enumerate internet cache

rule:
  meta:
    name: enumerate internet cache
    namespace: host-interaction/internet/cache
    authors:
      - michael.hunhoff@mandiant.com
    scopes:
      static: function
      dynamic: thread
  features:
    - and:
      - api: wininet.FindFirstUrlCacheEntry
      - optional:
        - api: wininet.FindNextUrlCacheEntry
        - api: wininet.FindCloseUrlCache
        - match: contain loop