Report - github.com/mandiant/capa-rules/archive/refs/tags/v3.1.0.zip

Report Overview

Submitted URL
github.com/mandiant/capa-rules/archive/refs/tags/v3.1.0.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-04-17 21:37:55
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	513 B	3.5 kB	140.82.121.3
codeload.github.com	62359	2007-10-09	2013-04-18	2024-04-17	514 B	450 kB	140.82.121.9
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-17	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
codeload.github.com/mandiant/capa-rules/zip/refs/tags/v3.1.0
IP
140.82.121.9
ASN
#36459 GITHUB

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
449 kB (449362 bytes)
Hash
488a9ca82553951613a59cb1d6283d42
209b8a131856e84aa766c21f8f75458c04b8cac3
f39101aaeed27fd2c1690fcb1aed0710f155b360c5256e387850c02875d02e81

Archive (670)

Filename

Md5

File type

.gitattributes

d4b30c8ded240219e881059f60ba1959

ASCII text

false_negative.md

ba62138f414984b05e087f3076c8f15b

exported SGML document, ASCII text

false_positive.md

3891a4794b7845032bc190c759c7bc6b

exported SGML document, ASCII text

rule_idea.md

4c9b535edb714f485fcde7e9b782c97e

exported SGML document, ASCII text

pull_request_template.md

caa567f4ddde6ba9bfd2fba6c867c883

exported SGML document, ASCII text

changelog_author.py

e585f1953f383a28b32fe78147c5db90

ASCII text

sync.yml

3b8309a081ce10b9da9c0030d6fafab8

ASCII text

tests.yml

821d7d4796aec83cd343da6a8e70db33

ASCII text

LICENSE.txt

3b83ef96387f14655fc854ddc3c6bd57

ASCII text

README.md

515268cd694b3fa33a61779f50b1b77d

ASCII text

check-for-sandbox-and-av-modules.yml

71fd7ca444883e954168c1a3dcfe8f6d

ASCII text

check-for-debugger-via-api.yml

5ca4955713cbe72e287febdc6ad7a7a7

ASCII text

check-for-hardware-breakpoints.yml

66e22fd7fd08fd627f6a507d425211e9

ASCII text

check-for-kernel-debugger-via-shared-user-data-structure.yml

465c3417ba6264ba3602ce58ec4d8532

ASCII text

check-for-outputdebugstring-error.yml

379b5e77473da3965becd8d4bb4370e5

ASCII text

check-for-peb-beingdebugged-flag.yml

9bc75692fa8e880d5c01fb6665b47b4c

ASCII text

check-for-peb-ntglobalflag-flag.yml

e74977f0e7367b5070561de45f05764d

ASCII text

check-for-protected-handle-exception.yml

288a7c643243355d7b626e3578854b0a

ASCII text

check-for-software-breakpoints.yml

9f57e9cc229c236dd71a0bc8ac3a06a6

ASCII text

check-for-time-delay-via-gettickcount.yml

1f9c05ec99b2b568b8d20a37fa39ffc0

ASCII text

check-for-time-delay-via-queryperformancecounter.yml

62969024b58b44c24c4e14c18bb5e1a5

ASCII text

check-for-trap-flag-exception.yml

d436fd92bac3c882e483608b01119cb4

ASCII text

check-for-unexpected-memory-writes.yml

990a31f95080359787da332cf418774c

ASCII text

check-process-job-object.yml

ea57ebe057b17064eb1af5f5c94da7fb

ASCII text

check-processdebugport.yml

87354a4a3d65f8fc6fc957606a2c8f71

ASCII text

execute-anti-debugging-instructions.yml

1f1324b31151c8a59e7b5ab4cd7e14f2

ASCII text

64-bit-execution-via-heavens-gate.yml

e15627a97fc956b521989071e55c3578

ASCII text

contain-anti-disasm-techniques.yml

732261d06038c5206f00fea2d647ffe2

ASCII text

check-if-process-is-running-under-wine.yml

0e388082a5b57f1caf34f30d63e656fd

ASCII text

clear-windows-event-logs.yml

ec15532ce8e15c956072cd8c8784f8c7

ASCII text

crash-the-windows-event-logging-service.yml

39ba68e2abd24f03f7c90af80048e456

ASCII text

impersonate-file-version-information.yml

fdec49e9bb4cfc3fbb869dbbb42e5570

ASCII text, with very long lines (333)

