duplicated block id: 1
size: 32 cleaned lines of code
in 2 files:
 - cortado/rtas/src/thread_injector_intel.c (28:89)
 - cortado/rtas/src/thread_injector_m1.c (23:84)

duplicated block id: 2
size: 13 cleaned lines of code
in 2 files:
 - cortado/rtas/unsigned_startup_item_netconn.py (31:43)
 - cortado/rtas/user_mode_smb_connection.py (29:41)

duplicated block id: 3
size: 12 cleaned lines of code
in 2 files:
 - cortado/rtas/funzip_extract_content.py (51:66)
 - cortado/rtas/ssh_bruteforce.py (40:55)

duplicated block id: 4
size: 11 cleaned lines of code
in 2 files:
 - cortado/rtas/src/thread_injector_intel.c (122:159)
 - cortado/rtas/src/thread_injector_m1.c (116:153)

duplicated block id: 5
size: 11 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_webserver_curl_wget_download_ip_args.py (20:31)
 - cortado/rtas/linux_persistence_webserver_curl_wget_piped_to_interpreter.py (20:31)

duplicated block id: 6
size: 11 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py (25:39)
 - cortado/rtas/linux_hidden_executable_netcon.py (25:36)

duplicated block id: 7
size: 10 cleaned lines of code
in 2 files:
 - cortado/rtas/cscript_suspicious_args.py (23:35)
 - cortado/rtas/exec_cscript_archive_args.py (24:35)

duplicated block id: 8
size: 10 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_webserver_curl_wget_download_ip_args.py (21:31)
 - cortado/rtas/linux_persistence_webserver_curl_wget_suspicious_redirect.py (19:29)

duplicated block id: 9
size: 10 cleaned lines of code
in 2 files:
 - cortado/rtas/uac_computerdefaults.py (19:30)
 - cortado/rtas/uac_fodhelper.py (19:30)

duplicated block id: 10
size: 10 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_webserver_curl_wget_piped_to_interpreter.py (21:31)
 - cortado/rtas/linux_persistence_webserver_curl_wget_suspicious_redirect.py (19:29)

duplicated block id: 11
size: 10 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_linux_powershell_outbound_network_connection.py (36:53)
 - cortado/rtas/linux_motd_netcon.py (40:57)

duplicated block id: 12
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)

duplicated block id: 13
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 14
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)

duplicated block id: 15
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)

duplicated block id: 16
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 17
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)

duplicated block id: 18
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)

duplicated block id: 19
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/unusual_kerberos_client.py (54:62)
 - cortado/rtas/unusual_rdp_client.py (36:44)

duplicated block id: 20
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/inhibit_system_recovery.py (36:46)
 - cortado/rtas/inhibit_system_recovery.py (50:58)

duplicated block id: 21
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_hidden_process_unusual_execution.py (25:34)
 - cortado/rtas/linux_execution_setsid_nohup_unusual_execution.py (25:34)

duplicated block id: 22
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 23
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 24
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/lua_image_load.py (42:50)
 - cortado/rtas/unusual_rdp_client.py (36:44)

duplicated block id: 25
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)

duplicated block id: 26
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 27
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_suspicious_child_execution.py (28:37)
 - cortado/rtas/linux_execution_hidden_process_unusual_execution.py (25:34)

duplicated block id: 28
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)

duplicated block id: 29
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)

duplicated block id: 30
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)

duplicated block id: 31
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)

duplicated block id: 32
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)

duplicated block id: 33
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)

duplicated block id: 34
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)

duplicated block id: 35
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/lua_image_load.py (42:50)
 - cortado/rtas/unusual_kerberos_client.py (54:62)

duplicated block id: 36
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)

duplicated block id: 37
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_suspicious_child_execution.py (28:37)
 - cortado/rtas/linux_execution_setsid_nohup_unusual_execution.py (25:34)

duplicated block id: 38
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/plist_creation.py (22:30)
 - cortado/rtas/plistbuddy_file_modification.py (16:24)

duplicated block id: 39
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 40
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 41
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 42
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 43
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)

duplicated block id: 44
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_ld_so.py (25:35)

duplicated block id: 45
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)

duplicated block id: 46
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 47
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_process_masquerading_via_exec.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)

duplicated block id: 48
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 49
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_split.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 50
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)

duplicated block id: 51
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_dnguard_program.py (16:24)
 - cortado/rtas/image_load_dnguard.py (16:24)

duplicated block id: 52
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 53
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sed.py (25:35)

