From cdb220214227e47838d313c15f2c2fc1012b99a6 Mon Sep 17 00:00:00 2001
From: doomedraven <doomedraven@gmail.com>
Date: Fri, 20 Dec 2024 10:05:52 +0100
Subject: [PATCH] small gui improvement

---
 modules/processing/behavior.py     | 2 +-
 web/templates/analysis/index.html  | 2 +-
 web/templates/analysis/search.html | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/processing/behavior.py b/modules/processing/behavior.py
index ceb039bb5df..6c5de60d74e 100644
--- a/modules/processing/behavior.py
+++ b/modules/processing/behavior.py
@@ -355,8 +355,8 @@ def _parse(self, row):
         if (
             api_name == "DllLoadNotification"
             and len(arguments) == 3
-            and arguments[0].get("value", "") == "load"
             and arguments[-1].get("name", "") == "DllBase"
+            and arguments[0].get("value", "") == "load"
             and "DllBase" not in self.environdict
             and _clean_path(arguments[1]["value"], self.options.replace_patterns) in self.environdict.get("CommandLine", "")
         ):
diff --git a/web/templates/analysis/index.html b/web/templates/analysis/index.html
index 6b7d847bcd1..a4f0a2cf73c 100644
--- a/web/templates/analysis/index.html
+++ b/web/templates/analysis/index.html
@@ -36,7 +36,7 @@
         <div class="card ">
             <div class="card-header">Recent Files</div>
             {% if files %}
-            <table class="table table-striped table-sm" style="table-layout: fixed;">
+            <table class="table table-striped table-sm table-hover" style="table-layout: fixed;">
                 <thead>
                 <tr>
                     <th width="5%">ID</th>
diff --git a/web/templates/analysis/search.html b/web/templates/analysis/search.html
index 402ea19fea2..1c0ff09bfae 100644
--- a/web/templates/analysis/search.html
+++ b/web/templates/analysis/search.html
@@ -13,7 +13,7 @@
         <div id="help" class="collapse">
             <p class="text-muted" style="margin-top: 10px;">ElasticSearch queries do not use a prefix. ie: '*windows.*' would match 'time.windows.com'</p>
             <p class="text-muted" style="margin-top: 10px;">For MD5, SHA1, SHA3 SHA256 and SHA512 no prefix is needed(will match any file generated by this analysis as binary/dropped/CAPEdump/etc).</p>
-            <table class="table table-striped table-centered">
+            <table class="table table-striped table-centered table-hover">
                 <thead>
                     <tr>
                         <th style="text-align: center;">Prefix</th>