patch-process-command-line.yml

1db95a4dc1c899934526ae221dbc635d

ASCII text

self-delete.yml

897d26232ecddc1f40baeed4fe3e7aec

ASCII text

timestomp-file.yml

8e3fb842caca12b32172fff1084761f9

ASCII text

check-for-microsoft-office-emulation.yml

c6a3899851997a3d2d549e39317408f3

ASCII text

check-for-sandbox-username.yml

2e8e50d15d410dbf33b9ff8ec379c247

ASCII text

check-for-unmoving-mouse-cursor.yml

c85ccba5f973ff7ee2761a6d16b6fbb0

ASCII text

check-for-windows-sandbox-via-device.yml

b460dc23c2e427620028f2565a5fcc25

ASCII text

check-for-windows-sandbox-via-dns-suffix.yml

69624731cda66d7f2ad8fa792de57ba5

ASCII text

check-for-windows-sandbox-via-genuine-state.yml

780adf8906212ac0e54f4d2f1d24d6f2

ASCII text

check-for-windows-sandbox-via-process-name.yml

1ab1637e9d4ce82826d7842a41ecc8a5

ASCII text

check-for-windows-sandbox-via-registry.yml

f49cf6738559e0d686abceb9c06ad927

ASCII text

reference-anti-vm-strings-targeting-parallels.yml

38575ffaace3125cd1828a461e419ade

ASCII text

reference-anti-vm-strings-targeting-qemu.yml

604557917cb15e5556cc11c501e87bb8

ASCII text

reference-anti-vm-strings-targeting-virtualbox.yml

598b1d6beacec84b4e9f812bf42c5c34

ASCII text

reference-anti-vm-strings-targeting-virtualpc.yml

e84a440691b94ee1d8bbe2e18c64cbb5

ASCII text

reference-anti-vm-strings-targeting-vmware.yml

79926c698c860f3d91a9696e7c417459

ASCII text

reference-anti-vm-strings-targeting-xen.yml

0d49817e675eb6e15bafb05fc1017aab

ASCII text

reference-anti-vm-strings.yml

7886dfaeef66ae327718164cf64a9cff

ASCII text

obfuscated-with-callobfuscator.yml

d6cba620dde8ea11804ba3c17ca4c5b7

ASCII text

contain-obfuscated-stackstrings.yml

f9599c4b46bac88f8869d320426e10e6

ASCII text

packed-with-amber.yml

05a3ed02e8bff862a5c9085236c61085

ASCII text

packed-with-aspack.yml

a77001ac58cdd48741db0f935807e512

ASCII text

packed-with-confuser.yml

f2798262fec9fcd3fdc6baabaaa90e7f

ASCII text

packed-with-generic-packer.yml

07d6bc0f2ab95f7a26e703b3e304d272

ASCII text

packed-with-gopacker.yml

522fc8dfd1bac95299d0f6740de89e51

ASCII text

packed-with-kkrunchy.yml

c384163b596b1222fa3e252d3cd4f98f

ASCII text

packed-with-nspack.yml

70700e76192b26995ce1269eb71cb297

ASCII text

packed-with-pebundle.yml

49aa04dd845721d203ede56ab2c589eb

ASCII text

packed-with-pecompact.yml

87103aba522be740c0587a310cf5380c

ASCII text

packed-with-pelocknt.yml

6f303fccddebffa14f6352b89a622208

ASCII text

packed-with-peshield.yml

315e9a6e433ad2f3e894e722c0546a31

ASCII text

packed-with-pespin.yml

45a38c887903d77ba256eef37e576b40

ASCII text

packed-with-petite.yml

05af8973d8630282db90bc0b1ebef99f

ASCII text

packed-with-rlpack.yml

a09e7b115a41998cdb7568822263283c

ASCII text

packed-with-themida.yml

462210d38e167c0bb6d678b30e99b888

ASCII text

packed-with-upack.yml

df93545223fae273fe279b241f45a6ef

ASCII text

packed-with-upx.yml

3d34ce18190a969d51b281b5a2bf5d95

ASCII text

packed-with-vmprotect.yml

e69169552d8d4ba1cc03e47a18f28144

ASCII text

packed-with-y0da-crypter.yml

6929bf8f13ad53b88288ccf33594c5c9

ASCII text

reference-analysis-tools-strings.yml

28b9e9901d1763ec4eefb055a63089fe

ASCII text

download-and-write-a-file.yml

9cf6d02a7f6ccbfdf1876f428fc89b39

ASCII text

write-and-execute-a-file.yml

c365c58adbf47fda405b201feb51fa20

ASCII text

create-reverse-shell-on-linux.yml

9d2fbb6d7962a901d420c9fcb3451c30

ASCII text

create-reverse-shell.yml

91a937f134868d3de2793bf2485fc9a0

ASCII text

execute-shell-command-and-capture-output.yml

d71579d6bf76b60565b7059978ad242c

ASCII text

execute-shell-command-received-from-socket-on-linux.yml

4f653c98bb72e4531252b59c7202ec23

ASCII text

acquire-credentials-from-windows-credential-manager.yml

aaa116c0d3407fec7dca94e224fac792

ASCII text

gather-firefox-profile-information.yml

904080d1dee6588e15477016b4b5d05b

ASCII text

parse-credit-card-information.yml

1c7091fd7a6de726b65154a8a6d3819c

ASCII text

reference-sql-statements.yml

c4cb8cbb8cd3d414a620fd05e12cbb54

ASCII text

reference-wmi-statements.yml

9e0f3b7c80d54a1f3b19488bfccf4b5e

ASCII text

gather-3d-ftp-information.yml

0229e009b7672ceeafc2b861ca8a80f7

ASCII text

gather-alftp-information.yml

f15f4047e811f440eeb0c505e6d6f3ba

ASCII text

gather-bitkinex-information.yml

3cab5f55604a8941fdffde4fb8a7ed02

ASCII text

gather-blazeftp-information.yml

f41309997ab10815f4f3de556330edae

ASCII text

gather-bulletproof-ftp-information.yml

eea4aa3bfac74033e9abaa7851cd32eb

ASCII text

gather-classicftp-information.yml

119270d0b8aa7f0e69cba0f1e14cebe8

ASCII text

gather-coreftp-information.yml

babb92ac79d1479e4974c54790eeb23f

ASCII text

gather-cuteftp-information.yml

736a7e6bacf7910d56c906a5ca019c4c

ASCII text

gather-cyberduck-information.yml

5f11b8b4f994f3eb16bb5f88b834f04b

ASCII text

gather-direct-ftp-information.yml

eb421c39beef35eee36b39147389b7af

ASCII text

gather-directory-opus-information.yml

63498011a95e468bda15ec21f75ba72d

ASCII text

gather-expandrive-information.yml

73fdc515dac4eeb8ba4f65d8d05011c0

ASCII text

gather-faststone-browser-information.yml

96b35f7dfad8ab5b38d46cc9463c6d06

ASCII text

gather-fasttrack-ftp-information.yml

215c283f697f98be517c2d0cc3978e14

ASCII text

gather-ffftp-information.yml

2674c7b992107cdf7a600b9484d609ae

ASCII text

gather-filezilla-information.yml

9a8161085acd59c70516e5fe9e6709a8

ASCII text

gather-flashfxp-information.yml

a72d173a61c0681bda6e0c5b50c70b96

ASCII text

gather-fling-ftp-information.yml

8886427e4ba0f8e115978df5738f816c

ASCII text

gather-freshftp-information.yml

bf020f33a29ebe7f0b9671ccab3eb962

ASCII text

gather-frigate3-information.yml

d3728d18741b7d4f3bc218e456461519

ASCII text

gather-ftp-commander-information.yml

84f221ddf610824022a5d0293247440b

ASCII text

gather-ftp-explorer-information.yml

d47903e1073dfa742d6dff1ed69daa60

ASCII text

gather-ftp-voyager-information.yml

1b2655a4fb180043ba9dc662cd6b4532

ASCII text

gather-ftpgetter-information.yml

fb831b0f49c05834a7ab1b08d72ddd09

ASCII text

gather-ftpinfo-information.yml

96c712953b5cc321ae39d39b8edf36e5

ASCII text

gather-ftpnow-information.yml

27ad48bda9d7968633596c2e086c20c0

ASCII text

gather-ftprush-information.yml

8450115e54432b49d295e10f6f84c3d1

ASCII text

gather-ftpshell-information.yml

198c985170063f22e7c5e31a58b6f62a

ASCII text

gather-global-downloader-information.yml

a192590396ca7ff9337a0854ff3e89a3

ASCII text

gather-goftp-information.yml

c10396d7d20e2d8b58cc735df3fc8562

ASCII text

gather-leapftp-information.yml

9601005610d357c8b693669ee579133f

ASCII text

gather-netdrive-information.yml

0a96a4d15ba6d7cfe92ce7c28d9c906c

ASCII text

gather-nexusfile-information.yml

e5d5009507e7696eb955f0bf10645121

ASCII text

gather-nova-ftp-information.yml

4c91a4f5467b9b2b1b3e09dd29711a93

ASCII text

gather-robo-ftp-information.yml

1a8b5725e3ebd4da5709cb93262c133e

ASCII text

gather-securefx-information.yml

7a228293398e4c592af1654d7ff25f5d

ASCII text

gather-smart-ftp-information.yml

2c15de851aad2124d1b6ccc152074c7e

ASCII text

gather-softx-ftp-information.yml

5a400297b276a9651598a16f4596d9b7

ASCII text

gather-southriver-webdrive-information.yml

f96e0b4a0fe151dd09edd7ec5215ae21

ASCII text

gather-staff-ftp-information.yml

d114bcb70a84ee26992de00d004e5325

ASCII text

gather-total-commander-information.yml

0c969be2c9ddab55f7ea84a3c62529ee

ASCII text

gather-turbo-ftp-information.yml

925db480acc2aaf38e2decf0d64d434b

ASCII text

gather-ultrafxp-information.yml

b5cf4f722061435361a98939a357f522

ASCII text

gather-winscp-information.yml

c26d7fa3b1aa9ee94ebb25637889bb38

ASCII text

gather-winzip-information.yml

8e464356112f6629ada9d3e231be240e

ASCII text

gather-wise-ftp-information.yml

723355077cf9cdf222daf0fb919dc242

ASCII text

gather-ws-ftp-information.yml

6c22d317cd4de587cfbdea99db104537

ASCII text

gather-xftp-information.yml

843522fa5e43cd3821bd9387e5efff32

ASCII text

get-current-user-on-linux.yml

dce2b3a4a7e535c557b2111e2fea10b6

ASCII text

get-geographical-location.yml

56664f754a2ce74ac4f724cf4f5789e1

ASCII text

discover-group-policy-via-gpresult.yml

bf71eb8f31b0c4024e153e8ea66df4c3

ASCII text

log-keystrokes-via-application-hook.yml

e2c7f5b93e5466e3fc1e4e6d310e6234

ASCII text

log-keystrokes-via-polling.yml

18abec8fc3b2bcb3f96b06b0f67727ce

ASCII text

log-keystrokes.yml

fbcf553d123b1ca613bc2b2ff737ec30

ASCII text

capture-microphone-audio.yml

f9fa78c6c39ed1627df0f7ee7b02817b

ASCII text

capture-network-configuration-via-ipconfig.yml

4dbc6d3df0849af85004c0b2ea49ff63

ASCII text

capture-public-ip.yml

ff0cf202e0ede0cbe4c567be365aaf5f

ASCII text

get-domain-trust-relationships.yml

35c0421890d392c9a08131e862790d61

ASCII text

get-mac-address-on-windows.yml

