCBvIlime36Y,635
drakrun/data/capa-rules/nursery/find-process-by-name.yml,sha256=YYYIu-rpeO9Xl3wJZOPHfIyoJTosODePFP4iJpgllzM,338
drakrun/data/capa-rules/nursery/generate-method-via-reflection-in-dotnet.yml,sha256=jK3bILRUd9RV8wod1eqHuioyizVvyKqmKeVGtZNrS2M,686
drakrun/data/capa-rules/nursery/generate-random-bytes-in-dotnet.yml,sha256=EniOVjPw0-a7qzZi9lbC27dR0HvhRsyW0fNx0avXB-g,598
drakrun/data/capa-rules/nursery/generate-random-filename-in-dotnet.yml,sha256=jMSMftBhXoiSTUbM6ccmxhVFIXtQmAkDZOSnB9xLXi8,320
drakrun/data/capa-rules/nursery/generate-random-numbers-in-dotnet.yml,sha256=kSJr6wDcPT_PModiDP4wuY6V7Jb8H0_RXD3ApXN0ba0,640
drakrun/data/capa-rules/nursery/generate-random-numbers-using-the-delphi-lcg.yml,sha256=cNHGWeE-w7Wx_p2nYKmMRMqzb6--wIkvyAQVLyr5erI,640
drakrun/data/capa-rules/nursery/get-client-handle-via-schannel.yml,sha256=akrZw7LWpV5VYBsbdPhB2b_XG3Q9jY7tgBwRVizJffA,788
drakrun/data/capa-rules/nursery/get-current-pid-on-linux.yml,sha256=bQN0RZq1L0nBMvEAgrkOKc1EjlKfOBhXgPdasE38FSY,331
drakrun/data/capa-rules/nursery/get-current-process-command-line.yml,sha256=bzkNanD2SyW7cL_BhahLiw-agYA-1_iRST7bRV1bE7c,320
drakrun/data/capa-rules/nursery/get-current-process-file-path.yml,sha256=ZwCugLbUUMjqMmxMKuasODwR0vUz4CloqGaZGrPIeYY,300
drakrun/data/capa-rules/nursery/get-current-process-filesystem-mounts-on-linux.yml,sha256=Sn-fxDO8aaGV2tPqguA309yTZi0V1tRmmdGU7KYM6ok,358
drakrun/data/capa-rules/nursery/get-current-process-memory-mapping-on-linux.yml,sha256=0YGAg9K6PnGNcTckunJeuXbwG_S8fWTzGpRPn_r4KhQ,353
drakrun/data/capa-rules/nursery/get-disk-information-via-ioctl.yml,sha256=JmiJn18BIxIYszyHEQQzJ5ZENgVfDmMxxexBdbrYEsA,789
drakrun/data/capa-rules/nursery/get-file-system-information-on-linux.yml,sha256=OOmy-YWzUAdjFzyz85s4QEfowA8Oo3vE9-Ryu9oTh4Y,311
drakrun/data/capa-rules/nursery/get-http-request-uri.yml,sha256=5o3NYgr-dFvRaiB2XJOavbxp8U4Ojs-5vYkFsBeh7PY,344
drakrun/data/capa-rules/nursery/get-inbound-credentials-handle-via-credssp.yml,sha256=KnDSPeHIK0jnkmD2ttOKXyi30Y24p5kSTkFRA0_dpeE,613
drakrun/data/capa-rules/nursery/get-mac-address-in-dotnet.yml,sha256=fo3qqFIis14JWu-WoCjP3jnDFHHb3WFsrqg5h5M63Tw,424
drakrun/data/capa-rules/nursery/get-mac-address-on-linux.yml,sha256=et_-NOE_Oq2JouLsjnlsQ22VJYZefWqX0y9RhpQhWHc,459
drakrun/data/capa-rules/nursery/get-networking-parameters.yml,sha256=rvKd91EMl9fYocNoHAX4DZcKG-kZpcBvlu2VJXDeHbU,334
drakrun/data/capa-rules/nursery/get-ntoskrnl-base-address.yml,sha256=iHBh6KyxQTnFSioTTYj7bdYit_5W3HicoRXIkww6RmQ,907
drakrun/data/capa-rules/nursery/get-os-information-via-kuser_shared_data.yml,sha256=eQhMZAPvIZrgCrBsqJP4R0taOLlsD6p-7zSPeZ7Mw_E,588
drakrun/data/capa-rules/nursery/get-os-version-in-dotnet-on-android.yml,sha256=DiCuN-r1fbvtyyfuyA0ykwUbXPqoff8ffUfjTj01biI,292
drakrun/data/capa-rules/nursery/get-os-version-in-dotnet.yml,sha256=VpQKhSXYSE7Hdt6UnJXpa4H8WiLNZjMQKShQasuPXME,665
drakrun/data/capa-rules/nursery/get-password-database-entry-on-linux.yml,sha256=AN88ekCQdSdLow1RQzvKs2VyJsByNbCAYk33gGG8bfY,398
drakrun/data/capa-rules/nursery/get-process-image-filename.yml,sha256=VEpuPeHtUnJCwdC29euF-rCpfHdY5GMGvhRfWhowNQc,625
drakrun/data/capa-rules/nursery/get-proxy.yml,sha256=L6fN9Q-UGYYv9247mUf3OWX2aJZ4niRvOwYfWH_qYFM,358
drakrun/data/capa-rules/nursery/get-remote-cert-context-via-schannel.yml,sha256=vPS1oYF3EAgGysIWqzlvpe7mNYSULxLIpRzXPJU97Vg,526
drakrun/data/capa-rules/nursery/get-routing-table.yml,sha256=J03HqzZ1TZ-lZ5kVpsllj9yInDn5XaBpz3R8avWCmG0,382
drakrun/data/capa-rules/nursery/get-session-information.yml,sha256=2XLIhg5yZEIDeoo90A1WRQGONa1A4Be3yXHw7w4LbGU,390
drakrun/data/capa-rules/nursery/get-socket-information.yml,sha256=mrfHHjIc9VZ_XaYMiHURFSCiGZR595r1B_f9Fyd80cQ,357
drakrun/data/capa-rules/nursery/get-storage-device-properties.yml,sha256=KiT8_8SM9GFxsf2B4B-OemLp1jwFT6d_Ac5ax-ouevw,618
drakrun/data/capa-rules/nursery/get-system-information-on-linux.yml,sha256=1_8XGvbYhiTPEP9TtfHDOeMKOEQHn4aQyHcRSm3g49s,463
drakrun/data/capa-rules/nursery/get-system-property-on-android.yml,sha256=eTWqiDU5HhHiIkLbs-48vvqVLOpqtRaG7nohonzTA5A,272
