{% load key_tags %}

<div class="panel panel-default">
    <table class="table table-striped table-bordered"
        {% if tab_name == "static" %}
            style="table-layout: fixed;"
        {% else %}
            style="table-layout: fixed; width: 50%;margin-left: auto;margin-right: auto;"
        {% endif %}
        >

        {% if source_url %}
            <tr>
                <th style="border-top: 0; width: 15%;">File downloaded from</th>
                <td style="border-top: 0; word-wrap: break-word;">{{source_url|escape}}</td>
            </tr>
            {% endif %}

        {% if file.cape_type %}
            <tr>
                <th style="border-top: 0; width: 15%;">Type</th>
                <td style="border-top: 0; word-wrap: break-word;"><b>{{file.cape_type}}</b></td>
            </tr>
        {% endif %}
        <tr>
            <th style="border-top: 0; width: 15%;">File Name</th>
            <td>
                {% for name in file.name|str2list %}
                <div style="border-top: 0; word-wrap: break-word;"><b>{{name|safe}}</b></div>
                {% endfor %}
            </td>
        </tr>
        {% if file.type %}
            <tr>
                <th style="border-top: 0; width: 15%;">File Type</th>
                <td style="border-top: 0; word-wrap: break-word;"><b>{{file.type}}</b></td>
            </tr>
        {% endif %}
        {% if file.guest_paths and tab_name == "dropped" %}
            <tr>
                <th style="border-top: 0; width: 15%;">Associated Filenames</th>
                <td style="border-top: 0; word-wrap: break-word;">
                    {% for path in file.guest_paths|str2list %}
                        <div>{{path}}</div>
                    {% endfor %}
                </td>
            </tr>
        {% endif %}
        <tr>
            <th style="border-top: 0; width: 15%;">File Size</th>
            <td style="border-top: 0; word-wrap: break-word;"><b>{{file.size}} bytes</b></td>
        </tr>
        {% if file.module_path and file.process_path != file.module_path %}
            <tr>
                <th>Module Path</th>
                <td>{{file.module_path}}</td>
            </tr>
        {% endif %}
        {% if file.cape_type_code == 8 or file.cape_type_code == 9 %}
                <tr>
                    <th>Virtual Address</th>
                    <td>{{file.virtual_address}}</td>
                </tr>
            {% endif %}
            {% if file.cape_type_code == 5 %}
                <tr>
                    <th>Section Handle</th>
                    <td>{{file.section_handle}}</td>
                </tr>
            {% endif %}
            {% if file.cape_type_code == 3 or file.cape_type_code == 4 %}
                <tr>
                    <th>Target Process</th>
                    <td>{{file.target_process}}</td>
                </tr>
                <tr>
                    <th>Target PID</th>
                    <td>{{file.target_pid}}</td>
                </tr>
                <tr>
                    <th>Target Path</th>
                    <td>{{file.target_path}}</td>
                </tr>
                <tr>
                    <th>Injecting Process</th>
                    <td>{{file.process_name}}</td>
                </tr>
                <tr>
                    <th>Injecting PID</th>
                    <td>{{file.pid}}</td>
                </tr>
                <tr>
                    <th>Path</th>
                    <td>{{file.process_path}}</td>
                </tr>
            {% else %}
                {% if file.process_name %}
                <tr>
                    <th>Process</th>
                    <td>{{file.process_name}}</td>
                </tr>
                {% endif %}
                {% if file.pid %}
                <tr>
                    <th>PID</th>
                    <td>{{file.pid}}</td>
                </tr>
                {% endif %}
                {% if file.process_path %}
                <tr>
                    <th>Path</th>
                    <td>{{file.process_path}}</td>
                </tr>
                {% endif %}
            {% endif %}
        {% if file.timestamp %}
            <tr>
                <th>PE timestamp</th>
                <td style="word-wrap: break-word;">{{file.timestamp}}</td>
            </tr>
        {% endif %}
        <tr>
            <th>MD5</th>
            <td style="word-wrap: break-word;">{{file.md5}}</td>
        </tr>
        <tr>
            <th>SHA1</th>
            <td style="word-wrap: break-word;">{{file.sha1}}</td>
        </tr>
        <tr>
            <th>SHA256</th>
            <td style="word-wrap: break-word;">{{file.sha256}}
                <a href="https://www.virustotal.com/gui/file/{{file.sha256}}/" style="color: #e74c3c">[VT]</a>