8da0a2d1c6218cf3ca625285b358cdd5

ASCII text

steal-keepass-passwords-using-keefarce.yml

921affbe2e18e942066fe7fa30fe9a82

ASCII text

capture-screenshot.yml

f58b946fe028634b1fa2703486e8951f

ASCII text

capture-webcam-image.yml

034af361d54010a4fd96a1aa35fdc31b

ASCII text

reference-dns-over-https-endpoints.yml

b4745fd9649e32652dcfb4e7954d73de

ASCII text

send-file-using-ftp-via-wininet.yml

2f69d39cf630cd2fd22f273f1480694f

ASCII text

check-http-status-code.yml

609988fdef4b22bf3274ddc29931fe55

ASCII text

connect-to-http-server.yml

2ad71542a30fd2dd6dc53662169ede42

ASCII text

connect-to-url.yml

ed27ab2814fb981767c784672b642d19

ASCII text

create-bits-job.yml

18203f0daecfeb7cf1f910a55169bbc4

ASCII text

create-http-request.yml

b555dafbba98ab46e6d4b7cc210e25ea

ASCII text

decompress-http-response-via-iencodingfilterfactory.yml

fe3c72fe4015ea63be19924af1174b7f

ASCII text

download-url.yml

576e2da0b5684acc49936183591b72a8

ASCII text

extract-http-body.yml

b19616f377252d5d5cbe18a888b62967

ASCII text

get-http-document-via-iwebbrowser2.yml

5c03808ad47b8d941670ab91729d373e

ASCII text

get-http-response-content-encoding.yml

cfbe7c4646d22cffa5b4425084584129

ASCII text

prepare-http-request.yml

45c7ce6f8a0392497f59399b7f1b018c

ASCII text

read-data-from-internet.yml

08f7031aa87eb76d7ffa514bfbae320c

ASCII text

receive-http-response.yml

e2dc26caadb9020cf1248bbbe790df09

ASCII text

send-file-via-http.yml

acc8e4941db9cbfa8e284fe97adb1b8a

ASCII text

send-http-request.yml

bc88795f668ea58aec37a8081d1ae787

ASCII text

initialize-iwebbrowser2.yml

d6fe25b75fb282023b8db4a3b47b8f63

ASCII text

initialize-winhttp-library.yml

c140e26439f4ebd3f2132081228e769c

ASCII text

read-http-header.yml

11c98c6bd935d2fa8dfff5ce079a0188

ASCII text

receive-http-request.yml

bfb2a6b15e1a565579d347d68f54e345

ASCII text

send-http-response.yml

b553deeb4daf824711123122cb7b0321

ASCII text

start-http-server.yml

13b181fd36962698b87f255789fbbf0e

ASCII text

set-http-header.yml

5b56a26685f016e844d62b11554c2489

ASCII text

send-icmp-echo-request.yml

d06bdeef743f71b48405407e0ba974ea

ASCII text

connect-pipe.yml

6dab26ceb3a49ed10f66ff97f15328e8

ASCII text

create-pipe.yml

c319b49e4f4eaafc9f947790a5b108f8

ASCII text

create-two-anonymous-pipes.yml

0807ffa81464f504567feabbb5002378

ASCII text

read-pipe.yml

afb94e64884d548a12e05aba6fa78072

ASCII text

write-pipe.yml

69c8ca5e2f50b35f19dbd6c068b4ba4b

ASCII text

receive-data.yml

2a6115a5bd34d21dd9233e11e85c1ea4

ASCII text

send-data.yml

269fde3f3895c41d64cd14db1ee3f72f

ASCII text

get-socket-status.yml

23cf169966eedd3f8a46c6bb7b708b57

ASCII text

initialize-winsock-library.yml

e8ef48cb2f05f0459ccf4c76a032d63f

ASCII text

receive-data-on-socket.yml

0d2479b80fd9d0bf6b2c8f17b155d48c

ASCII text

send-data-on-socket.yml

2b636655515adfaff7c355d0623cb7ae

ASCII text

set-socket-configuration.yml

2d0c6ca538949a1299e6adae352c07d1

ASCII text

connect-tcp-socket.yml

98408a336b7f212ca0ac45fdef77ee40

ASCII text

create-tcp-socket.yml

5b10fa9c51c42e7301ff141bd67eaf68

ASCII text

obtain-transmitpackets-callback-function-via-wsaioctl.yml

6ae19fdc1d6f43da00e8e34531da4fba

ASCII text, with very long lines (316)

send-tcp-data-via-wfp-api.yml

2572a2be44c5bac7495d39cb52f9fc70

ASCII text

create-udp-socket.yml

7596a2c97cee27888e5a81a921fb1c99

ASCII text

act-as-tcp-client.yml

bb4b176171ef897ec5520ad03258c7f0

ASCII text

start-tcp-server.yml

aab19b26c5148f2b95b767ce4acef3f8

ASCII text

compiled-with-autohotkey.yml

e381f046daca65b24d64821e3b921ac1

ASCII text

compiled-with-autoit.yml

82b79b43b5ebcc1b53867db541478a82

ASCII text, with very long lines (463)

compiled-with-dmd.yml

1df8415bf5dad416f8aee33e6781597f

ASCII text

compiled-with-borland-delphi.yml

8d77de9670c0475a7834a701f1b7a68f

ASCII text

compiled-with-exe4j.yml

837e6f56879d917befcfe1a77f6f636c

ASCII text

compiled-with-go.yml

fd847b2e32a4f9411cfaab8121c08c9c

ASCII text

compiled-with-mingw-for-windows.yml

a5291c7c29429b8e7dd02a0831c1c785

ASCII text

compiled-with-nim.yml

c527459b321155bd450283810c6b533e

ASCII text

compiled-with-perl2exe.yml

b294094cd5fcf251e07da538621698c3

ASCII text

compiled-with-ps2exe.yml

8897f56ee53435628334a08a8fbf9adc

ASCII text

compiled-with-py2exe.yml

9308fdfca6c47d86a4b7589be1782649

ASCII text

compiled-with-pyarmor.yml

07a5959dc9f8de9a58fbbec0ab79222a

ASCII text

compiled-with-rust.yml

eb383188470cf6feb169530fdb353382

ASCII text

compiled-from-visual-basic.yml

2c11e7b90a055ca936db305390834565

ASCII text

compute-adler32-checksum.yml

fef119bf8584bd7d09bfdb532c9cd319

ASCII text

hash-data-with-crc32.yml

02ed51ab8d89008f89d2b66a9d8da990

ASCII text

validate-payment-card-number-using-luhn-algorithm.yml

792d7afe2eaa9857f5a893e26631c46b

ASCII text

compress-data-via-winapi.yml

39eb28abd5dd6c7eb01c5531544d9d94

ASCII text

decompress-data-using-aplib.yml

eeffe59b643a9e193c63a07719ff9235

ASCII text

decompress-data-using-quicklz.yml

b6ff095db94a626d4ff336edf5aa2a25

ASCII text

decompress-data-using-ucl.yml

cdf72783317edbdb4442d2b54965ff0e

ASCII text

decompress-data-via-iencodingfilterfactory.yml

ac36832618fd8df3cf1f148d7026b0eb

ASCII text

decode-data-using-base64-via-dword-translation-table.yml

21d146b01ef6f708955a664751da4e82

ASCII text, with very long lines (844)

decode-data-using-base64-via-winapi.yml

0172c4507b1bc0a68ee2594165b7c087

ASCII text

encode-data-using-base64-via-winapi.yml

291fda9343b858cd15b925bdc50a32d2

ASCII text

encode-data-using-base64.yml

910dc8ab0fd67ea26e67954aaf70c037

ASCII text

reference-base64-string.yml

0706554caff0246144fcdda19fcd2af7

ASCII text

encode-data-using-xor.yml

61941d3f43758dc0abbc05ec2d6d71ad

ASCII text

decrypt-data-using-aes-via-x86-extensions.yml

1aee969c0511bce1046e664c4e67e0d3

ASCII text

encrypt-data-using-aes-via-net.yml

af0b26fe4b368f80ec717dc0b8e75bf0

ASCII text

encrypt-data-using-aes-via-winapi.yml

abb83c4458ff500007e51b7e08fee1f5

ASCII text

encrypt-data-using-blowfish.yml

7a7948ce98d079a6812f732883e2cbf5

ASCII text, with very long lines (542)

encrypt-data-using-camellia.yml

22e1ef6a88cf2af58ae53fad32018087

ASCII text, with very long lines (800)

create-new-key-via-cryptacquirecontext.yml

4b90cc42df71ba4b6956592f9bd6016f

ASCII text

encrypt-data-using-des-via-winapi.yml

88985a0064ec1ce50d29f4e5ece14fa8

ASCII text

encrypt-data-using-des.yml

5fed1bb7057d098652f155314d2a1bfc

ASCII text

encrypt-data-using-dpapi.yml

82a02bea10c82ed0de052848ee8e28c7

ASCII text

encrypt-data-using-curve25519.yml

a2c39978a6214d686443894b749227f0

ASCII text

encrypt-data-using-memfrob-from-glibc.yml

0bd1e5bfeb28fbc3a639ee66664312eb

ASCII text

encrypt-or-decrypt-via-wincrypt.yml

2c762ca4f4954a9ba51d73eb65788f05

ASCII text

get-outbound-credentials-handle-via-credssp.yml

f0e262c1781d3a2d9ca4e36db2639359

ASCII text

encrypt-data-using-hc-128-via-wolfssl.yml

7e7b9cbd151be0a7f177e22a9279e153

ASCII text

encrypt-data-using-hc-128.yml

81f1b118684157799cadde1941c9eab3

ASCII text

import-public-key.yml

ad7375cca38ea236030e1a9cfc2da116

ASCII text

encrypt-data-using-rc4-ksa.yml

82ea7f83f3b54636f50a325f2c6c6358

ASCII text

encrypt-data-using-rc4-prga.yml

c4bf73451648ad89b5d1fe48f5aa8284

ASCII text

encrypt-data-using-rc4-via-winapi.yml

4b56c3406b3ad8be0d49963b936b93ec

ASCII text

encrypt-data-using-rc4-with-custom-key-via-winapi.yml

4a4fac7b892786815edb14aa5a302e16

ASCII text, with very long lines (812)

encrypt-data-using-rc6.yml

ab901765388dad1143ea508c0a3d674f

ASCII text

reference-public-rsa-key.yml

ec1f43cb14bfb582b36fbab5a2904fcc

ASCII text

encrypt-data-using-skipjack.yml

4d94f02efbd2aadfcdd796bc5ab21035

ASCII text, with very long lines (791)

encrypt-data-using-sosemanuk.yml

b0a1627469cf433e326cf0944a804927

ASCII text, with very long lines (422)

encrypt-data-using-twofish.yml

aa96afc36b7e362610c3d205033da772

ASCII text, with very long lines (541)

encrypt-data-using-vest.yml

a679587b30c609399802be4e85a53e83

ASCII text, with very long lines (536)

hash-data-using-djb2.yml

90eaea1174712e786cabd3e7361c0f23

ASCII text

hash-data-using-fnv.yml

49355358a5ccae0ce0ace6beb2ed81b3

ASCII text

hash-data-via-wincrypt.yml

9f279451c5347e248e23ded3ec116d0e

ASCII text

hash-data-with-md5.yml

e15d0d257238982172ac7d761d692024

ASCII text

hash-data-using-murmur3.yml

af30fae430e1916840b0603736163663

ASCII text

hash-data-using-sha1.yml

d2f004e6f8b45d0128bf2fdf7f82f72b

ASCII text

hash-data-using-sha224.yml

ea0d281a7893b2d9805df73f10f1d3dc

ASCII text

hash-data-using-sha256.yml

8fc4b1eb78627224b91afc879004474f

ASCII text

hash-data-using-tiger.yml

eb5e8ac7d94bcd38011ee797983cda33

ASCII text, with very long lines (535)