drakrun/data/capa-rules/nursery/get-system-web-proxy.yml,sha256=B9trJS4xFKerumJvedSEuKPPG2cLbcb033zY3TjHARE,447
drakrun/data/capa-rules/nursery/get-thread-local-storage-value.yml,sha256=ELIxgKnj1mSpFi4Ax3T66ln10aLClVhGbyMdRy5jYZA,257
drakrun/data/capa-rules/nursery/get-token-privileges.yml,sha256=JPTNPy9dFsi0kX78ieq9DvIIvdoMiCSQrFuoCseQ-Gc,590
drakrun/data/capa-rules/nursery/get-volume-information-via-ioctl.yml,sha256=wEZel8kVm-bQp-qyGaLTaLWatKtX6q8uPsXhoQzQl-s,620
drakrun/data/capa-rules/nursery/hash-data-using-aphash.yml,sha256=OCX_botuJiWF8XEUF45RRg2R7k70UQqEK6rA7IRWlUw,967
drakrun/data/capa-rules/nursery/hash-data-using-crc32b.yml,sha256=-LeMmObaR3FTUgufNqcx6uof1S6cU-45IKw6BgnugTU,319
drakrun/data/capa-rules/nursery/hash-data-using-jshash.yml,sha256=xqCfH8chlMO_CEXwIaUVA1vhrCLgZ1wJ9FmfYtXqz7I,668
drakrun/data/capa-rules/nursery/hash-data-using-md4.yml,sha256=vZWmy-AfrMIE7xzA5MbTYU1FJp9EDrzERZC0bWTNmig,297
drakrun/data/capa-rules/nursery/hash-data-using-murmur2.yml,sha256=x7sicGGmU9MBA1zlHJHomtulSsUAWCRtU_4uBR99uug,510
drakrun/data/capa-rules/nursery/hash-data-using-ripemd128.yml,sha256=dqZyy4ow_rdEjhYnFyhHpoDPRiXt3Wl2tQALnZASutc,1447
drakrun/data/capa-rules/nursery/hash-data-using-ripemd256.yml,sha256=ToiTeGknul9mY77mY1ggXfZf7jZYKFXrWrl8p_IA86E,1272
drakrun/data/capa-rules/nursery/hash-data-using-ripemd320.yml,sha256=5AxtgQ0GfrzCLR4LFyhqwjnjX9MDsL6VgcXHGYJVks4,1226
drakrun/data/capa-rules/nursery/hash-data-using-rshash.yml,sha256=4-ywQlHNWAapREZYopJyMdScrT3gRChpghyag3N9r5g,452
drakrun/data/capa-rules/nursery/hash-data-using-sha1-via-wincrypt.yml,sha256=tRupkWrkB_ISNYUFHgTzcN-hMaHwO-uwEG5iuKybAMM,370
drakrun/data/capa-rules/nursery/hash-data-using-sha1-via-x86-extensions.yml,sha256=XDevk5hQPineBogDmHbxnQ1DOt_CmN5yHiSKURD_vQk,605
drakrun/data/capa-rules/nursery/hash-data-using-sha256-via-x86-extensions.yml,sha256=sZ0-BClRMD4eM7O8H2jVXdFFYzFf8KCfXIbiDqalP2c,540
drakrun/data/capa-rules/nursery/hash-data-using-sha512managed-in-dotnet.yml,sha256=6qUtG1ATN4P8wvdTKM-p5UptIRGq30IrZlup7v2mbTk,480
drakrun/data/capa-rules/nursery/hash-data-using-whirlpool.yml,sha256=k7M2v_55HxtbVAj64T80SBaVijvtr7Uu9hsGOc69PzQ,1080
drakrun/data/capa-rules/nursery/hash-data-via-bcrypt.yml,sha256=BlkOnPt7wkxv-cSgmynSy_qs4a1JPTeXN-abElET3vI,672
drakrun/data/capa-rules/nursery/hook-routines-via-dlsym-rtld_next.yml,sha256=sXIC5T8ILYc9HX7-B5VZ2F9uzt4DsYaf_rMck9RAFNI,631
drakrun/data/capa-rules/nursery/hook-routines-via-lsplant.yml,sha256=gyjmrcQz9qLDyJq4V02UG92WUWTaq_2wby9sfioJiE0,463
drakrun/data/capa-rules/nursery/hook-routines-via-microsoft-detours.yml,sha256=INyV6Q85m4QId9ze9JUc3xV3Ct-uz-bc9_k-3MPSVb4,412
drakrun/data/capa-rules/nursery/hooked-by-api-override.yml,sha256=1CtTgrYgtoNooSCNK25XEWwWwMf0p5gbwmvuTh-y4ng,416
drakrun/data/capa-rules/nursery/impersonate-user.yml,sha256=ubl4yumSQrSQv82xkBko3rpYYitDB2dhJm6v-aR9q74,496
drakrun/data/capa-rules/nursery/implement-com-dll.yml,sha256=gowuvwqeMSDiY_5cEZtUttem90Yr33PkswpmZErpBy0,399
drakrun/data/capa-rules/nursery/implement-ui-automation-client-in-dotnet.yml,sha256=HQM2Y8iJlKZSaIe1opla9XzM72GY3i1goxIianOULw8,430
drakrun/data/capa-rules/nursery/initialize-hashing-via-wincrypt.yml,sha256=0Mmat7y-zL5K3lkLpVJp8VNV74cP0a6iNx9e9N6lbp4,324
drakrun/data/capa-rules/nursery/inspect-load-icon-resource.yml,sha256=xsWjyFTlNYhtIqct0OLFBwLDKaxByzpYw7yp1D1_1_w,1021
drakrun/data/capa-rules/nursery/interact-with-iptables.yml,sha256=rwyhc4zOxK6ZZWTrhl3i-K7eNZXGcv6-Y4G_2xSsDr4,456
drakrun/data/capa-rules/nursery/interact-with-shortcut-via-iwshshortcut-in-dotnet.yml,sha256=2fmd-c6ZtvBgkU_WrX9jR_ZMDnPps83itd6H9WeM9tU,414
drakrun/data/capa-rules/nursery/interact-with-windows-scripting-host-in-dotnet.yml,sha256=ktHDj3EEUYjsZus-4ASZoKbs6tm9rH1i-oDFvvztWKk,397
drakrun/data/capa-rules/nursery/invoke-dotnet-assembly-method.yml,sha256=_K1MqK31WZD601TyuEKS-r5uFk4jhsEaQN8AMO87Bzk,996
drakrun/data/capa-rules/nursery/link-function-at-runtime-on-linux.yml,sha256=x6T1cvixWapYIgcGLJLgGrj-QEyIcMwEgjqDu2v63oY,437