duplicated block id: 54
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_crash.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)

duplicated block id: 55
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_php.py (25:35)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (25:35)

duplicated block id: 56
size: 9 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_pidstat.py (25:35)
 - cortado/rtas/linux_defense_evasion_proxy_execution_via_sysctl.py (25:35)

duplicated block id: 57
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_suspicious_echo_execution.py (21:28)
 - cortado/rtas/linux_persistence_webserver_curl_wget_suspicious_redirect.py (21:29)

duplicated block id: 58
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_gsocket_activity.py (21:29)
 - cortado/rtas/linux_persistence_webserver_curl_wget_piped_to_interpreter.py (23:31)

duplicated block id: 59
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/dynwrapx_image_load.py (22:29)
 - cortado/rtas/windows_script_host_file_written_exec.py (23:30)

duplicated block id: 60
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/port_monitor.py (21:28)
 - cortado/rtas/reg_mod_print_processors.py (16:23)

duplicated block id: 61
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_gsocket_activity.py (21:29)
 - cortado/rtas/linux_persistence_suspicious_echo_execution.py (21:28)

duplicated block id: 62
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py (23:30)
 - cortado/rtas/linux_execution_hidden_process_unusual_execution.py (21:28)

duplicated block id: 63
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_scripting_persistence_locations.py (18:25)
 - cortado/rtas/persistence_startup_unusual_process.py (24:31)

duplicated block id: 64
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_suspicious_echo_execution.py (21:28)
 - cortado/rtas/linux_persistence_webserver_curl_wget_piped_to_interpreter.py (23:31)

duplicated block id: 65
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/sip_provider.py (59:66)
 - cortado/rtas/trust_provider.py (50:57)

duplicated block id: 66
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py (23:30)
 - cortado/rtas/linux_execution_interactive_shell_spawn_from_hidden_process.py (21:28)

duplicated block id: 67
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_hidden_process_unusual_execution.py (21:28)
 - cortado/rtas/linux_execution_interactive_shell_spawn_from_hidden_process.py (21:28)

duplicated block id: 68
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/lua_image_load.py (47:54)
 - cortado/rtas/unsigned_startup_item_netconn.py (35:42)

duplicated block id: 69
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_gsocket_activity.py (21:29)
 - cortado/rtas/linux_persistence_webserver_curl_wget_suspicious_redirect.py (21:29)

duplicated block id: 70
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_dpkg_netcon.py (43:50)
 - cortado/rtas/linux_persistence_motd_netcon_parent_child.py (34:41)

duplicated block id: 71
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_gsocket_activity.py (21:29)
 - cortado/rtas/linux_persistence_webserver_curl_wget_download_ip_args.py (23:31)

duplicated block id: 72
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/lua_image_load.py (47:54)
 - cortado/rtas/user_mode_smb_connection.py (33:40)

duplicated block id: 73
size: 8 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_persistence_suspicious_echo_execution.py (21:28)
 - cortado/rtas/linux_persistence_webserver_curl_wget_download_ip_args.py (23:31)

duplicated block id: 74
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/launchagent_plist.py (23:29)
 - cortado/rtas/launchdaemon_persistence.py (22:28)

duplicated block id: 75
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/_common.py (377:383)
 - cortado/rtas/_common.py (392:398)

duplicated block id: 76
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_cmd_netsh_advfirewall_network_discovery.py (20:27)
 - cortado/rtas/exec_cmd_netsh_remotedesktop.py (22:29)

duplicated block id: 77
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/dscl_hidden_account.py (17:23)
 - cortado/rtas/net_user_add.py (23:29)

duplicated block id: 78
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/execution_iso_dll_rundll32.py (26:34)
 - cortado/rtas/execution_iso_dll_sideload.py (26:34)

duplicated block id: 79
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_renice_ulimit.py (21:28)
 - cortado/rtas/linux_impact_potential_mining_pool_detection.py (21:28)

duplicated block id: 80
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/msoffice_file_exec_script_interpreter.py (21:28)
 - cortado/rtas/suspicious_office_child.py (19:26)

duplicated block id: 81
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/edmond_child_process.py (16:22)
 - cortado/rtas/emond_child_process.py (16:23)

duplicated block id: 82
size: 7 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_scripting_persistence_locations.py (31:37)
 - cortado/rtas/exec_scripting_persistence_locations.py (42:48)

duplicated block id: 83
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_hidden_process_unusual_execution.py (23:28)
 - cortado/rtas/linux_hidden_executable_netcon.py (25:30)