authenticate-hmac.yml

950e76d0cd1314bdde58adc01c77d908

ASCII text

generate-random-numbers-via-winapi.yml

32b15f253d6175fbe85bc3dd4d06cd24

ASCII text

generate-random-numbers-using-a-mersenne-twister.yml

0593d9371c74747728da0a677807ab27

ASCII text

format.md

fa0d81e704c09d6cb04254b0e58a79ba

ASCII text, with very long lines (403)

packaged-as-an-iexpress-self-extracting-archive.yml

71762ca882874b7b1c42eb12d31524bf

ASCII text

packaged-as-an-inno-setup-installer.yml

e70a7b2a90dad944d3f58692c0e76ce0

ASCII text

contains-pdb-path.yml

3f19b5c2d3ea69c01303c62c46a20cd6

ASCII text

contain-a-resource-rsrc-section.yml

3efff901fa6338a04ff09ab873bba62f

ASCII text

contain-a-thread-local-storage-tls-section.yml

eff3b5952bf8ec2670402eb9cb90e3f8

ASCII text

extract-resource-via-kernel32-functions.yml

b12b4d896e85a5ce2d0b1dcb275007b9

ASCII text

contain-an-embedded-pe-file.yml

a819f673f2f0cd992fdb689f21fc9ba5

ASCII text

disable-code-signing.yml

72fd869b93854ac533f6a132fd32bb3f

ASCII text

manipulate-boot-configuration.yml

6357e9d7374a3c5757a994cda13395cc

ASCII text

manipulate-safe-mode-programs.yml

7e6b220f828dfa6aa5b39fae35805955

ASCII text

accept-command-line-arguments.yml

6b35372bdd8fd8e2d9a1d1c174360af5

ASCII text

resolve-path-using-msvcrt.yml

a3da7b6a94632df7eda3a60ca3846c38

ASCII text

open-clipboard.yml

1740821e81cd56b91f7a526a9fb2c840

ASCII text

read-clipboard-data.yml

a45257b72794fa8d82e826bae0dbc6b4

ASCII text

replace-clipboard-data.yml

21698fd562d89d8fe76a26a5272a5a67

ASCII text

write-clipboard-data.yml

90df8b15fe1c16c8bdd79c9a9ef8ed36

ASCII text

manipulate-console.yml

bc7ef4ad5c2e72d6ea6245d397244ab9

ASCII text

create-device-object.yml

7dc95386ddad5c45a3415bbef28d2d06

ASCII text

disable-driver-code-integrity.yml

eeb6af7ce661be7d2eb3e01c37cf9440

ASCII text

install-driver.yml

81394668d4b7188b36ba130973b3943d

ASCII text

interact-with-driver-via-control-codes.yml

1954245b74d2e36abc8c4a224e0e1b35

ASCII text

get-comspec-environment-variable.yml

1d5da81bd78255d5817567fae688d7e2

ASCII text

query-environment-variable.yml

eb49876ea1f348a49c6d6f8dc756c9eb

ASCII text

set-environment-variable.yml

68a5f1a47a6d11699317684c51b20a5e

ASCII text

bypass-mark-of-the-web.yml

0a4d013c99f57b647855dd3fe28685d8

ASCII text

change-file-permission-on-linux.yml

c3c74cda3f90babdab2fc9e42c684b6b

ASCII text

copy-file.yml

a6f3a8d57855db88481210d2f7a183b2

ASCII text

create-directory.yml

19d8bef5e8b117663b1eaff6731835b8

ASCII text

delete-directory.yml

232043a901da954f246762b0bf842073

ASCII text

delete-file.yml

9648fd5e747981d948dafb9451314071

ASCII text

check-if-file-exists.yml

b22865b656ba309ef6bdee91e7fb3d07

ASCII text

enumerate-files-on-linux.yml

3c692e344851c1ffb4c33166cf994f1c

ASCII text

enumerate-files-recursively.yml

583d7ee0870a296a04be5a0401e71688

ASCII text

enumerate-files-via-kernel32-functions.yml

d511a871b32589f948a0c6eede9f5197

ASCII text

enumerate-files-via-ntdll-functions.yml

7309f7dd11bd5cb76cf9f0578423bfd8

ASCII text

get-common-file-path.yml

6015a57b845ca00a5bad7630c4645aa9

ASCII text

get-file-system-object-information.yml

c89c1a950c874bba657d531aa73beaca

ASCII text

get-program-files-directory.yml

c4f6044f7343d0a5a455d926579ebfab

ASCII text

get-file-attributes.yml

fbc20e158e670af17c61b1b7f467f965

ASCII text

get-file-size.yml

8c2d7cf96d3cc58095b3761a72f943d3

ASCII text

get-file-version-info.yml

a12c5210a23d4817a46589cbcec8a3b4

ASCII text

set-file-attributes.yml

bf7bed9ed2a8a84fc0d98097f158b7cc

ASCII text

move-file.yml

3200f9ce397042eecebf3b04b8c330a1

ASCII text

read-file-on-linux.yml

4f2a0aa645857f3964cbf873fd4dd6e5

ASCII text

read-file-on-windows.yml

02cba94ad6139283e9090d21e3ffc707

ASCII text

read-file-via-mapping.yml

89f0606eb81001de13908ff807b59c4a

ASCII text

read-ini-file.yml

a280411c255daee0e204770b5b988ce6

ASCII text

read-virtual-disk.yml

9fc94bb06dba960493ea0b8e12cb0b51

ASCII text

bypass-windows-file-protection.yml

50d41b31db984fe19f945548dae34250

ASCII text

write-file-on-linux.yml

5dc85cfe8bc4bdc4126fc14601a9c5ac

ASCII text

write-file-on-windows.yml

5ca0b18bb16e9b24d43d6b9069a2347c

ASCII text

38ebe4b2955008679d1507d32fed69e5

ASCII text

start-minifilter-driver.yml

43fc899be4633d10c7878cf635e81593

ASCII text

access-firewall-settings-via-inetfwmgr.yml

61d538dcea40742015be286553d6a8fa

ASCII text

set-console-window-title.yml

bcd62fd98350354529d0f28468d58c79

ASCII text

enumerate-gui-resources.yml

14961e38b3ef814e809175c19aa2ad9d

ASCII text

references-logon-banner.yml

aa169392629704afe019f4dd13d8950e

ASCII text

lock-the-desktop.yml

b0dd0bec4e57a855f4328636e5f5e726

ASCII text

change-the-wallpaper.yml

8396221279ff695bb2b63a6a3d1b755a

ASCII text

set-application-hook.yml

55f1abb77172d9164713b9ac72ea6b83

ASCII text

find-taskbar.yml

40de148f125b8ef5d0fd1222a3988407

ASCII text

hide-the-windows-taskbar.yml

6d3df7b28966d844c03739954720ed46

ASCII text

find-graphical-window.yml

37b8d538df650abecbf9a66211c3878d

ASCII text

get-graphical-window-text.yml

9ee4c2a8efc4252666670bde60bfea1b

ASCII text

hide-graphical-window.yml

3b2542dd983c7ad757f0364cd7a596c7

ASCII text

manipulate-cd-rom-drive.yml

a3219f7c8ecc55a9ad0d1388ae79c9fc

ASCII text

get-cpu-information.yml

712d81782f300b4921587c3c31eea61c

ASCII text

get-number-of-processor-cores.yml

63239ca65ae9701ef73cde1aeeab2911

ASCII text

get-number-of-processors.yml

2dc5c1e81dc92eff9e85f554f581c256

ASCII text

get-keyboard-layout.yml

0b16450994fc187b97b105de69f3f554

ASCII text

simulate-ctrl-alt-del.yml

83621236d610dca58b8ae24b89f4f67d

ASCII text

get-memory-capacity.yml

10b93ae0b2b772ec68b33a36514eae55

ASCII text

get-memory-information.yml

1760687f3fe9c47abc8a5288786ab8cc

ASCII text

swap-mouse-buttons.yml

3bbc1ca676ee10bd947877914d7e926f

ASCII text

enumerate-disk-properties.yml

609b5888823a214cc0b7bc0effde636c

ASCII text

get-disk-information.yml

f7302a7db34d473fb2d7e6d59e0f647f

ASCII text

get-disk-size.yml

72f74401da7cfb4739dde07f5ad2c8a8

ASCII text

read-data-from-clfs-log-container.yml

843ac1213d5ffeaaf9f9b5c5848051bc

ASCII text

print-debug-messages.yml

4fe9ebc099929a47383c29f285f1c319

ASCII text

access-the-windows-event-log.yml

4a3fe754eaed3c906eedf224b2ff1f19

ASCII text

check-mutex-and-exit.yml

89ed98f9d367bc5862b0d9a329a75e84

ASCII text

check-mutex.yml

a8e034754f51fed3739c0d4c7cd8c909

ASCII text

create-mutex.yml

10791835d5466586df32c3d96fb4fd35

ASCII text

lock-file.yml

b21fc2cae41e3787b17a65f0367bead2

ASCII text

get-local-ipv4-addresses.yml

792a4596975b1db91db254f5b668a6bc

ASCII text

check-internet-connectivity-via-wininet.yml

2157724d14978fd0d60ed259b7a8df56

ASCII text

resolve-dns.yml

e9c72031f41fd601bcf9295f5cb64099

ASCII text

enumerate-domain-computers-via-ldap.yml

70397b20d88710b3dd1861aeb98dcd88

ASCII text

get-domain-controller-name.yml

242771b1bdbbe780991020de1b0535fe

ASCII text

get-domain-information.yml

d27f2b1dbaad50c7150c17dea2eb1701

ASCII text

get-networking-interfaces.yml

99edcf27a7bfca7d5e30471bd2f338a0

ASCII text