drakrun/data/capa-rules/nursery/linked-against-cpp-http-library.yml,sha256=6dxrNd0ImZU7qEBIgcyfIy954M1FZRqFUEay8RzaoFw,340
drakrun/data/capa-rules/nursery/linked-against-cpp-json-library.yml,sha256=S-zH5no8CoLqjX2v9ZMb4jelKQIDqkyq-mcm5aSzDik,438
drakrun/data/capa-rules/nursery/linked-against-cpp-regex-library.yml,sha256=u_i5jiTWAIIQ-0s7E6BYg7qYPeV3l1ehvODCfS6wvek,493
drakrun/data/capa-rules/nursery/linked-against-go-process-enumeration-library.yml,sha256=J5QBZKqNllWKYhHUSJxg3IYhQJkha0DDjHy-OtshYTE,620
drakrun/data/capa-rules/nursery/linked-against-go-registry-library.yml,sha256=5kpJeMcOzeOBOV25vnqmZdrebZ7YFA60ijTpQ_e9I4o,523
drakrun/data/capa-rules/nursery/linked-against-go-static-asset-library.yml,sha256=AJ_DVFyuaOC9JGuykYO7oi4m6KvKYk4sDRORQSm2Sp4,1729
drakrun/data/capa-rules/nursery/linked-against-go-wmi-library.yml,sha256=IFrlO3XRIPMnmCKXb22RpnPt08sOTH2BVAfSMVheRwA,578
drakrun/data/capa-rules/nursery/linked-against-hp-socket.yml,sha256=SDbqcKnsjc7JmqooyaFemUINFN1ijMTpsPvQd7Iug9U,1184
drakrun/data/capa-rules/nursery/linked-against-libsodium.yml,sha256=ZRG-93d43ttkUsiPB_htEGezUo6ifeoP4tbkaf9XrfQ,480
drakrun/data/capa-rules/nursery/linked-against-xzip.yml,sha256=0Zjef4RI-F88sz-IAJ1e5Zu3Xm_QRjU-UOYDvoAJp4E,1217
drakrun/data/capa-rules/nursery/list-containers.yml,sha256=mJUTroFUpNkS41snhjAMrUHdcUR31E1he3U-r7GRbmk,605
drakrun/data/capa-rules/nursery/list-domain-servers.yml,sha256=PvU4zlACq7xMRxNeUYEjLQ6r89hV91TLxiVNw2CbpFA,406
drakrun/data/capa-rules/nursery/list-drag-and-drop-files.yml,sha256=qpI020rIEHnhCQD6qbR9yPhsfp6wUt3DS4fHCuP8Asg,437
drakrun/data/capa-rules/nursery/list-groups-for-user-account.yml,sha256=Dt2csh_wGRIfxQ1-_54q9hHPnmjdGxhtctDHYW0NwQM,483
drakrun/data/capa-rules/nursery/list-tcp-connections-and-listeners.yml,sha256=eSKuPWdOx_IYh814gNmsLI01HRyKUfZNPRlbBsrk71w,309
drakrun/data/capa-rules/nursery/list-udp-connections-and-listeners.yml,sha256=gXxRfbnmFngmR8kVmFTkLZp2dh3SQAFlC0U31A4jrCc,309
drakrun/data/capa-rules/nursery/list-user-account-groups.yml,sha256=13uzGG4CcFlBx__5UPGREaQ6BfkpojF1SszOsurNPjA,478
drakrun/data/capa-rules/nursery/list-user-accounts-for-group.yml,sha256=8j4EV6disjzBLtJ04rwFrgncSR0hD_63S0g-MsqpzIo,420
drakrun/data/capa-rules/nursery/list-user-accounts.yml,sha256=hDRrgwFeeyVhPffO-_vAEZhLCV6vwLPgOHps9oBi2kc,349
drakrun/data/capa-rules/nursery/listen-for-remote-procedure-calls.yml,sha256=p-ATZ336leuZSknK0VlNDredLutVPLa6MNVuQSNSras,308
drakrun/data/capa-rules/nursery/load-dotnet-assembly.yml,sha256=28XI0eOZwiajqTsuFPm1ZIgWv9w3SMwhcsAr-UvoDtM,697
drakrun/data/capa-rules/nursery/load-packed-dex-via-jiagu-on-android.yml,sha256=Q2Bc9fIzqDEnNcTgdJRlDcVSdsPZrm_T6y-fScsCzHc,515
drakrun/data/capa-rules/nursery/load-xml-in-dotnet.yml,sha256=qzFPnETyxrhUxTVCSSoR0KHT1TyiGsMdUcbMHzlsn7M,292
drakrun/data/capa-rules/nursery/log-keystrokes-via-input-method-manager.yml,sha256=AL8-2XNDg_Ov1WUGYVW8PwdGi_np5F2nRF0H0Prw0Dc,414
drakrun/data/capa-rules/nursery/log-keystrokes-via-raw-input-data.yml,sha256=OZAaOzAqElwcvch658JiwkF0wx-I2a_PzrSDdEb_kVE,1019
drakrun/data/capa-rules/nursery/make-an-http-request-with-a-cookie.yml,sha256=re2-iRPYz6vK7KGbCl0xstsghPRPo-jbQ23eywsNep4,295
drakrun/data/capa-rules/nursery/manipulate-console-window.yml,sha256=UJQ5m5F70AcL82yq6x2SefHMQdZeGPb8TlWEGi6QW-M,405
drakrun/data/capa-rules/nursery/manipulate-network-credentials-in-dotnet.yml,sha256=qECqhV15xodZ07-cpbQvxuVQ7SbnatTS6mgCROU1laI,283
drakrun/data/capa-rules/nursery/manipulate-unmanaged-memory-in-dotnet.yml,sha256=aeq0zLUkXohwy7uilM1ly6E_gp9GLcjSgE4X4WSrxkc,314
drakrun/data/capa-rules/nursery/manipulate-user-privileges.yml,sha256=Fm9vmd5OGXO9lJ77f5dfwT5Mcu7-h1Q87zUSjIIVt8E,258
drakrun/data/capa-rules/nursery/map-or-unmap-memory-on-linux.yml,sha256=DDadFavAkXouuGZfb3xBY3wt2eqfKEY7tAXJFiude7s,320
drakrun/data/capa-rules/nursery/mark-thread-detached-on-linux.yml,sha256=OaRMZ1y8pzNlUqUIbpe2TWDQ2sPnnvHwvvAy0sueE24,270
drakrun/data/capa-rules/nursery/migrate-process-to-active-window-station.yml,sha256=1OA6MC7b_unY4l7OypHrKdqD6knlTDPoA6WKLDz5uo0,1007
