{% if analysis.procmemory %} {% for proc in analysis.procmemory %}

Process memory dump for {{ proc.pid|process_name:analysis }} (PID {{ proc.pid }}, dump {{ proc.num }})

{% if proc.procmem_id %} Download {% endif %} {% if proc.extracted %} Extracted/injected images (may contain unpacked executables) {% endif %} {% if proc.yara %} Yara signatures matches on process memory {% for match in proc.yara %}

Match: {{match.name}}

{% endfor %} {% endif %} {% if proc.urls %} URLs found in process memory {% endif %} {% if proc.procmem_id %} Download {% endif %}
{% endfor %} {% endif %}