copy-network-traffic.yml

c4a4ae70ef5f49aadd032141d8b3d056

ASCII text

94a2ce53e9b5c2fac916c9b6b3223b64

ASCII text

get-hostname.yml

6ad5aeb82dfddafb33a28758aebbb0b3

ASCII text

get-system-information-on-windows.yml

f89616f63221bc9b2163361238c4e32e

ASCII text

shutdown-system.yml

a82c3796ab15d807fb586a9ea840af48

ASCII text

check-os-version.yml

f2cc90220093eb444c3ee183943376dd

ASCII text

get-kernel-version.yml

9d097cda31b89c9629b4276eff397574

ASCII text

get-linux-distribution.yml

79b4fb988eab0642dea1d1d4ad6c5650

ASCII text

allocate-thread-local-storage.yml

a7863e4eb7932a4579387a5a1121d9b9

ASCII text

create-a-process-with-modified-io-handles-and-window.yml

35f20524db0f602760ae08306cc67480

ASCII text

create-process-on-linux.yml

4d08e7491d7b389e16ba06ba0f8e090c

ASCII text

create-process-on-windows.yml

ff6a3644a680c05bd56474aebc805c8d

ASCII text

create-process-suspended.yml

823bdcf59dc5937a5e4712e17579c194

ASCII text

execute-command.yml

0dbec6535174d6acd908ba078d0d016f

ASCII text

create-process-memory-minidump.yml

d05b58a7676bcadf3fe8f2127ab46425

ASCII text

get-process-heap-flags.yml

50dac37e24a61aca6a505e00b28cae34

ASCII text

get-process-heap-force-flags.yml

a06782d92a44335713305726c96faffb

ASCII text

allocate-rwx-memory.yml

76f3ffa398fdaf224fae70c7e1a8bbae

ASCII text

allocate-user-process-rwx-memory.yml

cd0dc84b862191a66e7f26cc6c1ca185

ASCII text

attach-user-process-memory.yml

00f96d49bb4111d277ff8102d64fb809

ASCII text

free-user-process-memory.yml

24feb50f542477812c74da25e719ce07

ASCII text

hijack-thread-execution.yml

67b938babdbb7f258e86e4709fd8f008

ASCII text

inject-apc.yml

7ca04ef498b32fd48e3c1c0b4d3884c8

ASCII text

inject-dll.yml

fc80152b8dfb465dfc020744d18db0d4

ASCII text

inject-pe.yml

798dde111ea09db28d032532035d380e

ASCII text

inject-shellcode-using-a-file-mapping-object.yml

6f45ac8245b99203ae7009d200fb08a6

ASCII text

inject-thread.yml

ed4faa883a10a8dc5feb739866f64805

ASCII text

use-process-doppelgänging.yml

047c667b06a33c952cf1fdb786673682

Unicode text, UTF-8 text

use-process-replacement.yml

8d22645ee97026eb72c185ef29c8d256

ASCII text

enumerate-processes-on-remote-desktop-session-host.yml

84dca7a92e1ce103034502a09ef23919

ASCII text

enumerate-processes-via-ntquerysysteminformation.yml

4843e964a284ad451094b62065dfeca3

ASCII text

enumerate-processes.yml

bce10bdb658942af4820981c2f5282d8

ASCII text

find-process-by-pid.yml

332e77e694082e3ce3aac197eb86ee5f

ASCII text

get-explorer-pid.yml

5de6982091273c4ccf9a4828fac8d42b

ASCII text

acquire-debug-privileges.yml

0ea41da72949307c87f6c4a701176bf8

ASCII text

modify-access-privileges.yml

63dba0405d36a3e117cb311bf3d7d130

ASCII text

enumerate-process-modules.yml

f6f0cbc43bd0be6c3f48f3ab3ec1cbf4

ASCII text

set-thread-local-storage-value.yml

2e35c4fb1edbd84c3f63cf5b47de04fd

ASCII text

terminate-process-via-fastfail.yml

701f4e1bf5d1be476f02c112205d01d7

ASCII text

terminate-process-via-kill.yml

e66154f7250bd846c05c1f14dcfaec6c

ASCII text

terminate-process.yml

3c5f8e3df774b8bd8afca64e02a7af99

ASCII text

empty-recycle-bin-quietly.yml

b60acbdbf2cd757af10a4ee7786eaa45

ASCII text

create-or-open-registry-key.yml

91a6006627d44180ceb02da1df5c952c

ASCII text

create-registry-key-via-offline-registry-library.yml

0e2f9a4491c5f6144dac4ff2a05c062f

ASCII text

set-registry-value.yml

e3e7f2522ff7239b85593a850085de93

ASCII text

delete-registry-key.yml

ad53840c876e9c9cca2f87f7a3f47b89

ASCII text

delete-registry-value.yml

8f4f2f59c931c9d8badd56edeb3e1937

ASCII text

open-registry-key-via-offline-registry-library.yml

6cb91f326ba9b03529956ec100d1c950

ASCII text

query-or-enumerate-registry-key.yml

cb8c07216385ea113b0dbf3e0f21e1e5

ASCII text

query-or-enumerate-registry-value.yml

d6f182abec423bafa4200a4b28ecfa05

ASCII text

query-registry-key-via-offline-registry-library.yml

5c65af25aa895c3b96d3163b3c00cfc4

ASCII text

set-registry-key-via-offline-registry-library.yml

fe478fc9929ab7cd78e0db4b18c06236

ASCII text

create-service.yml

a2e3cdcd3f85a1a466dc747e266dfcd6

ASCII text

delete-service.yml

f5ee325382603f2ab3a2aa217fb5caee

ASCII text

enumerate-services.yml

33336a0d698d2c9375af00b933ffe36b

ASCII text

modify-service.yml

c4e7d0e4a4f46fb5b614f63919a32ef1

ASCII text

query-service-status.yml

6dc13f2095b18ca8ffb59d8bb5ab8c83

ASCII text

run-as-service.yml

37d79bac59f3fe7740700a784c48c80e

ASCII text

start-service.yml

e4e709a7eaec58ead0c3f3e13e55f579

ASCII text

stop-service.yml

0b0a2627984032cbaf73307c341112ca

ASCII text

get-logon-sessions.yml

09e97cd170633f78e6bc8de7d0c52c95

ASCII text

get-session-integrity-level.yml

86b093ff6254db3c7c0f364efdd33188

ASCII text

get-session-user-name.yml

2d6aab8e0555487945a1afdeb4f5e386

ASCII text

get-token-membership.yml

9e5db6d616bc590abe513beaa3dffb3b

ASCII text

get-user-security-identifier.yml

b894f7f4750c05ca0c18993ebf452a78

ASCII text

create-thread.yml

c3e0b3839e656504a4c2162bd0b4cec0

ASCII text

enumerate-threads.yml

395fe31da6cf0efac1a8db7e9482ae66

ASCII text

resume-thread.yml

1d3f1122c9428a73a2a5fb4f6d9950ce

ASCII text

suspend-thread.yml

a16a90a4fe7394697dc6f347ac756f7d

ASCII text

terminate-thread.yml

01d1a81ffcdcbc5ef0ba424c2466a038

ASCII text

bypass-uac-via-appinfo-alpc.yml

80a51005bad30b5f870be6392e1893a3

ASCII text

bypass-uac-via-icmluautil.yml

26b97f323dcb893d46d74f09b2b96843

ASCII text

bypass-uac-via-token-manipulation.yml

3c4ef08cba3e2ac635818147d24a4b77

ASCII text

connect-to-wmi-namespace-via-wbemlocator.yml

ac2595a70555866881ee2fe7af0f44d4

ASCII text

delete-volume-shadow-copies.yml

236e620c61403192150d70154b71abbd

ASCII text

overwrite-master-boot-record-mbr.yml

269520c27830a49e91f78c5ae7f5115a

ASCII text

README.md

a8f5b56fbf4697cfa7a1d3af3c517ec5

ASCII text

internal-autohotkey-file-limitation.yml

b891ba18ce2b2c24f63af646bba6660c

ASCII text

internal-autoit-file-limitation.yml

e8770d15ccec5f96ec0361046925fde6

ASCII text

internal-dotnet-file-limitation.yml

5f5606c5196c58a64a3bac2f21b5d0be

ASCII text

internal-installer-file-limitation.yml

bb365d80a6e7ee61738496b2b06170c6

ASCII text

internal-packer-file-limitation.yml

21cd9430163eeb6871b1dfd2ff17fc69

ASCII text

internal-visual-basic-file-limitation.yml

eaf9643d0f8219e98e5c20fde8cebc06

ASCII text

allocate-memory.yml

0d4a752df0934df4fc4f63083d84c55d

ASCII text

allocate-rw-memory.yml

3c90be0073116206dbb1a4553b66829c

ASCII text

calculate-modulo-256-via-x86-assembly.yml

6bdd5526a8d9fb2990194a1028345ff8

ASCII text

contain-loop.yml

289edf794f0ff3a1d6dd1826d67a37a7

ASCII text

contain-pusha-popa-sequence.yml

f40c691d2ad8f676e8f812b46fc39a37

ASCII text

create-or-open-file.yml

4c2fd38e3d2f7187504ef2c2655288b5

ASCII text

delay-execution.yml

152443dc2d00cce4061febabd6e53ee7

ASCII text

duplicate-stdin-and-stdout.yml

238c073b048bf75bf1948c806317416e

ASCII text

get-service-handle.yml

4ed89cb65819a72154cc3acfe333b65d

ASCII text

open-process.yml

23d15f561f7c6717ae729af038b28303

ASCII text

open-thread.yml

3719c7a63200a8550b562c9fde4c5ab7

ASCII text

peb-access.yml