drakrun/data/capa-rules/nursery/mixed-mode.yml,sha256=RmXZjxhyyTlPImK_uN6O0qdVue9LhcNxKskXSOn4uDs,346
drakrun/data/capa-rules/nursery/modify-api-blacklist-or-denylist-via-jni-on-android.yml,sha256=c916h0eaym7RG6rfe5-J-o4cYeW9BfrSIx3jrbEWcZ8,448
drakrun/data/capa-rules/nursery/monitor-clipboard-content.yml,sha256=HnlXS4eR2mDz6Kw5tLX9rnhehjNQddbaSBpKfC62XsA,369
drakrun/data/capa-rules/nursery/monitor-local-ipv4-address-changes.yml,sha256=heNHHZaaJcM-i8VjYyayQmGPYHBWTGqg8L4HXapbAWQ,399
drakrun/data/capa-rules/nursery/move-directory.yml,sha256=eVc8-HDvkmwT_uZEXFVqGoBpmrX2Hif7Q1mwWI3DM9c,299
drakrun/data/capa-rules/nursery/obfuscated-with-koivm.yml,sha256=LS9eHbv5zS9RxJ45Bh_g6kv7M43tCDUpl7igX_iUqtM,477
drakrun/data/capa-rules/nursery/packaged-as-a-createinstall-installer.yml,sha256=cZHPdkqNEMQTpKv4Y0GbIYwDp2nNfv-wOKg8a3PHyW0,416
drakrun/data/capa-rules/nursery/packaged-as-a-nsis-installer.yml,sha256=8r3hWdK08DFiY7vujuK5ZOT0he4BqqFNguJ9e0O5U44,316
drakrun/data/capa-rules/nursery/packaged-as-a-pintool.yml,sha256=RgGCiicwtRCNYy7TfmECdkD1gfISLl_vesNozPZEMAw,652
drakrun/data/capa-rules/nursery/packaged-as-a-winzip-self-extracting-archive.yml,sha256=MxVt845bcZh2Bqng3eyDSZYpH1OyOY_uyqz0HiLg7rI,358
drakrun/data/capa-rules/nursery/packaged-as-a-wise-installer.yml,sha256=aYalUbVSEfxfrpaX-272tYfHKEyzqmwDpm-OQ9gai-I,294
drakrun/data/capa-rules/nursery/packaged-as-an-installshield-installer.yml,sha256=-sRbL--AuKMkJ5UQHt8NsOsQ64b3GLvLGlGtabRw-SI,467
drakrun/data/capa-rules/nursery/packed-with-ccg.yml,sha256=yRuZuYascAdnpzuyb9Rp2jo5SGEGa5wEVxU11CzuQMs,485
drakrun/data/capa-rules/nursery/packed-with-crunch.yml,sha256=q0bhhfx8m4IwU4oWwgtJGkuOtRAZvsH1vUJR7LpNf1Y,494
drakrun/data/capa-rules/nursery/packed-with-dragon-armor.yml,sha256=wyYFiZSd2r_gLR4g3Uo8ot4ssZk59KyhYkQh_7RXJHI,505
drakrun/data/capa-rules/nursery/packed-with-enigma.yml,sha256=MRaulm0Y6vDWLtTE2qrNAl_6k9hidpivr5KNIH4DdTo,521
drakrun/data/capa-rules/nursery/packed-with-epack.yml,sha256=yV0ZGnIOaSKW8fmsrzRcHb-kslw4VFdicZQqvtPrMqQ,493
drakrun/data/capa-rules/nursery/packed-with-maskpe.yml,sha256=FgaImoCrrEL41yqLS5_pBn8xQuzJScrccVhhHb3SDsQ,494
drakrun/data/capa-rules/nursery/packed-with-mew.yml,sha256=6GlUqm5qXh8qrSRpsO5KvS0GypkNB6KeCYlePxaYtdI,484
drakrun/data/capa-rules/nursery/packed-with-mpress.yml,sha256=UsuaRxFOiCqbgSKTj58jIqgJg8DdHpAlP3lXLR_Xn6w,521
drakrun/data/capa-rules/nursery/packed-with-neolite.yml,sha256=djQzXWbo9SLPy9hI_AHy5ICuGTx9Q4wHta2EppR5MrY,522
drakrun/data/capa-rules/nursery/packed-with-pepack.yml,sha256=9do4F9Wi8ljiZj_kULlbEDP3xSAZ0oJICSFPZhaAuUM,495
drakrun/data/capa-rules/nursery/packed-with-perplex.yml,sha256=xN0DKgmDZkJYgnGt9LvDjvhy8jxosWTpXhlZhvTH4SQ,497
drakrun/data/capa-rules/nursery/packed-with-procrypt.yml,sha256=ivpemWRUMKfceJib1rHzq2MwZvlz3HzBM8mlCWwkOoI,499
drakrun/data/capa-rules/nursery/packed-with-rpcrypt.yml,sha256=DCqh4gG20BpK9WCsTW7khsaqrVbA0bV29pV5wJrOuAA,522
drakrun/data/capa-rules/nursery/packed-with-seausfx.yml,sha256=V1R1congYSn7D_kT5FrWi78oh6ldHYCwPmjH-7YC2TM,494
drakrun/data/capa-rules/nursery/packed-with-shrinker.yml,sha256=VTgtVAlPWD8yYrlHyfW_PcJpDCq1FL-Blkj2gdSjVcE,551
drakrun/data/capa-rules/nursery/packed-with-simple-pack.yml,sha256=FT42xRU29Er2grvlc3NIhILZeDTFAxfQivc63CC9YWE,503
drakrun/data/capa-rules/nursery/packed-with-starforce.yml,sha256=mS9o5_5xCOc8oIKY60n-ZSWafGxb_Wfebq4qfdT48F8,501
drakrun/data/capa-rules/nursery/packed-with-svkp.yml,sha256=zpvWLQY8Sk-qAVcjUeDHCCxIebpLl6UCQvyuXK7mQcc,488
drakrun/data/capa-rules/nursery/packed-with-tsuloader.yml,sha256=Iu6PLrvPIoIhh01cUvjwwVGO-3tGeY0qoLxAeJNviGk,527
drakrun/data/capa-rules/nursery/packed-with-vprotect.yml,sha256=u4fC4tlIGEIr-7CfU9S6CJaPjCeTrV6myyoFMbubnhw,499
drakrun/data/capa-rules/nursery/packed-with-wwpack.yml,sha256=OrqpDIddY8IZ2rxmvTc5dfWgcRBs30Y44o0qmNIPDWo,518
drakrun/data/capa-rules/nursery/parse-url.yml,sha256=ETQ_k7gYU3gfVBknUmFyN7hvfA-0RKHoOor5eYqnkK8,280
drakrun/data/capa-rules/nursery/persist-via-gnome-autostart-on-linux.yml,sha256=MYvkiXXfVtFb3P55P708MnoRDLFHq6alTdtpE33JMlk,338
drakrun/data/capa-rules/nursery/power-down-monitor.yml,sha256=lRYJSaVaIPmCnj2WT8IOtSdAe8kjkpQ7RVfc6zcztZY,384