                <a href="https://mwdb.cert.pl/file/{{file.sha256}}" style="color: #e74c3c">[MWDB]</a>
                <a href="https://bazaar.abuse.ch/sample/{{file.sha256}}/" style="color: #e74c3c">[Bazaar]</a>
            </td>
        </tr>
        {% if file.sha3_384 %}
        <tr>
            <th>SHA3-384</th>
            <td style="word-wrap: break-word;">{{file.sha3_384}}</td>
        </tr>
        {% endif %}
        {% if file.rh_hash %}
            <tr>
                <th>RichHeader Hash</th>
                <td style="word-wrap: break-word;">{{file.rh_hash}}</td>
            </tr>
        {% endif %}
        <tr>
            <th>CRC32</th>
            <td>{{file.crc32}}</td>
        </tr>
        {% if file.tlsh %}
        <tr>
            <th>TLSH</th>
            <td style="word-wrap: break-word;">{{file.tlsh}}</td>
        </tr>
        {% endif %}
        <tr>
            <th>Ssdeep</th>
            <td style="word-wrap: break-word;">{{file.ssdeep}}</td>
        </tr>
        {% if file.clamav %}
        <tr>
            <th>ClamAV</th>
            <td>
                <ul style="margin-bottom: 0;">
                {% for sign in file.clamav %}
                    <li>{{sign}}</li>
                {% endfor %}
                </ul>
            </td>
        </tr>
        {% endif %}
        {% if file.yara %}
        <tr>
            <th>
            {% if config.yara_detail %}
                <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#yara_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="yara_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display Yara details"><span class="fas fa-file-lines"></span> Yara</a>
            {% else %}
                Yara
            {% endif %}
            </th>
            <td>
                <ul style="margin-bottom: 0;">
                {% for sign in file.yara %}
                    <li>
                    <a href="/analysis/search/yaraname:{{sign.name}}">{{sign.name}}</a>  - {{sign.meta.description}}
                    {% if sign.meta.author %}
                        - Author: {{sign.meta.author}}
                    {% endif %}
                    </li>
                {% endfor %}
                </ul>
            </td>
        </tr>
        {% endif %}
        {% if file.cape_yara %}
        <tr>
            <th>
            {% if config.yara_detail %}
                <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#capeyara_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="capeyara_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display CAPE Yara details"><span class="fas fa-file-lines"></span> CAPE Yara</a>
            {% else %}
                CAPE Yara
            {% endif %}
            </th>
            <td>
                <ul style="margin-bottom: 0;">
                {% for sign in file.cape_yara %}
                    <li>
                    <a href="/analysis/search/capeyara:{{sign.name}}">{{sign.name}}</a>
                    {% if sign.meta.cape_type %} - {{sign.meta.cape_type}}
                    {% elif sign.meta.description %} - {{sign.meta.description}}
                    {% endif %}
                    {% if sign.meta.author %} - Author: {{sign.meta.author}}{% endif %}
                    </li>
                {% endfor %}
                </ul>
            </td>
        </tr>
        {% endif %}
        {% if file.trid %}
        <tr>
            <th>TriD</th>
            <td>
            <ul style="margin-top: 0;margin-bottom: 0;">
                {% for str in file.trid %}
                    <li>{{str}}</li>
                {% endfor %}
            </ul>
            </td>
        </tr>
        {% endif %}

        {% if file.die %}
        <tr>
            <th>Detect It Easy</th>
            <td>
            <ul style="margin-top: 0;margin-bottom: 0;">
                {% for str in file.die %}
                    <li>{{str}}</li>
                {% endfor %}
            </ul>
            </td>
        </tr>
        {% endif %}

        {% if file.dropdir %}
        <tr>
            <th></th>
            <td><a href="{% url "file" tab_name id file.dropdir %}" class="btn btn-secondary btn-sm">Download</a></td>
        </tr>
        {% else %}
        <tr>
            <th>
                {% if file.pe %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#pe_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="pe_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display PE info"><span class="fas fa-file-lines"></span> PE</a>{% endif %}
                {% if file.dotnet %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#dotnet_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="dotnet_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display DotNet info"><span class="fas fa-file-lines"></span> DotNET</a>{% endif %}