f163c16c28f03d821199f067fb19d8a7

ASCII text

validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml

9ab858db221a635c19ea0a822803fa40

ASCII text

validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml

27dc4855efa2e5bd90cfffdaef94b815

ASCII text

write-process-memory.yml

39d85623bed6da0b7dbd0665e771faed

ASCII text

access-peb-ldr_data.yml

bd64032b70c71acb93f9f32dddad3d15

ASCII text

get-kernel32-base-address.yml

9852413dfddd1719ff5424c4eb12b92a

ASCII text

get-ntdll-base-address.yml

59a93a620291fc767e39b9ec5cb3fd09

ASCII text

link-function-at-runtime-on-windows.yml

1b107874898ae9fd36661f1cc9fcff48

ASCII text

link-many-functions-at-runtime.yml

0bdbef897f92336dc5947a2d6bc6c79c

ASCII text

resolve-function-by-fin8-fasthash.yml

8386768935688c818da522f2b7ba2c9b

ASCII text

linked-against-crypto.yml

a0e5dccca49dc9963cd86c34523c3bd4

ASCII text

linked-against-libcurl.yml

b6b0181df23ec2e07b65f674dfd8df3c

ASCII text

linked-against-microsoft-detours.yml

4e174d553364f50e131251dee0d7a531

ASCII text

linked-against-openssl.yml

4e1a66feb98ecd2da493e71d817b7e7b

ASCII text

linked-against-polarsslmbed-tls.yml

bebcd8f6493524359260686d9c7bd372

ASCII text

linked-against-wolfcrypt.yml

e1932234de70af8e7c98ad6a9f62fa0f

ASCII text

linked-against-wolfssl.yml

49641217618b388d475c36cf1bd344ae

ASCII text

linked-against-zlib.yml

c60e1e15da6f70b04656178f9f2adb4a

ASCII text

access-pe-header.yml

7dace1fb5c2c34fc6aa5c38317551c03

ASCII text

enumerate-pe-sections.yml

1cd95884811fe3533c8f28c5b234bbd3

ASCII text

inject-dll-reflectively.yml

d681824ae6dc472abc01e4f3fc1ffe8c

ASCII text

inspect-section-memory-permissions.yml

14636256ef24ac5583d5907c2b63902c

ASCII text

parse-pe-header.yml

07c49d29bd0314278533189df15ccc09

ASCII text

rebuild-import-table.yml

941613e816f5153e706e39652f759352

ASCII text

execute-shellcode-via-copyfile2.yml

de7739e1e8de30c6752d15471729130d

ASCII text

execute-shellcode-via-createthreadpoolwait.yml

eff7e2513d6192f9e856baad97c29a9b

ASCII text

execute-shellcode-via-enumuilanguages.yml

c6ac3c80ac8833c851831af954cbbba5

ASCII text

execute-shellcode-via-windows-fibers.yml

69d3ccd355994c66b0dd5c29c1353088

ASCII text

spawn-thread-to-rwx-shellcode.yml

563b64395206ce629ce6293fad4ef08b

ASCII text

match-known-plugx-module.yml

474b2c76ce78ebb460d90fa7433795f4

ASCII text

add-file-to-cabinet-file.yml

ad952768955c1830cb38aa6922e277d1

ASCII text

add-user-account-group.yml

3d7669cc147ddb0aaa22a040598d23b0

ASCII text

add-user-account-to-group.yml

36d9c86fe4de00676b686179f009bda6

ASCII text

add-user-account.yml

e7f819c19c8f750ec81cad8277069ce2

ASCII text

append-data-to-clfs-log-container.yml

2f2afa5e35cbb90fc20dc55b610298f7

ASCII text

build-docker-image.yml

1e6bb5bb392ce380c7b102d6e361a94e

ASCII text

bypass-uac-via-scheduled-task-environment-variable.yml

714928b5b61cfad17a193b18d3dec2d7

ASCII text

capture-network-configuration-via-ifconfig.yml

92e043eb101a9763b5df6630468153d3

ASCII text

capture-screenshot-in-go.yml

a680ec27d47a8a186a3b7007341a4d75

ASCII text

capture-webcam-video.yml

11d9b1103d624f7b77ed99d2a735b905

ASCII text

change-user-account-password.yml

077ed01bb982ba020880e68f633a3846

ASCII text

check-for-process-debug-object.yml

111d132009718843b892a2b71f836eac

ASCII text

check-for-windows-sandbox-via-mutex.yml

e26fd483e750e52bcc0d5d2f3a7bb679

ASCII text

check-license-value.yml

b769f266d16831ee34a3e007ab481cae

ASCII text

check-processdebugflags.yml

9fdff84e5ab232b283c877edf84744f1

ASCII text

check-systemkerneldebuggerinformation.yml

fa2b168a5f58970205b370bedc842f55

ASCII text

check-thread-yield-allowed.yml

344573623bad110a9f2dc0cacc098748

ASCII text

collect-ssh-keys.yml

9f949483308e45f9d8d302d3010d1a9c

ASCII text

compare-security-identifiers.yml

599db3cb5b46c1054d003e8aeed5ad4a

ASCII text

compiled-from-epl.yml

3ef80575f35f769abbda5d7b173dc388

Unicode text, UTF-8 text

connect-network-resource.yml

c6b1bc5d9bcfc1313e9c4e94c29d0cc2

ASCII text

create-container.yml

7fd0e260b0e62d66e642c88aa65f1598

ASCII text

create-registry-key-via-stdregprov.yml

2194fc12feaf75fe8dca9bc87a0237b0

ASCII text

create-restart-manager-session.yml

c2fcaacef9f9812bdc0c8d6644565b3d

ASCII text

create-shortcut-via-ishelllink.yml

35be98d37952ba2eeecf53dec33d399c

ASCII text

debug-build.yml

6c87138be12695e637fe1bd67b2eb2da

ASCII text

decrypt-data-via-sspi.yml

b15db4d8b32636133d527ea104f0056e

ASCII text

delete-internet-cache.yml

25189cf4794e96501aca2b665d8e680d

ASCII text

delete-registry-key-via-offline-registry-library.yml

190535e9dc3b4597256c6d2baa3d95f1

ASCII text

delete-registry-key-via-stdregprov.yml

50d5020b81fcf9b350c3cb99b525f9ee

ASCII text

delete-registry-value-via-stdregprov.yml

d4a336a03fd27092dbc47c6a3147e285

ASCII text

delete-user-account-from-group.yml

01bd930c3c0f64ac9dae8535476cc1f7

ASCII text

delete-user-account-group.yml

614afee3bff73c4645cf82c30c8dec5b

ASCII text

delete-user-account.yml

48ff4a4e86f7e6ded7d83a0dc3b312a8

ASCII text

delete-windows-backup-catalog.yml

05c18f3915de2ce497b562bee3ee3152

ASCII text

disable-automatic-windows-recovery-features.yml

a71cea2d291505d16df79eb9ab7c11b6

ASCII text

empty-the-recycle-bin.yml

f597b35416d3938f07cd6a6fa71f9a90

ASCII text

enable-safe-mode-boot.yml

13cdd6296bf697c77e98a190cfaa973f

ASCII text

encrypt-data-using-aes-via-x86-extensions.yml

6dbda545d1d6487631e864b09242a9f5

ASCII text

encrypt-data-using-fakem-cipher.yml

0d02f864e8e9e914bc5b60e7a5abb40e

ASCII text

encrypt-data-using-salsa20-or-chacha.yml

72c7b1a90416e86b25297bbb2cdfd717

ASCII text

encrypt-data-via-sspi.yml

ce8777ecb8b8bd382b605a44cb8dbc43

ASCII text

encrypt-or-decrypt-data-via-bcrypt.yml

97febdccc7723aed27f639ed31f8ea9e

ASCII text

enumerate-browser-history.yml

d52740201a829c91dace1ec65e3b4160

ASCII text

enumerate-disk-volumes.yml

70f3805698733d4faa1cda1883f39bd6

ASCII text

enumerate-internet-cache.yml

74d2d160e85fc874c6d58b679b29a7af

ASCII text

enumerate-network-shares.yml

fcad704f5a0a0ac91c08abb80c284194

ASCII text

enumerate-processes-via-procfs.yml

e2bfcd7d4676e5be16ba8fa611a45942

ASCII text

enumerate-system-firmware-tables.yml

05233621ab5f588e51be291375794eeb

ASCII text

execute-shell-command-via-windows-remote-management.yml

be87fb00ce8c2f9bb07b6aee2ac6cc8d

ASCII text

execute-syscall-instruction.yml

dabbdbe7254036d96636da2b7e0d4bd7

ASCII text

flush-cabinet-file.yml

bc90b4757e868c78cb3af2c88db205aa

ASCII text

generate-random-numbers-using-the-delphi-lcg.yml

aa54eadcdcc72330da4416a97dfd72d6

ASCII text

get-client-handle-via-schannel.yml

224b541c58aabae8b58a85abee0279b4

ASCII text

get-inbound-credentials-handle-via-credssp.yml

662afc8541f248209e10ee5b6064bf4e

ASCII text

get-installed-programs.yml

3a1ea7a3556b8751cc4a6cc98d79690f

ASCII text

get-mac-address-on-linux.yml

45b76fcb28179f44d22b3561ddc29b0a

ASCII text

get-networking-parameters.yml

2c006921c0043ed21632901fe0e8e15a

ASCII text

get-proxy.yml

d55e6231d46505317bfa528841f7e554

ASCII text

get-remote-cert-context-via-schannel.yml