drakrun/data/capa-rules/nursery/prompt-user-for-credentials.yml,sha256=0aHyRX2shKMBI7ivC-s6ojfAh3suY6KLcIGkKc8A3PY,648
drakrun/data/capa-rules/nursery/query-or-enumerate-registry-key-via-stdregprov.yml,sha256=wz1Yrxj6xa-QpXYWQRC1IhkdcG3T8poWMH_y_6BCIHg,459
drakrun/data/capa-rules/nursery/query-or-enumerate-registry-value-via-stdregprov.yml,sha256=pGatArmVVsaIwKBiqMn8ZH1whKsTkkiG8skEy3yyOhA,699
drakrun/data/capa-rules/nursery/query-remote-server-for-available-data.yml,sha256=85GtoQ4IrIhVCw0e_9nFC_toF9ub7njknDt3TT9e8oM,314
drakrun/data/capa-rules/nursery/read-and-send-data-from-client-to-server.yml,sha256=5bI91oM_0W4-XsZoAMSf6l-Shy7Sid4TbKV50VF740A,318
drakrun/data/capa-rules/nursery/read-process-memory.yml,sha256=zSRyNTXH5-lcgrtgVyR7flxL20M-Xdh6zo1KXAvDCRs,511
drakrun/data/capa-rules/nursery/read-raw-disk-data.yml,sha256=VODtpQy30wwh3J5bry5FJ6ZFHpvGIDQ8woGn9qhu9-c,281
drakrun/data/capa-rules/nursery/rebuilt-by-imprec.yml,sha256=JPw7sPM2__NF6R8JsS4-pUI_HCL2TnmgLQmmGiTbaDw,339
drakrun/data/capa-rules/nursery/receive-and-write-data-from-server-to-client.yml,sha256=XRgqjRoaTHgncKpbwyhVh5_RKbWVnc-ujJz-GZ13kRo,326
drakrun/data/capa-rules/nursery/reference-114dns-dns-server.yml,sha256=7Y8cPREK25DOFGgrQsNeXlLg2nXciWUKgh1Gn8pM0To,589
drakrun/data/capa-rules/nursery/reference-aes-constants.yml,sha256=6n6iX-cTONdxlrRb1jLKisg1mmKvVLWxV3YyjLWbeEQ,480
drakrun/data/capa-rules/nursery/reference-alidns-dns-server.yml,sha256=MsN6HDXJmIJlLgco7ybofe02UTj2LgFfRIf8BvqG2O4,447
drakrun/data/capa-rules/nursery/reference-base58-string.yml,sha256=rkRNYNF-mhH_GPlKAzN3xXeYvbZ6teuAs7JEMXS2Ddg,710
drakrun/data/capa-rules/nursery/reference-cloudflare-dns-server.yml,sha256=g2FWyW_upsmOxiUjRq_YnXVWraLIBl9Q9n323qHOvNw,344
drakrun/data/capa-rules/nursery/reference-comodo-secure-dns-server.yml,sha256=rYJpykagSlomaC0P_wrSQPpOoSmvjCdJDQnrNSz76H8,354
drakrun/data/capa-rules/nursery/reference-cryptocurrency-strings.yml,sha256=j0gi24VSRJM-cDdbWy6u4_gzQ9OKKmkaOBv_H_eI2s8,1215
drakrun/data/capa-rules/nursery/reference-google-public-dns-server.yml,sha256=pO_fXv1vFyQFQQDlIPwyhWJyqtan0vyo1Rn-AUp9x6c,491
drakrun/data/capa-rules/nursery/reference-hurricane-electric-dns-server.yml,sha256=PBAiVe6HFOEx9fJBwsbX8BNysfieMrrJgEdKAwKRRzo,633
drakrun/data/capa-rules/nursery/reference-kornet-dns-server.yml,sha256=nNt7ufU2LbnbBCBYh6TMwjzAFUlJxYROMVApPv_vf_I,413
drakrun/data/capa-rules/nursery/reference-l3-dns-server.yml,sha256=hbUtuVfGb29WSFpjhHMNFhDFA-h2QB0Mu3LgTFAJ_Zo,444
drakrun/data/capa-rules/nursery/reference-opendns-dns-server.yml,sha256=GBETMAnQQztuVFI_TB6KNZGdI7T1zrm1zNDc6rrmZQA,355
drakrun/data/capa-rules/nursery/reference-processor-manufacturer-constants.yml,sha256=vH5NSiDmmnxgCaqpsvZIx5xwkRNbBSqHkUVZRHEGeZ0,927
drakrun/data/capa-rules/nursery/reference-quad9-dns-server.yml,sha256=vgxuMnNOnWmlr8VS1L5P1dBKf6EEOBqk1xI1Df45Mew,347
drakrun/data/capa-rules/nursery/reference-screen-saver-executable.yml,sha256=hRSlqxgpKPM02kcN_WW85wGUEXMVV8hU9mhgYAww9O4,577
drakrun/data/capa-rules/nursery/reference-startup-folder.yml,sha256=JgBtxNjC5yKIpIEmbe_hmetMH8jR4I9ps3aaWbGDouk,379
drakrun/data/capa-rules/nursery/reference-the-vmware-io-port.yml,sha256=vsEp_4dPmFL8Q_SYgvAakwW2woBXTa_NjIiCejfTp7c,585
drakrun/data/capa-rules/nursery/reference-verisign-dns-server.yml,sha256=wFUwSrdauGXlJo8Euk-xD9tdmWBdD3U5U9kJ2f-cS-k,346
drakrun/data/capa-rules/nursery/register-http-server-url.yml,sha256=7zh2spY9cD7boHdaADl3yAQ-6Mdp-3vnJ63FbarGu6s,338
drakrun/data/capa-rules/nursery/register-raw-input-devices.yml,sha256=eQkAKacWXCFfWcuhkd4PabHiKXDbgSXOgK4-_EqTzVE,310
drakrun/data/capa-rules/nursery/resize-volume-shadow-copy-storage.yml,sha256=6om1xL6s2fx2QXcBhF10W1YQOevbxPR3Rmgk164UBXA,389
drakrun/data/capa-rules/nursery/resolve-function-by-djb2-hash.yml,sha256=h-btOvonwaU_L2_0lwBwS9Lt0gxCEGiHCFucje6iHG4,901
drakrun/data/capa-rules/nursery/resolve-function-by-fnv-1a-hash.yml,sha256=UhmOfCSikIWALCwsWRD2Vo91ADTYkxp51o3bKiKZwbA,918