                {% if file.pdf %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#pdf_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="pdf_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display PDF info"><span class="fas fa-file-lines"></span> PDF</a>{% endif %}
                {% if file.lnk %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#lnk_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="lnk_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display LNK info"><span class="fas fa-file-lines"></span> LNK</a>{% endif %}
                {% if file.rdp %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#rdp_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="rdp_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display RDP file info"><span class="fas fa-file-lines"></span> RDP</a>{% endif %}
                {% if file.java %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#java_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="java_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display Java info"><span class="fas fa-file-lines"></span> Java</a>{% endif %}
                {% if file.office %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#office_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="office_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display Office info"><span class="fas fa-file-lines"></span> Office</a>{% endif %}
                {% if file.office.XLMMacroDeobfuscator %}<a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#xlmmacro_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="xlmmacro_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display XLM Macro"><span class="fas fa-file-lines"></span> XLM Macro</a>{% endif %}
                <!--ToDo missed URL-->
            </th>
            <td>
                {% if not config.zipped_download %}
                    <a href="{% url "file" tab_name id file.sha256 %}" class="btn btn-secondary btn-sm" data-bs-toggle="tooltip" title="Download file"><span class="fas fa-download"></span></a>
                {% endif %}
                <a href="{% url "file" tab_name|add:"zip" id file.sha256 %}" class="btn btn-secondary btn-sm" data-bs-toggle="tooltip" title="Download password-protected file archive"><span class="fas fa-file-archive"></span> <span class="fas fa-download"></span></a>
                <a class="btn btn-secondary btn-sm" href="/submit/resubmit/{{id}}/{{file.sha256}}" data-bs-toggle="tooltip" title="Re-submit file for analysis"><span class="fas fa-sync"></span> File</a>
                {% if config.flare_capa %}
                    {% if not file.flare_capa and on_demand.flare_capa %}
                        <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "flare_capa" id tab_name file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Generate CAPA findings"><span class="fas fa-cogs"></span> CAPA</a>
                    {% elif file.flare_capa %}
                        <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#flare_capa_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="flare_capa_{{file.sha256}}">FLARE CAPA</a>
                    {% endif %}
                {% endif %}
                {% if config.strings %}
                    {% if "strings" not in file %}
                        <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "strings" id tab_name file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Generate strings"><span class="fas fa-cogs"></span> Strings</a>
                    {% elif file.strings %}
                        <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#strings_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="strings_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display strings"><span class="fas fa-envelope-open-text"></span> Strings</a>
                    {% endif %}
                {% endif %}
                {% if file.dotnet_strings %}
                    <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#dotnet_strings_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="dotnet_strings_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display strings"><span class="fas fa-envelope-open-text"></span> DotNet Strings</a>
                {% endif %}
                {% if config.floss %}
                    {% if not file.floss %}
                        <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "floss" id tab_name file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Generate floss strings"><span class="fas fa-cogs"></span> Floss</a>
                    {% else %}
                        <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#floss_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="floss_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display floss strings"><span class="fas fa-envelope-open-text"></span> Floss</a>
                    {% endif %}
