{% if sub_file.cape_type %} {% endif %} {% if sub_file.type %} {% endif %} {% if sub_file.guest_paths and tab_name == "dropped" %} {% endif %} {% if sub_file.module_path and sub_file.process_path != sub_file.module_path %} {% endif %} {% if sub_file.cape_type_code == 8 or sub_file.cape_type_code == 9 %} {% endif %} {% if sub_file.cape_type_code == 5 %} {% endif %} {% if sub_file.cape_type_code == 3 or sub_file.cape_type_code == 4 %} {% else %} {% if sub_file.process_name %} {% endif %} {% if sub_file.pid %} {% endif %} {% if sub_file.process_path %} {% endif %} {% endif %} {% if sub_file.timestamp %} {% endif %} {% if sub_file.sha3_384 %} {% endif %} {% if sub_file.rh_hash %} {% endif %} {% if sub_file.tlsh %} {% endif %} {% if sub_file.clamav %} {% endif %} {% if sub_file.yara %} {% endif %} {% if sub_file.cape_yara %} {% endif %} {% if sub_file.trid %} {% endif %} {% if sub_file.die %} {% endif %} {% if sub_file.dropdir %} {% else %} {% endif %}

Type	{{sub_file.cape_type}}
Filename	{% for name in sub_file.name\|str2list %} {{name\|safe}} {% endfor %}
File Type	{{sub_file.type}}
Associated Filenames	{% for path in sub_file.guest_paths\|str2list %} {{path}} {% endfor %}
File Size	{{sub_file.size}} bytes
Module Path	{{sub_file.module_path}}
Virtual Address	{{sub_file.virtual_address}}
Section Handle	{{sub_file.section_handle}}
Target Process	{{sub_file.target_process}}
Target PID	{{sub_file.target_pid}}
Target Path	{{sub_file.target_path}}
Injecting Process	{{sub_file.process_name}}
Injecting PID	{{sub_file.pid}}
Path	{{sub_file.process_path}}
Process	{{sub_file.process_name}}
PID	{{sub_file.pid}}
Path	{{sub_file.process_path}}
PE timestamp	{{sub_file.timestamp}}
MD5	{{sub_file.md5}}
SHA1	{{sub_file.sha1}}
SHA256	{{sub_file.sha256}} [VT] [MWDB] [Bazaar]
SHA3-384	{{sub_file.sha3_384}}
RichHeader Hash	{{sub_file.rh_hash}}
CRC32	{{sub_file.crc32}}
TLSH	{{sub_file.tlsh}}
Ssdeep	{{sub_file.ssdeep}}
ClamAV	{% for sign in sub_file.clamav %} {{sign}} {% endfor %}
Yara	{% for sign in sub_file.yara %} {{sign.name}} - {{sign.meta.description}} {% if sign.meta.author %} - Author: {{sign.meta.author}} {% endif %} {% endfor %}
CAPE Yara	{% for sign in sub_file.cape_yara %} {{sign.name}} {% if sign.meta.cape_type %} - {{sign.meta.cape_type}} {% elif sign.meta.description %} - {{sign.meta.description}} {% endif %} {% if sign.meta.author %} - Author: {{sign.meta.author}}{% endif %} {% endfor %}
TriD	{% for str in sub_file.trid %} {{str}} {% endfor %}
Detect It Easy	{% for str in sub_file.die %} {{str}} {% endfor %}

{% if file.pe %} PE{% endif %} {% if file.dotnet %} DotNET{% endif %} {% if file.pdf %} PDF{% endif %} {% if file.lnk %} LNK{% endif %} {% if file.java %} Java{% endif %} {% if file.office %} Office{% endif %}	{% if sub_file.flare_capa %} FLARE CAPA {% endif %} {% if sub_file.strings %} Strings {% endif %} {% if sub_file.floss %} Floss {% endif %} {% if sub_file.data %} Text {% endif %} {% if sub_file.decoded_files %} {{sub_file.decoded_files_tool}} {% endif %} {% if sub_file.extracted_files %} {{sub_file.extracted_files_tool}} {% endif %}

{% if sub_file.flare_capa %}

{% if sub_file.flare_capa.CAPABILITY %} {{sub_file.flare_capa|flare_capa_capability}} {% endif %} {% if sub_file.flare_capa.ATTCK %} {{sub_file.flare_capa|flare_capa_attck}} {% endif %} {% if sub_file.flare_capa.MBC %} {{sub_file.flare_capa|flare_capa_mbc}} {% endif %}

{% endif %} {# {% if graphs.vba2graph.content|getkey:sub_file.sha256 %} {{ graphs.vba2graph.content|getkey:sub_file.sha256|safe }} {% endif %} #} {% if sub_file.virustotal %} {% include "generic/_virustotal.html" %} {% endif %} {% if sub_file.strings %}

{% endif %} {% if sub_file.data %}

{% endif %} {% if sub_file.decoded_files %}

{% endif %} {% if sub_file.extracted_files %}

{% for sub_file in sub_file.extracted_files %} {% include "generic/_sub_file_info.html" %} {% endfor %}

{% endif %} {# {% if sub_file.pe %}

{% include "generic/_pe.html" %}

{% endif %} {% if sub_file.dotnet %}

{% include "generic/_dotnet.html" %}

{% endif %} {% if sub_file.pdf %}

{% include "generic/_pdf.html" %}

{% endif %} {% if sub_file.lnk %}

{% include "generic/_lnk.html" %}

{% endif %} {% if sub_file.java %}

{% include "generic/_java.html" %}

{% endif %} {% if sub_file.office %}

{% include "generic/_office.html" %}

{% endif %} {% if sub_file.floss %}

{% include "generic/_floss.html" %}

{% endif %} {% if graphs.bingraph.enabled and graphs.bingraph.content|getkey:sub_file.sha256 %}{{ graphs.bingraph.content|getkey:sub_file.sha256|safe }}
{% endif %} #}