{% if file.cape_type %} {% endif %} {% if file.type %} {% endif %} {% if file.guest_paths and tab_name == "dropped" %} {% endif %} {% if file.module_path and file.process_path != file.module_path %} {% endif %} {% if file.cape_type_code == 8 or file.cape_type_code == 9 %} {% endif %} {% if file.cape_type_code == 5 %} {% endif %} {% if file.cape_type_code == 3 or file.cape_type_code == 4 %} {% else %} {% if file.process_name %} {% endif %} {% if file.pid %} {% endif %} {% if file.process_path %} {% endif %} {% endif %} {% if file.timestamp %} {% endif %} {% if file.sha3_384 %} {% endif %} {% if file.rh_hash %} {% endif %} {% if file.tlsh %} {% endif %} {% if file.clamav %} {% endif %} {% if file.yara %} {% endif %} {% if file.cape_yara %} {% endif %} {% if file.dropdir %} {% else %} {% endif %} {% if file.virustotal %} {% endif %} {% if file.strings %} {% endif %} {% if file.data %} {% endif %} {% if file.decoded_files %} {% endif %} {% if file.extracted_files %}
{% endif %} {% if file.pe %} {% endif %} {% if file.dotnet %} {% endif %} {% if file.lnk %} {% endif %}

Type	{{file.cape_type}}
Filename	{% for name in file.name|str2list %} {{name|safe}} {% endfor %}
File Type	{{file.type}}
Associated Filenames	{% for path in file.guest_paths|str2list %} {{path}} {% endfor %}
File Size	{{file.size}} bytes
Module Path	{{file.module_path}}
Virtual Address	{{file.virtual_address}}
Section Handle	{{file.section_handle}}
Target Process	{{file.target_process}}
Target PID	{{file.target_pid}}
Target Path	{{file.target_path}}
Injecting Process	{{file.process_name}}
Injecting PID	{{file.pid}}
Path	{{file.process_path}}
Process	{{file.process_name}}
PID	{{file.pid}}
Path	{{file.process_path}}
PE timestamp	{{file.timestamp}}
MD5	{{file.md5}}
SHA1	{{file.sha1}}
SHA256	{{file.sha256}} [VT] [MWDB] [Bazaar]
SHA3-384	{{file.sha3_384}}
RichHeader Hash	{{file.rh_hash}}
CRC32	{{file.crc32}}
TLSH	{{file.tlsh}}
Ssdeep	{{file.ssdeep}}
ClamAV	{% for sign in file.clamav %} {{sign}} {% endfor %}
Yara	{% for sign in file.yara %} {{sign.name}} - {{sign.meta.description}} {% if sign.meta.author %} - Author: {{sign.meta.author}} {% endif %} {% endfor %}
CAPE Yara	{% for sign in file.cape_yara %} {{sign.name}} {% if sign.meta.cape_type %} - {{sign.meta.cape_type}} {% elif sign.meta.description %} - {{sign.meta.description}} {% endif %} {% if sign.meta.author %} - Author: {{sign.meta.author}}{% endif %} {% endfor %}
{% if file.pe %} PE{% endif %} {% if file.dotnet %} DotNET{% endif %} {% if file.lnk %} LNK{% endif %}	{% if file.strings %} Strings {% endif %} {% if file.data %} Text {% endif %} {% if file.decoded_files %} {{file.decoded_files_tool}} {% endif %} {% if file.extracted_files %} {{file.extracted_files_tool}} {% if file.extracted_files_time %} ({{"%0.2f" % file.extracted_files_time|float}} sec) {% endif %} {% endif %}
	{% include "generic/_virustotal.html" %}
	{% for string in file.strings %} {{string}} {% endfor %}
	{{file.data|escape}}
	{{file.decoded_files|escape}}
	{% for sub_file in file.extracted_files %} {% include "generic/_subfile_info.html" %} {% endfor %}
{% include "generic/_pe.html" %}
{% include "generic/_dotnet.html" %}
{% include "generic/_lnk.html" %}