                {% endif %}
                {% if config.bingraph %}
                    {% if not graphs.bingraph.content|getkey:file.sha256 and on_demand.bingraph %}
                    <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "bingraph" id tab_name file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Generate BinGraph"><span class="fas fa-cogs"></span> BinGraph</a>
                    {% else %}
                        <a class="btn btn-secondary btn-sm" href="{% url "file_nl" "bingraph" id file.sha256 %}" aria-expanded="false" aria-controls="bingraph_{{file.sha256}}"  title="Display Bingraph"><span class="fas fa-download"></span> BinGraph</a>
                    {% endif %}
                {% endif %}
                <!--add type check-->
                {% if graphs.vba2graph.enabled %}
                    {% if not graphs.vba2graph.content|getkey:file.sha256 and on_demand.vba2graph %}
                        <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "vba2graph" id "static" file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Generate vba2Graph"><span class="fas fa-cogs"></span> Vba2Graph</a>
                    {% elif graphs.vba2graph.content|getkey:file.sha256 %}
                        <a href="{% url "file_nl" "vba2graph" id file.sha256 %}" class="btn btn-secondary btn-sm"><span class="fas fa-download"> Vba2Graph</a>
                    {% endif %}
                {% endif %}
                {% if config.virustotal and not file.virustotal and on_demand.virustotal %}
                    <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "virustotal" id tab_name file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Fetch VirusTotal results"><span class="fas fa-cogs"></span> VirusTotal</a>
                {% endif %}
                {% if file.office and config.xlsdeobf and not file.office.XLMMacroDeobfuscator and on_demand.xlsdeobf %}
                    <a class="btn btn-secondary btn-sm" href="{% url "on_demand" "xlsdeobf" id "static" file.sha256 %}" role="button" data-bs-toggle="tooltip" title="Run XLMMacroDeobfuscator"><span class="fas fa-cogs"></span><i class="far fa-file-excel"></i> XLMMacros</a>
                {% endif %}
                {% if config.vtupload and analysis.info.tlp != "Red" %}
                    <a class="btn btn-secondary btn-sm" href="{% url "vtupload" tab_name id file.name file.sha256 %}"><span class="fas fa-exclamation-triangle"></span> <span class="fas fa-upload"></span> VirusTotal</a>
                {% endif %}
                {% if file.data %}
                    <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#text_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="text_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display text"><span class="fas fa-envelope-open-text"></span> Text</a>
                {% endif %}
                {% if file.decoded_files %}
                    <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#decoded_files_{{file.sha256}}" role="button" aria-expanded="false" aria-controls="decoded_files_{{file.sha256}}"  data-bs-toggle="tooltip" title="Display text"><span class="fas fa-envelope-open-text"></span> {{file.decoded_files_tool}}</a>
                {% endif %}
                {% if file.selfextract %}
                    {% for name, details in file.selfextract.items %}
                        <a class="btn btn-secondary btn-sm" data-toggle="collapse" href="#selfextract_{{name}}" role="button" aria-expanded="false" aria-controls="selfextract_{{name}}"  data-bs-toggle="tooltip" title="Display extracted files"><span class="fas fa-archive"></span> {{name}} ({{details.extracted_files_time|floatformat:2}})</a>
                    {% endfor %}
                {% endif %}
            </td>
        </tr>
        {% endif %}
    </table>

        {% if file.flare_capa %}
            <tr>
                <th></th><td>
                <div class="collapse" id="flare_capa_{{file.sha256}}">
                    <div>
                    <!--Inspired by @snemes trick, code placed in web/views/templateatgs/analysis_tags.py-->
                    {% if file.flare_capa.CAPABILITY %}
                        {{file.flare_capa|flare_capa_capability}}
                    {% endif %}
                    {% if file.flare_capa.ATTCK %}
                        {{file.flare_capa|flare_capa_attck}}
                    {% endif %}
                    {% if file.flare_capa.MBC %}
                        {{file.flare_capa|flare_capa_mbc}}
                    {% endif %}
                    </div>
                </div>
            </td>
            </tr>
            </br>
        {% endif %}
        {% if graphs.vba2graph.enabled and graphs.vba2graph.content|getkey:file.sha256 %}
            <tr><th></th>
                <td>{{ graphs.vba2graph.content|getkey:file.sha256|safe }}</td>
