diff --git a/winapi/Win32.WinAPI.RegCreateKeyExW.yara b/winapi/Win32.WinAPI.RegCreateKeyExW.yara index dc62832..237fee8 100644 --- a/winapi/Win32.WinAPI.RegCreateKeyExW.yara +++ b/winapi/Win32.WinAPI.RegCreateKeyExW.yara @@ -4,15 +4,10 @@ rule Win32_WinAPI_RegCreateKeyExW description = "Detects registry key creation from Win32 API function RegCreateKeyExW." author = "dubfib" date = "2024-11-25" - yarahub_uuid = "c4149c4a-3771-4283-bb89-5b90a68805f4" - yarahub_license = "CC BY 4.0" - yarahub_rule_matching_tlp = "TLP:WHITE" - yarahub_rule_sharing_tlp = "TLP:WHITE" - yarahub_reference_md5 = "3c0a053c97300914ce205807a698ba12" strings: $pattern = { 52 65 67 43 72 65 61 74 65 4B 65 79 45 78 57 } condition: $pattern -} \ No newline at end of file +}