1654b7d77e9aeea05eda78322bf43a89

ASCII text

get-routing-table.yml

8af520f903a9b3a1945d4409e9e285cf

ASCII text

get-session-information.yml

3cd16c47185e6100df930e32777ef340

ASCII text

get-socket-information.yml

4902e7b8ed4c6c9a110527a7fb2c16e0

ASCII text

get-storage-device-properties.yml

477b42757a9b6eb72b10b49404cc867f

ASCII text

get-system-firmware-table.yml

39f385d01d0f73e51452b0ef64b23336

ASCII text

get-system-information-on-linux.yml

e4135a90c96e43b647eb47a1e541031d

ASCII text

get-thread-local-storage-value.yml

6cd2734f89bb6d7758d37df5c9460a43

ASCII text

get-token-privileges.yml

3c1008cebaa573b7e609b24c900b4207

ASCII text

hash-data-using-crc32b.yml

1c7ef4c4d3618596b7fa6c7fa456715d

ASCII text

hash-data-using-md4.yml

43a92457dded4e68d8bcaa4207183d72

ASCII text

hash-data-using-murmur2.yml

53c6ee0ea8ba45686aaa4c3a2ff57f48

ASCII text

hash-data-using-sha1-via-wincrypt.yml

6c479f3b3b9127bb781507499758d33d

ASCII text

hash-data-using-sha1-via-x86-extensions.yml

893a2972113dd142e26ef5e617abaeec

ASCII text

hash-data-using-sha256-via-x86-extensions.yml

fc06471c7a0104d5ffdd70417607fc08

ASCII text

hash-data-via-bcrypt.yml

04cc47bfe58127b13a11e53d36d274df

ASCII text

hide-thread-from-debugger.yml

f01f13215897ac04a3e377a0b98e31de

ASCII text

hook-routines-via-microsoft-detours.yml

5bff30c7aa22e7a22035817c1e4697cb

ASCII text

hooked-by-api-override.yml

6e79851ec43d56eac870fedec0450407

ASCII text

impersonate-user.yml

27df5fba62effbfa93186802650c4c28

ASCII text

initialize-hashing-via-wincrypt.yml

c3d8540c8eaaf677875d32c233a80da7

ASCII text

inspect-load-icon-resource.yml

95f1420dc4234c10f1befb97b0c91312

ASCII text

interact-with-iptables.yml

3c7de074609ea4124e8ddcdb9f35c032

ASCII text

link-function-at-runtime-on-linux.yml

39b33fc04b0c0dad03a6c6efd39dee12

ASCII text

linked-against-cpp-http-library.yml

2b57544cdb55e56cae1b4606e1a8ef7b

ASCII text

linked-against-cpp-json-library.yml

11048c46cb738a1e53063590723adca9

ASCII text

linked-against-cpp-regex-library.yml

6f9cef9f018b2c0d9aa2f514c466f014

ASCII text

linked-against-go-process-enumeration-library.yml

0904809bea661597bd1ea6ad6ee2b90b

ASCII text

linked-against-go-registry-library.yml

6040989c889728c94900c495fe677eb5

ASCII text

linked-against-go-static-asset-library.yml

f3fdd5e64043af56a77a92cb2d2aff66

ASCII text

linked-against-go-wmi-library.yml

d5f8e21f3ebc72e9534418ce113485ba

ASCII text

linked-against-xzip.yml

bd3045e7641e92380bffb76f069225c3

ASCII text

list-containers.yml

9bc605c0f52b01b46c0ce2e73c5c22d6

ASCII text

list-domain-servers.yml

ec298ca222c72581d8974e3513e7c5fb

ASCII text

list-drag-and-drop-files.yml

e6ffbbea6527d57dd0fc31f3b28a538a

ASCII text

list-groups-for-user-account.yml

05a9de2f999b9872c1de7b274b97ad54

ASCII text

list-tcp-connections-and-listeners.yml

945282dc3c3408cc5df9949279f52bdf

ASCII text

list-udp-connections-and-listeners.yml

2bfb2add4b41382b1a5db95cbb8eaa98

ASCII text

list-user-account-groups.yml

02ea9d2fd9d01c1d4d9507b5e43b5904

ASCII text

list-user-accounts-for-group.yml

9f8ae93a87d17c2cfd8978b323f9d37b

ASCII text

list-user-accounts.yml

57699f3fa0375a65a3378fde053a424b

ASCII text

listen-for-remote-procedure-calls.yml

d346a69abe9d7c03dd839c8a1fb11d1f

ASCII text

load-windows-common-language-runtime.yml

ef0f4ddf5f112246594aebdc37a36eb5

ASCII text

log-keystrokes-via-raw-input-data.yml

b18e8e19e484092a497d804d22348882

ASCII text

make-an-http-request-with-a-cookie.yml

887fb4511355fa9a1e1b7fb11ab37723

ASCII text

migrate-process-to-active-window-station.yml

a305e76934150e636738117fb588cd13

ASCII text

mine-cryptocurrency.yml

b23d629d1eabc745f55fb758d1a81452

ASCII text

monitor-clipboard-content.yml

335b3440b20a9eae7a74b9604d9cf34b

ASCII text

monitor-local-ipv4-address-changes.yml

5ed2ea0db30fe522430fe7f6d28af41e

ASCII text

open-cabinet-file.yml

d9bae79fb0a31eaaeb0fddf61e55f6ac

ASCII text

packaged-as-a-createinstall-installer.yml

500f1131e28cff90ac7d273079d33472

ASCII text

packaged-as-a-nsis-installer.yml

c45a498fc7af98d6cea3c6e276bb377a

ASCII text

packaged-as-a-pintool.yml

abe297a7f058f61b5645b5bdc33f13e5

ASCII text

packaged-as-a-winzip-self-extracting-archive.yml

d96d73c62f120760c622de06f82bc248

ASCII text

packaged-as-a-wise-installer.yml

1655ca8e7e51c9b61629b9d74160b738

ASCII text

packaged-as-an-installshield-installer.yml

596f073d93f60684e425f7d92d6f8737

ASCII text

packed-with-ccg.yml

02090e2768748289a92283d556feb3ed

ASCII text

packed-with-crunch.yml

21331dce08d68cc2c3fb7be65959d9a0

ASCII text

packed-with-dragon-armor.yml

4ac97cd0dd27d68ef6fe260212727044

ASCII text

packed-with-enigma.yml

75c75095e5edf91004f5e57a6da9a0ad

ASCII text

packed-with-epack.yml

afd338a547420b543f8dfdd36ec5c112

ASCII text

packed-with-maskpe.yml

776c1d60a9a5fa640731d66c43ebceb2

ASCII text

packed-with-mew.yml

38b71509ab6ee6ed9608216953f00d73

ASCII text

packed-with-mpress.yml

11b5a1ecec7ff2fdc6ca752bc296cf9a

ASCII text

packed-with-neolite.yml

6c2ff141160d72ae666f88dbf7a28f58

ASCII text

packed-with-pepack.yml

dcd5a70110c4cbd60b4e6d79a9087c12

ASCII text

packed-with-perplex.yml

f3f85f3859d986686e0c18c1c81ef7e6

ASCII text

packed-with-procrypt.yml

488bc75fe1a74ce16a9869b783e6d37b

ASCII text

packed-with-rpcrypt.yml

b489c028b5adf1b5f6d0077803d4610f

ASCII text

packed-with-seausfx.yml

553fe20aa06ff63822bebbf2e1d38f83

ASCII text

packed-with-shrinker.yml

e8861b5d61b00216aee4e4e1da23b98a

ASCII text

packed-with-simple-pack.yml

a62de31e40db06becf1ccd27a07a988b

ASCII text

packed-with-starforce.yml

73cc1457ba233d49fcb543a520101c06

ASCII text

packed-with-svkp.yml

37ff220f99bfac0946cbc57c7c024445

ASCII text

packed-with-tsuloader.yml

910847fbcf70b7475dffa26652c77601

ASCII text

packed-with-vprotect.yml

3eef5c97cadee420216a6876620c251f

ASCII text

packed-with-wwpack.yml

77d9a5e06110690fe1ea5a4c57673810

ASCII text

parse-url.yml

4c8e91b70338d4440a6d9e96f5e8ef38

ASCII text

prompt-user-for-credentials.yml

b1473aba09a93aeb5cf0637d4c6c3583

ASCII text

query-or-enumerate-registry-key-via-stdregprov.yml

cf89c73a05bc21d6f5f01529d0d715b3

ASCII text

query-or-enumerate-registry-value-via-stdregprov.yml

effc38a41f54bf97922bec33c91d9f63

ASCII text

query-remote-server-for-available-data.yml

e57735693d1592127ab30a75f69335f8

ASCII text

read-and-send-data-from-client-to-server.yml

50cdd38ae372116f03b225fb6bb95e8c

ASCII text

read-process-memory.yml

1ce32a09ac701a4eec31fb3f6df1f234

ASCII text

read-raw-disk-data.yml

97448ed72562fe558bef411d21c3eccf

ASCII text

rebuilt-by-imprec.yml

76c17f1a1fa634e2e08f31920c2b4fbc

ASCII text

receive-and-write-data-from-server-to-client.yml

afd6684c0e0c840d78add5f9a5702895

ASCII text

reference-114dns-dns-server.yml

df0884ed26c2c3772b9ba2fd6a9a8997

ASCII text

reference-aes-constants.yml

b09d6cb25c076d97cbf0b9a406358a35

ASCII text

reference-alidns-dns-server.yml

44dd6be175389be6819afba62b222eca

ASCII text

reference-cloudflare-dns-server.yml

e18b7469dc58cc42f4905ba935288f9a

ASCII text

reference-comodo-secure-dns-server.yml

