{% if procmemory %}
{% for proc in procmemory %} {% if forloop.first %}
{% else %}
{% endif %}

Full Dump Information

{% if proc.yara %} {% endif %} {% if proc.cape_yara %} {% endif %} {% if proc.path %} {% endif %} {% if proc.strings_path %} {% endif %}
Process Name {{proc.name}}
Executable Path {{proc.proc_path}}
Yara {% for match in proc.yara %}
  • Match: {{match.name}} - {{match.meta.description}} {% if match.meta.author %} - Author: {{match.meta.author}} {% endif %}
  • {% endfor %}
    CAPE Yara {% for match in proc.cape_yara %}
  • Match: {{match.name}} {% if match.meta.cape_type %} - {{match.meta.cape_type}} {% elif match.meta.description %} - {{match.meta.description}} {% endif %} {% if match.meta.author %} - Author: {{match.meta.author}}{% endif %}
  • {% endfor %}
    Full Dump
    Process Strings
    {% if proc.address_space %}

    Address Space

    {% for memmap in proc.address_space %} {% if memmap.chunks|length >= 2 %} {% else %} {% endif %} {% if memmap.PE %} {% else %} {% endif %} {% if proc.path %} {% endif %} {% if memmap.chunks|length >= 2 %} {% for chunk in memmap.chunks %} {% if proc.path %} {% endif %} {% endfor %} {% endif %} {% endfor %}
    Start End Size Protection PE Download
    {{memmap.start}}{{memmap.start}}{{memmap.end}} {{memmap.size}} {{memmap.prot}}YesNo
    {{chunk.start}} {{chunk.end}} {{chunk.size}} {{chunk.prot}}
    {% endif %}
    {% endfor %}
    {% else %}
    Sorry! No process dumps.
    {% endif %}