duplicated block id: 84
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/ms_office_task_creation.py (23:29)
 - cortado/rtas/msoffice_file_dll_sideload.py (25:31)

duplicated block id: 85
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/uac_clipup.py (22:27)
 - cortado/rtas/uac_windir_masq.py (20:25)

duplicated block id: 86
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_interactive_shell_spawn_from_hidden_process.py (23:28)
 - cortado/rtas/linux_hidden_executable_netcon.py (25:30)

duplicated block id: 87
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_shell_execution.py (19:24)
 - cortado/rtas/linux_execution_cupsd_foomatic_rip_suspicious_child_execution.py (21:26)

duplicated block id: 88
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/msoffice_descendant_reg_mod_persistence.py (33:40)
 - cortado/rtas/msoffice_reg_mod.py (28:35)

duplicated block id: 89
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/curl_payload_download.py (20:25)
 - cortado/rtas/curl_sus_payload.py (20:25)

duplicated block id: 90
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/suspicious_parent_msbuild_explorer.py (21:26)
 - cortado/rtas/suspicious_parent_msbuild_script.py (21:26)

duplicated block id: 91
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/regsvr32_scrobj.py (20:25)
 - cortado/rtas/regsvr32_unusual_args.py (19:24)

duplicated block id: 92
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/credaccess_sam_from_vss.py (49:54)
 - cortado/rtas/credaccess_sam_from_vss.py (59:64)

duplicated block id: 93
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/mshta_network.py (24:29)
 - cortado/rtas/unusual_ms_tool_network.py (56:61)

duplicated block id: 94
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_command_and_control_cupsd_foomatic_rip_netcon.py (25:33)
 - cortado/rtas/linux_persistence_motd_netcon_parent_child.py (25:33)

duplicated block id: 95
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/cscript_suspicious_args.py (19:24)
 - cortado/rtas/exec_unusual_directory.py (18:23)

duplicated block id: 96
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_cmd_short_name.py (20:25)
 - cortado/rtas/exec_renamed_msbuild.py (20:25)

duplicated block id: 97
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_cscript_archive_args.py (24:30)
 - cortado/rtas/execution_pubprn.py (23:29)

duplicated block id: 98
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/keychain_cred_access.py (23:28)
 - cortado/rtas/keychain_dump.py (20:25)

duplicated block id: 99
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/registry_persistence_create.py (66:71)
 - cortado/rtas/settingcontentms_files.py (24:29)

duplicated block id: 100
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/linux_reverse_shell_via_netcat.py (28:33)
 - cortado/rtas/linux_reverse_shell_via_utility.py (30:35)

duplicated block id: 101
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/credential_dumping_via_proc.py (30:37)
 - cortado/rtas/mimipenguin_execution.py (30:37)

duplicated block id: 102
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/cscript_suspicious_args.py (23:29)
 - cortado/rtas/execution_pubprn.py (23:29)

duplicated block id: 103
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/suspicious_parent_msbuild_explorer.py (21:26)
 - cortado/rtas/suspicious_parent_msbuild_office.py (21:26)

duplicated block id: 104
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/msoffice_descendant_reg_mod_persistence.py (22:28)
 - cortado/rtas/msoffice_reg_mod.py (19:25)

duplicated block id: 105
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/image_load_dnguard.py (21:27)
 - cortado/rtas/image_load_rdp_client_dll.py (20:26)

duplicated block id: 106
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/exec_unusual_directory.py (18:23)
 - cortado/rtas/rundll32_unusual_dll_extension.py (21:26)

duplicated block id: 107
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/defensive_evasion_safari_modification.py (26:31)
 - cortado/rtas/disable_os_security_updates.py (22:27)

duplicated block id: 108
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/cscript_suspicious_args.py (19:24)
 - cortado/rtas/rundll32_unusual_dll_extension.py (21:26)

duplicated block id: 109
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/bitsadmin_download.py (24:29)
 - cortado/rtas/suspicious_office_descendant_fp.py (23:28)

duplicated block id: 110
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/suspicious_parent_msbuild_office.py (21:26)
 - cortado/rtas/suspicious_parent_msbuild_script.py (21:26)

duplicated block id: 111
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/__init__.py (82:87)
 - cortado/rtas/__init__.py (113:118)

duplicated block id: 112
size: 6 cleaned lines of code
in 2 files:
 - cortado/rtas/network_connection_nslookup.py (25:30)
 - cortado/rtas/network_connection_nslookup.py (31:36)