{% if analysis.procmemory %}
{% for proc in analysis.procmemory %} {% if forloop.first %}
{% else %}
{% endif %}

Full Dump Information

{% if config.mongodb and proc.procmem_id %} {% endif %} {% if config.elasticsearchdb and proc.file %} {% endif %}
Process Name {{proc.name}}
Executable Path {{proc.path}}
Yara {% if proc.yara %} {% for match in proc.yara %}

Match: {{match.name}} - {{match.meta.description}} {% for string in match.strings %}

{{string}}
{% endfor %}

{% endfor %} {% else %} None matched {% endif %}
Full Dump Download
Full Dump Download
{% if proc.address_space %}

Address Space

{% for memmap in proc.address_space %} {% if memmap.chunks|length >= 2 %} {% else %} {% endif %} {% if memmap.PE %} {% else %} {% endif %} {% if proc.file %} {% if config.mongodb %} {% elif config.elasticsearchdb %} {% endif %} {% endif %} {% if memmap.chunks|length >= 2 %} {% for chunk in memmap.chunks %} {% if config.mongodb %} {% elif config.elasticsearchdb %} {% endif %} {% endfor %} {% endif %} {% endfor %}
Start End Size Protection PE Download
{{memmap.start}}{{memmap.start}}{{memmap.end}} {{memmap.size}} {{memmap.prot}}YesNoDownloadDownload
{{chunk.start}} {{chunk.end}} {{chunk.size}} {{chunk.prot}} DownloadDownload
{% endif %}
{% endfor %}
{% endif %}