drakrun/data/capa-rules/nursery/resolve-function-by-hash.yml,sha256=IgdqAhzj4bE_shzvnlwwxBmVGgBvAqHN-ROSOqOytAM,891
drakrun/data/capa-rules/nursery/run-in-container.yml,sha256=30gtf1WIVQ0QbP3V7L5VZ5jvrPR-TpzEP2A55BTFYyw,874
drakrun/data/capa-rules/nursery/save-image-in-dotnet.yml,sha256=6ddEj7rztn5yTY8c49xuG-Y0gCexD0Q6js5rzxWCMOs,341
drakrun/data/capa-rules/nursery/schedule-task-via-itaskservice.yml,sha256=JfWb1DkG60gGd-wh1uExB8Z_k-B6-OB7fHVXoNqvp40,635
drakrun/data/capa-rules/nursery/search-for-credit-card-data.yml,sha256=pi4250bw08gs3L_6kUfxTdcTd_ZfMJXKKeF3rIhOtcs,661
drakrun/data/capa-rules/nursery/send-data-to-internet.yml,sha256=nmccbLkGV6IXn9jLQRGhGXp5LJ8DbLTdx-A971yS2a0,1031
drakrun/data/capa-rules/nursery/send-email-in-dotnet.yml,sha256=B16cP--V8b6PtM5OYajJ9mh66YsJGfmEcECTDlKIoUw,253
drakrun/data/capa-rules/nursery/send-http-request-with-host-header.yml,sha256=rOXBWsa_pLGNIJ6ERELCsPSGVYGG-IIJmvvBXjxF2Gs,286
drakrun/data/capa-rules/nursery/send-keystrokes.yml,sha256=qOvzcxqJnvQD01FoG0-LKhiV0I_nk4cconJDnflfsSg,322
drakrun/data/capa-rules/nursery/send-request-in-dotnet.yml,sha256=bWqIamI1mabVHHxVvJtgqtTNs8Y0ms7qKoTC1KKdkkI,729
drakrun/data/capa-rules/nursery/send-sms-on-android.yml,sha256=YDQxN4lszPayEjK4dgQBS7R76GIEQF8UOO3CTd2ZxzI,722
drakrun/data/capa-rules/nursery/serialize-json-in-dotnet.yml,sha256=slos6RV4QVve49TG-s7B8gsL8iEfoG9xVAKWcPRiizM,666
drakrun/data/capa-rules/nursery/set-current-directory.yml,sha256=CREVM348b5W6DiM-w66vOIqBJEQ4VwdFX63jbzrjxFI,352
drakrun/data/capa-rules/nursery/set-global-application-hook.yml,sha256=zytpv3_dqnchkcUyKuXG0eiCvb62yODg5ebBcfNR2Xk,325
drakrun/data/capa-rules/nursery/set-http-cookie.yml,sha256=6_I6sAZjZH22vVeFIXHuz2sJjpvjUctF8mMNDYJLJss,561
drakrun/data/capa-rules/nursery/set-http-user-agent-in-dotnet.yml,sha256=OgwT0rskTwHNLZtsB18TSnZFDL6ed2af8qQ4MIt6beY,311
drakrun/data/capa-rules/nursery/set-registry-value-via-stdregprov.yml,sha256=ea-9Awa63nKsHqgpJbCqrEoSe7jDWL3AboNjNCoSQUU,653
drakrun/data/capa-rules/nursery/set-thread-name-on-linux.yml,sha256=sFcIY8kTlss-zXYFMMihK6ZuzcIogG7up1y1dP2ZqEI,397
drakrun/data/capa-rules/nursery/set-web-proxy-in-dotnet.yml,sha256=3y-qjzMrDTwRR_-FUoLNKkZ-x7bXT1vsRu0ry-luGW4,357
drakrun/data/capa-rules/nursery/terminate-process-by-name-in-dotnet.yml,sha256=3jQeXYhQsaulSrfb1OQ-wyz0RuiaurazHa7Xn0fgkT0,347
drakrun/data/capa-rules/nursery/terminate-process-by-name.yml,sha256=NNzBCVpYADIdYW1ZOuPCjYD5DMVttni-bfNy4zyN1eU,441
drakrun/data/capa-rules/nursery/truncate-file-on-linux.yml,sha256=b0oXoWM8tsz902DWHtguPUfIvss0FE6LfzEVX6xrET4,300
drakrun/data/capa-rules/nursery/unmanaged-call-via-dynamic-pinvoke-in-dotnet.yml,sha256=WjfGfqifYt8OfzRbyP_AkL4D8WBuznl6na_B054HMLk,592
drakrun/data/capa-rules/nursery/unmanaged-call.yml,sha256=Esg1T8DQhhcQ_jEE4PGJWOqwBnktTXaD6GUHdynfc5A,456
drakrun/data/capa-rules/nursery/unmount-volume-via-ioctl.yml,sha256=FiC1sKO4zGCEXtx_Tv7V5lMLedAfmf0qmjppZi73lFc,532
drakrun/data/capa-rules/nursery/upload-file-to-onedrive.yml,sha256=BmesbevBNuHX-bXcNfGZy9Lcv0KPcwneNUhbkMm-F9g,949
drakrun/data/capa-rules/nursery/use-dotnet-library-simplejson.yml,sha256=mMFPFqVypzfFJZeSAJ9oj1b0ucZbTAyu9X_x30tk3t8,340
drakrun/data/capa-rules/nursery/use-dotnet-library-websocket-sharp.yml,sha256=S2jZ1W4ZtFvPbVNarTTg2q4v3OFJotukulUc_lkhz5E,350
drakrun/data/capa-rules/persistence/act-as-dhcp-server-callout-dll.yml,sha256=u8J9D7MTJFs1cICGFb-F5K--jH-yruBG5n2h4HWbdCc,526
drakrun/data/capa-rules/persistence/act-as-dns-server-plugin-dll.yml,sha256=oK2kMejK1v-v2O51CwbDb0pLT56LbUPAQ9mkIsLysnw,576
drakrun/data/capa-rules/persistence/act-as-share-provider-dll.yml,sha256=qwi2qs2AJ1moB_B_R6L3guvnNcyfsgNHcnLVUfYqhUg,653
drakrun/data/capa-rules/persistence/act-as-time-provider-dll.yml,sha256=7P6_2FuvPPIt-Q1fvTHq35LYsKBbO1p6QNulr3wJnqk,575
drakrun/data/capa-rules/persistence/act-as-windbg-extension.yml,sha256=d-IqZ_RGtjatAjH9_DifZaEIKajzMJMuj31Z2UBsXOc,539
drakrun/data/capa-rules/persistence/create-shortcut-via-ishelllink.yml,sha256=MtXaRt6dJjSgUWtzphG1cHNVLVf8rA8KlPWkFqxDKJA,1034
drakrun/data/capa-rules/persistence/persist-via-desktop-autostart.yml,sha256=H-YoPU88-kxaijXOAyzyISfXMCPHtmEq4ZxYDTgVM0I,545