            </tr>
        {% endif %}
        {% if file.virustotal %}
            <tr>
                <th></th>
                <td>{% include "analysis/generic/_virustotal.html" %}</td>
            </tr>
        {% endif %}<br>
        {% if file.misp.event_link %}
        <tr>
            <th></th>
            <td>{% include "analysis/generic/_misp.html" %}</td>
        </tr>
        {% endif %}
        {% if file.strings %}
            <tr>
                <th></th><td>
                <div class="collapse" id="strings_{{file.sha256}}">
                    <div>
                    {% for string in file.strings %}
                        <div>{{string}}</div>
                    {% endfor %}
                    </div>
                </div>
            </td>
            </tr>
        {% endif %}
        {% if file.dotnet_strings %}
            <tr>
                <th></th><td>
                <div class="collapse" id="dotnet_strings_{{file.sha256}}">
                    <div>
                    {% for string in file.dotnet_strings %}
                        <div>{{string}}</div>
                    {% endfor %}
                    </div>
                </div>
            </td>
            </tr>
        {% endif %}
        {% if file.data %}
            <tr>
                <th></th><td>
                <div class="collapse" id="text_{{file.sha256}}">
                    <div>
                    <pre>{{file.data|escape}}</pre>
                    </div>
                </div>
                </td>
            </tr>
        {% endif %}
        {% if file.decoded_files %}
            <tr>
                <th></th><td>
                <div class="collapse" id="decoded_files_{{file.sha256}}">
                    <div>
                    <p>{{file.decoded_files|escape}}</p>
                    </div>
                </div>
            </td>
            </tr>
        {% endif %}
        {% if file.selfextract %}
            {% for name, details in file.selfextract.items %}
                <tr>
                    <th></th><td>
                    <div class="collapse" id="selfextract_{{name}}">
                        <div>
                            {% if details.password %}
                            <tr>
                                <th style="border-top: 0; width: 15%;">Archive password:</th>
                                <td style="border-top: 0; word-wrap: break-word;"><b>{{details.password}}</b></td>
                            </tr>
                            {% endif %}
                        {% for sub_file in details.extracted_files %}
                            {% include "analysis/generic/_subfile_info.html" %}
                        {% endfor %}
                        </div>
                    </div>
                    </td>
                </tr>
            {% endfor %}
            </br>
        {% endif %}
    {% if config.yara_detail and file.yara %} <div class="collapse" id="yara_{{file.sha256}}"> <div> {% include "analysis/generic/_yara.html" %}</div></div></br>{% endif %}
    {% if config.yara_detail and file.cape_yara %} <div class="collapse" id="capeyara_{{file.sha256}}"> <div> {% include "analysis/generic/_capeyara.html" %}</div></div></br>{% endif %}
    {% if file.pe %} <div class="collapse" id="pe_{{file.sha256}}"> <div> {% include "analysis/generic/_pe.html" %}</div></div></br>{% endif %}
    {% if file.dotnet %} <div class="collapse" id="dotnet_{{file.sha256}}"> <div> {% include "analysis/generic/_dotnet.html" %}</div></div></br>{% endif %}
    {% if file.pdf %} <div class="collapse" id="pdf_{{file.sha256}}"> <div> {% include "analysis/generic/_pdf.html" %}</div></div></br>{% endif %}
    {% if file.lnk %} <div class="collapse" id="lnk_{{file.sha256}}"> <div> {% include "analysis/generic/_lnk.html" %}</div></div></br>{% endif %}
    {% if file.rdp %} <div class="collapse" id="rdp_{{file.sha256}}"> <div> {% include "analysis/generic/_rdp.html" %}</div></div></br>{% endif %}
    {% if file.java %} <div class="collapse" id="java_{{file.sha256}}"> <div> {% include "analysis/generic/_java.html" %}</div></div></br>{% endif %}
    {% if file.office %} <div class="collapse" id="office_{{file.sha256}}"> <div> {% include "analysis/generic/_office.html" %}</div></div></br>{% endif %}
    {% if file.office.XLMMacroDeobfuscator %} <div class="collapse" id="xlmmacro_{{file.sha256}}"> <div> {% include "analysis/generic/_xlmmacro.html" %}</div></div></br>{% endif %}
    {% if file.floss %} <div class="collapse" id="floss_{{file.sha256}}"> <div> {% include "analysis/generic/_floss.html" %}</div></div></br>{% endif %}
    {% if graphs.bingraph.enabled and graphs.bingraph.content|getkey:file.sha256 %}<center><td>{{ graphs.bingraph.content|getkey:file.sha256|safe }}</td></center></br>{% endif %}
</div>