small gui improvement

modules/processing/behavior.py

@@ -355,8 +355,8 @@ def _parse(self, row):
         if (
             api_name == "DllLoadNotification"
             and len(arguments) == 3
-            and arguments[0].get("value", "") == "load"
             and arguments[-1].get("name", "") == "DllBase"
+            and arguments[0].get("value", "") == "load"
             and "DllBase" not in self.environdict
             and _clean_path(arguments[1]["value"], self.options.replace_patterns) in self.environdict.get("CommandLine", "")
         ):

web/templates/analysis/index.html

@@ -36,7 +36,7 @@
         <div class="card ">
             <div class="card-header">Recent Files</div>
             {% if files %}
-            <table class="table table-striped table-sm" style="table-layout: fixed;">
+            <table class="table table-striped table-sm table-hover" style="table-layout: fixed;">
                 <thead>
                 <tr>
                     <th width="5%">ID</th>

web/templates/analysis/search.html

@@ -13,7 +13,7 @@
         <div id="help" class="collapse">
             <p class="text-muted" style="margin-top: 10px;">ElasticSearch queries do not use a prefix. ie: '*windows.*' would match 'time.windows.com'</p>
             <p class="text-muted" style="margin-top: 10px;">For MD5, SHA1, SHA3 SHA256 and SHA512 no prefix is needed(will match any file generated by this analysis as binary/dropped/CAPEdump/etc).</p>
-            <table class="table table-striped table-centered">
+            <table class="table table-striped table-centered table-hover">
                 <thead>
                     <tr>
                         <th style="text-align: center;">Prefix</th>