dff6f17c1ea060b23314f7de1db69c86

ASCII text

reference-google-public-dns-server.yml

0e43261ec503b5042c368d063e9a907f

ASCII text

reference-hurricane-electric-dns-server.yml

b34fc870fe39eee16e94e8daeb2a9817

ASCII text

reference-kornet-dns-server.yml

6214512471fc5fcf3f7513694e1779b2

ASCII text

reference-l3-dns-server.yml

83dcf4f9a15a7ca8b767f099bbc899f0

ASCII text

reference-opendns-dns-server.yml

80a3fba1221e778cb878fb6908022689

ASCII text

reference-processor-manufacturer-constants.yml

47768b15e8a1e1970f928850f0ce5fd3

ASCII text

reference-quad9-dns-server.yml

abece2080bcc0846b91b6b7e06e6b7f7

ASCII text

reference-screen-saver-executable.yml

bc7d79f24181ed140ff46dfddab65d3b

ASCII text

reference-startup-folder.yml

838cddf457243604be0df25db50fb528

ASCII text

reference-the-vmware-io-port.yml

010120fed2956aefa1a81592a959ad91

ASCII text

reference-verisign-dns-server.yml

26967a82c0cbac55a36e60e019715f94

ASCII text

37a7687b55fa81af16cac86cc869e2d8

ASCII text

97573d71e2b333e4ad693a1e37ae4bcf

ASCII text

resize-volume-shadow-copy-storage.yml

11d6638cb9b7df36cb3be5e19f740e7d

ASCII text

resolve-function-by-fnv-1a-hash.yml

26ad5354bad391f44576bc6436fee248

ASCII text

resolve-function-by-hash.yml

68a7be2aca8abab79d0a99082f6d79d1

ASCII text

run-in-container.yml

c451ed420cf2a4005ec5c4e3b2130d48

ASCII text

run-powershell-expression.yml

ecfa5361d7161125ad62f157efc2467e

ASCII text

schedule-task-via-itaskservice.yml

435ae3f64810bf3b30c8cebab588943e

ASCII text

search-for-credit-card-data.yml

5cb2a79c975b6f2fe0528f6059f5384b

ASCII text

send-http-request-with-host-header.yml

d4be61a4a9e6a1adee4475029db48679

ASCII text

set-global-application-hook.yml

a8975cea44749738a7bbb1515ffd41ef

ASCII text

set-registry-value-via-stdregprov.yml

230407ec61ad1a0aab70e595a60f294e

ASCII text

spoof-parent-pid.yml

3dcfe2ce7530993b35456cf22168245c

ASCII text

terminate-process-by-name.yml

831828e0def8b8435522941b5e98e813

ASCII text

persist-via-iis-module.yml

76d91d99cf6ae924ae03cc8d2c7661b3

ASCII text

persist-via-isapi-extension.yml

af8b10e070782f4d592e363483cff217

ASCII text

persist-via-desktop-autostart.yml

f1f716ff0e6018d26d3d06dc721a2278

ASCII text

persist-via-shell-profile-or-rc-file.yml

470e42644fd9757e79e2884cdda7d1cf

ASCII text

disable-appinit_dlls-code-signature-enforcement.yml

5eb4b25069f0367ba220723cb3d8e1a0

ASCII text

persist-via-appinit_dlls-registry-key.yml

68020c4d53a6ec70aa1fce3d393d6416

ASCII text

persist-via-ginadll-registry-key.yml

0a3455594f9abc7ab8651bac465a3dd5

ASCII text

persist-via-active-setup-registry-key.yml

169368fb8a0a1a2a446965dea0b8f51d

ASCII text

persist-via-run-registry-key.yml

b7c8fbc52716c4f0f9fcb31d0a493c0e

ASCII text

persist-via-winlogon-helper-dll-registry-key.yml

dab9c97b928614ca6b8d58955c513067

ASCII text

schedule-task-via-command-line.yml

305e0e75d50720920969191b2fd56b06

ASCII text

schedule-task-via-itaskscheduler.yml

c1a34cec27b50e92111bc3364de16981

ASCII text

persist-via-rc-script.yml

f37247473ac390bc7b0f268b29700472

ASCII text

persist-via-windows-service.yml

4fad18fdeb13d5d64171e6c573f44f99

ASCII text

get-startup-folder.yml

13dc7613c6bd2704dec6c823bdf38d7d

ASCII text

write-file-to-startup-folder.yml

f9f8a1c49f48057873d236e122733ff3

ASCII text

compiled-to-the-net-platform.yml

ec20ebe80de527a44437c0ee8e42ba55

ASCII text

load-diebold-nixdorf-atm-library.yml

c2becdd9d06a0a0247ba3275b102282f

ASCII text

reference-diebold-atm-routines.yml

51e304862c4158c702c61df2113ed119

ASCII text

identify-atm-dispenser-service-provider.yml

a1ad54e0f07bbd21c63c90d8ba5ef26e

ASCII text

load-ncr-atm-library.yml

5a82b534864dea1dc5a23a2cd00f1162

ASCII text

reference-ncr-atm-library-routines.yml

de83d91f664a5b3f16f72b8ba0928a0b

ASCII text

identify-system-language-via-api.yml

cde9482df0d8f2ff66fd332197ab1ff2

ASCII text

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies AutoIT script.
Public Nextron YARA rules	malware	Detects mining pool protocol string in Executable

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	github.com/mandiant/capa-rules/archive/refs/tags/v3.1.0.zip	140.82.121.3	302 Found	0 B
URL User Request GET HTTP/2 github.com/mandiant/capa-rules/archive/refs/tags/v3.1.0.zip IP 140.82.121.3:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /mandiant/capa-rules/archive/refs/tags/v3.1.0.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: GitHub.com date: Wed, 17 Apr 2024 21:37:24 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With location: https://codeload.github.com/mandiant/capa-rules/zip/refs/tags/v3.1.0 cache-control: max-age=0, private strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: 5585:1B1D9C:B638987:B7DEF1F:66204114 X-Firefox-Spdy: h2

	codeload.github.com/mandiant/capa-rules/zip/refs/tags/v3.1.0	140.82.121.9	200 OK	449 kB
URL User Request GET HTTP/2 codeload.github.com/mandiant/capa-rules/zip/refs/tags/v3.1.0 IP 140.82.121.9:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subject.github.com Fingerprint0D:F6:EC:50:FA:ED:AE:6E:13:AF:82:94:52:F7:11:1B:0A:CF:7C:20 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 449 kB (449362 bytes) Hash 488a9ca82553951613a59cb1d6283d42 209b8a131856e84aa766c21f8f75458c04b8cac3 f39101aaeed27fd2c1690fcb1aed0710f155b360c5256e387850c02875d02e81 HTTP Headers `GET /mandiant/capa-rules/zip/refs/tags/v3.1.0 HTTP/1.1 Host: codeload.github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: https://render.githubusercontent.com content-disposition: attachment; filename=capa-rules-3.1.0.zip content-length: 449362 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip cross-origin-resource-policy: cross-origin etag: W/"736fd23e214940309e49a87c7be45b93f7287ec6057ae493cac365ad0b887fa2" strict-transport-security: max-age=31536000 vary: Authorization,Accept-Encoding,Origin x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block date: Wed, 17 Apr 2024 21:37:24 GMT x-github-request-id: 120C:2B27DC:422B37:4E9849:66204114 X-Firefox-Spdy: h2

	aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml	35.244.181.201		444 B
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type XML 1.0 document, ASCII text, with very long lines (332) Size 444 B (444 bytes) Hash 3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463 HTTP Headers `GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx rule-id: unknown rule-data-version: unknown content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=aRsjyyTaPw4XA352cqoLv30iIMf4S72oNEUmYt9gNipyXQ-6Czo08aeBWR6LeKjlBfnCb_46B03t9G_maYQ32e1nUlK1owRt2VdyQN13984f4aXDDIf_NKUXU8kN54RK strict-transport-security: max-age=31536000; x-content-type-options: nosniff content-security-policy: default-src 'none'; frame-ancestors 'none' x-proxy-cache-status: EXPIRED content-encoding: gzip via: 1.1 google date: Wed, 17 Apr 2024 21:37:33 GMT content-type: text/xml; charset=utf-8 vary: Accept-Encoding content-length: 444 age: 10 cache-control: public,max-age=90 alt-svc: clear X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (670)

Detections

JavaScript (0)

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers