{% if analysis.procmemory %}
Process Name | {{proc.name}} |
---|---|
Executable Path | {{proc.path}} |
Yara |
{% if proc.yara %}
{% for match in proc.yara %}
Match: {{match.name}} - {{match.meta.description}} {% for string in match.strings %} {{string}}
{% endfor %}
{% endfor %}
{% else %}
None matched
{% endif %}
|
Full Dump | Download |
Full Dump | Download |
Start | End | Size | Protection | PE | Download | |||
---|---|---|---|---|---|---|---|---|
{{memmap.start}} | {% else %}{{memmap.start}} | {% endif %}{{memmap.end}} | {{memmap.size}} | {{memmap.prot}} | {% if memmap.PE %}Yes | {% else %}No | {% endif %} {% if proc.file %} {% if config.mongodb %}Download | {% elif config.elasticsearchdb %}Download | {% endif %} {% endif %}
{{chunk.start}} | {{chunk.end}} | {{chunk.size}} | {{chunk.prot}} | {% if config.mongodb %} | Download | {% elif config.elasticsearchdb %}Download | {% endif %}