drakrun/data/capa-rules/persistence/persist-via-shell-profile-or-rc-file.yml,sha256=q4A1bH_36DeOqL0aYsGN0y0kiQ0abQtpJ5beA0ivRIM,673
drakrun/data/capa-rules/persistence/authentication-process/act-as-credential-manager-dll.yml,sha256=valQlF8SHoH31c1p-x449nkOs32ue6QJSiAIKEzghDQ,521
drakrun/data/capa-rules/persistence/authentication-process/act-as-password-filter-dll.yml,sha256=YfzLYGWOyweAVRIm_nepCvwvtpMNzjrRWHIznuCMa_I,513
drakrun/data/capa-rules/persistence/authentication-process/act-as-security-support-provider-dll.yml,sha256=Uszgh6Gu27y3bAKr5KI6td4K0jzZi5CmiwelmqYC97g,655
drakrun/data/capa-rules/persistence/authentication-process/act-as-subauthentication-package-dll.yml,sha256=dSuwRnvIGIG0HjoRaHtb1S2VzBd_al5jFluxL63R1Kc,726
drakrun/data/capa-rules/persistence/exchange/act-as-exchange-transport-agent.yml,sha256=tuo0_JObIONTv6ewb2JJ0y86gxMi4d1GPY6bCK3Ek5w,3130
drakrun/data/capa-rules/persistence/iis/persist-via-iis-module.yml,sha256=4FHzHi99WvKX-OAN12dK0VB2_SYOUaXkoTf1kqmsm4U,636
drakrun/data/capa-rules/persistence/iis/persist-via-isapi-extension.yml,sha256=z5FJXKUXMAPxlI_eqG7jl5qyeYt7iTtzJ7YGIJXaxlk,773
drakrun/data/capa-rules/persistence/office/act-as-excel-xll-add-in.yml,sha256=6navpropFJ8HmdJ4R06mnCZadk5jSlxLceOj_YasErI,497
drakrun/data/capa-rules/persistence/office/act-as-office-com-add-in.yml,sha256=anfeeMXrUUa8gDxnkVBWIYnma3F2g7VnlS6XX5uYRGo,922
drakrun/data/capa-rules/persistence/office/act-as-word-wll-add-in.yml,sha256=MeKjld9YmXJ5fU_WB0fo5AW8WUo3nvYizyBSDJloCUE,495
drakrun/data/capa-rules/persistence/registry/persist-via-active-setup-registry-key.yml,sha256=qeaFApVlcJ-zo_ygDmVVl6mapYo4NGivsjEmvzVSi4U,685
drakrun/data/capa-rules/persistence/registry/appinitdlls/disable-appinit_dlls-code-signature-enforcement.yml,sha256=1Xrl2bZmmbiUOvSJiCeoxTQxOJ-FiYgO8Q_65iSGQYM,1049
drakrun/data/capa-rules/persistence/registry/appinitdlls/persist-via-appinit_dlls-registry-key.yml,sha256=7aMipqo2PCVOwEYOmGM5EG3gS69_8BFDg8cyQKS69kQ,952
drakrun/data/capa-rules/persistence/registry/ginadll/persist-via-ginadll-registry-key.yml,sha256=oYFzKf4HxDOXOK93eLrXgqh3g2NTL0kKZhdg3kEdItc,571
drakrun/data/capa-rules/persistence/registry/run/persist-via-run-registry-key.yml,sha256=X3hVuuB9CKMlN7E0rzZXwMcUa5SlRWpm_DIzvrjZFrw,1220
drakrun/data/capa-rules/persistence/registry/winlogon-helper/persist-via-winlogon-helper-dll-registry-key.yml,sha256=xAY5Sju73SjhpIqmhojrw2aNiBSx0dPSN8vj8iwSAl0,726
drakrun/data/capa-rules/persistence/scheduled-tasks/schedule-task-via-at.yml,sha256=6zNgpFyjCPvz1EFdtkiJRChIsKu75L_XW_G2uO3DSJo,543
drakrun/data/capa-rules/persistence/scheduled-tasks/schedule-task-via-itaskscheduler.yml,sha256=q6H9-d9umVqeHHUJ4I5Pg9x9k9_T7bTxnblcYfcS59Y,713
drakrun/data/capa-rules/persistence/scheduled-tasks/schedule-task-via-schtasks.yml,sha256=HW9jmDvUPXvff6MPZWbxs1HKKY2Yp_JCiGmgd9hIdpA,542
drakrun/data/capa-rules/persistence/service/persist-via-rc-script.yml,sha256=wXiS60s_-zCroOfZIbxCTDVHVwmiE6tHR9e0q3dtt-A,514
drakrun/data/capa-rules/persistence/service/persist-via-windows-service.yml,sha256=qw7VRg_CvodHyB_9FqHx_UUz_JbpmpHVQeTsjSX75Pc,1303
drakrun/data/capa-rules/persistence/startup-folder/get-startup-folder.yml,sha256=okZO17rJP-N-aPjw7kxQeMyAcr2Qjvk1AFM84tk_qGQ,683
drakrun/data/capa-rules/persistence/startup-folder/write-file-to-startup-folder.yml,sha256=poqy1X-ajrDUBhWQrC4hB_pB7yFimRmDvD5p-dD9tL8,557
drakrun/data/capa-rules/runtime/dotnet/compiled-to-the-dotnet-platform.yml,sha256=HjrjSq9iWRhVt3eBo9EJgkvixDMbMn-TUmvmedy_RhY,432
drakrun/data/capa-rules/runtime/dotnet/execute-via-dotnet-startup-hook.yml,sha256=IVd5BON--ax21en0KcA_Q3asYvF0VIvyf5RBBkxqEa4,571
drakrun/data/capa-rules/targeting/automated-teller-machine/identify-atm-dispenser-service-provider.yml,sha256=6IgBBtPA_TERCTjmNA3ZySXpe-Gh7VdYCwilxHSD_XI,651
drakrun/data/capa-rules/targeting/automated-teller-machine/diebold-nixdorf/load-diebold-nixdorf-atm-library.yml,sha256=_WrYuOXTzec9OXZs7aHhLq4HfY4iFo1gVCVQnbK0trA,2453
drakrun/data/capa-rules/targeting/automated-teller-machine/diebold-nixdorf/reference-diebold-atm-routines.yml,sha256=h8agHYeJcNI5VFqN5ViJ94MjWYyMPmMnquFLsQQosas,520
drakrun/data/capa-rules/targeting/automated-teller-machine/ncr/load-ncr-atm-library.yml,sha256=SBXZ-ewxw8p77zYofutmU-Dn888UT7EFoisSU7trt-s,766
drakrun/data/capa-rules/targeting/automated-teller-machine/ncr/reference-ncr-atm-library-routines.yml,sha256=azPVM7_MT_97vWW9uQiwXUEactIpzIsEqKUWhKxvO-0,1214
drakrun/data/capa-rules/targeting/language/identify-system-language-via-api.yml,sha256=myeVtLvPHGoKVlglMs-Nva7b3FW2Q2br_cB2AIm51WU,536
drakrun/ipt/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/ipt/ipt_disasm.py,sha256=mCjgHKd3ERY8VAk5bNHhylBtWxkzITpT9XCMCXkDLh0,5881
drakrun/ipt/ipt_utils.py,sha256=yS_nXliHCHhiyIjEIytxUzsf-CYkuNjLaib3M21WSlc,1862
drakrun/lib/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/lib/config.py,sha256=RYoITEIUu1f8GOTKszmjxiW6uqsNssi4M8OGoQoEqns,5374
drakrun/lib/drakshell.py,sha256=nU0aNRntI7EkM0L4Fh_9NE0g2iAAYhNZ2aLDUzwEzGY,12455
drakrun/lib/drakvuf_cmdline.py,sha256=dMlnKz5j9i1B1WHyOB9_o52dVQlFuEFTJAn9y3mvS9o,2599
drakrun/lib/fetch_pdb.py,sha256=nk0YQ-UCBmT9MTxgk3VwVhF2e9TqKB-SQsdTiirkGsE,736
drakrun/lib/injector.py,sha256=xBd5s8h5soiTj4O_naLgjorXOQ10S_eHCH1grAoKlPY,3836
drakrun/lib/install_info.py,sha256=ROAnS5inPRtobglIU9LSGGsJthlBCbY7YcbeF2ylvxA,1185
drakrun/lib/network_info.py,sha256=523uqYXtehlUK7hKGGKKeSLSmzr1q9D2tFaDf_qCEEw,957
drakrun/lib/networking.py,sha256=cyr3wyloxDmJPVF_zOWi8rEWvi-bpTYReRyVqGap7W4,13821
drakrun/lib/paths.py,sha256=xjU3Rr4lknYVket9Bl7beTzIQ15uM-tXJD0lGHCeego,1472
drakrun/lib/s3_storage.py,sha256=hgozDiJ-cQZi56Lt1yOSEnsk6lAS5ooNA5zRvOtODa4,4274
drakrun/lib/storage.py,sha256=tWEBdlKkwlSR_mp9RpdftVVcvksf_2tC6zlR-tAlVTM,22588
drakrun/lib/version_detection.py,sha256=wrkbxGitxVDXujmyPoIzVqmF5N7jik5_f_vl713g-O8,1858
drakrun/lib/vm.py,sha256=S5zJpkKmhOzszmNq1tehfkgDvQc_WLox0Bp38Yblzo8,5156
drakrun/lib/vmi_profile.py,sha256=Qh1iuzT51-bzuUqrbmPtgMdyFpAb0Vg1KiEizBitKD8,4151
drakrun/lib/xen.py,sha256=Vyq0UN8MKmZQ2K2gwYV5AHVTU_nIehvu9C7C0sBVD4c,3348
drakrun/lib/libvmi/__init__.py,sha256=8XI0eoV05TiD4R1Nozh_s07bKseOG4oIKeDZVwHfjog,292
drakrun/lib/libvmi/dlls.py,sha256=VeECjVsfdQMeY51Fr_oNItHgO7TJKPDz1pC2ffdn-8A,2351
drakrun/lib/libvmi/libvmi.py,sha256=7nejr_poJvSk42lpOxtT3ApNQCoseytOtFKxI1tFH-U,2832
drakrun/lib/libvmi/vmi_info.py,sha256=5ZFvffyHkOvl8VevkPCddiyesujyS76n-qPIUWMcg58,1723
drakrun/tools/get-explorer-pid,sha256=sQmIbAtNvI8xk_WBz6elw2CQe0zVLu3VvSv7BIvafBA,17024
drakrun/tools/drakshell/drakshell,sha256=70pYtiozbuy3NPEAzqxtVoTYL7nX-vv2fuGejKK5W6Q,13392
drakrun/web/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
drakrun/web/api.py,sha256=uJeoFIY0Z0R1eDB90G0FA_DwN-otHSigSwYTx6fw5pY,13306
drakrun/web/app.py,sha256=bFvB80MxON--MwJxjo-65qbmJpEKaBxTaEUkrkvaV7c,1119
drakrun/web/schema.py,sha256=PpGfNv90eCgaPxYWzmN-kDlVtS61pDeQRupROEFFsHY,3456
drakrun/web/storage.py,sha256=8jHM7IFqUnK-2a7Vpc6LOt2QmImyzlNAB_OXC-flo8k,9752
drakrun/web/frontend/dist/index.html,sha256=rDhBwJ9kDExCzg6JTKXPnsvLYIXN20K0RubU8AXWj8c,400
drakrun/web/frontend/dist/assets/index-BhEviv2u.css,sha256=zk2vqNAng69k0EgkvSghIGCjxzSba3S7Fnj4Hdogat0,358916
drakrun/web/frontend/dist/assets/index-Cymi8SaR.js,sha256=D6EPNvdntSKgrhSzZJasQmVNKEDiIKX7LWBuXrQihtQ,1170922
drakrun/web/frontend/dist/embedded/index.html,sha256=iYaIGzGXFS6zEMQrWqVDVDSQAhdhzjnea12IIoVKSow,541805
drakvuf_sandbox-0.21.0.dist-info/licenses/COPYING,sha256=R7oKW6i_8D-kfad-XyT_lErVccdH5TQqmJqHFToFrJk,230
drakvuf_sandbox-0.21.0.dist-info/licenses/LICENSE,sha256=DxN7KLz2EpFtL2-J6yuJwMIqaTRBKQIE3IB72vW-qIc,27306
drakvuf_sandbox-0.21.0.dist-info/METADATA,sha256=KGROVL02C4po4yS9Cs0uX_n2v6jZ6wZgE6VaUjBJn_8,1059
drakvuf_sandbox-0.21.0.dist-info/WHEEL,sha256=SmOxYU7pzNKBqASvQJ7DjX3XGUF92lrGhMb3R6_iiqI,91
drakvuf_sandbox-0.21.0.dist-info/entry_points.txt,sha256=8JIBeKZn7l1qg7DCL_Nbxsb85Jrc2PWzbea9kDaAT64,45
drakvuf_sandbox-0.21.0.dist-info/top_level.txt,sha256=jxywQG4nvtWMl-Q2ZYyRPD2BKRd6ZoF07tQ_nrqlVgA,8
drakvuf_sandbox-0.21.0.dist-info/RECORD,,
