analyze malware
  • Huge database of samples and IOCs
  • Custom VM setup
  • Unlimited submissions
  • Interactive approach
Sign up, it’s free
File name:

Invoice LQA134.html

Full analysis: https://app.any.run/tasks/78255e5f-d258-4c3f-9461-82eeb0cd99e2
Verdict: Suspicious activity
Analysis date: March 26, 2022, 17:27:28
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:
opendir
phishing
Indicators:
MIME: text/html
File info: HTML document, ASCII text, with very long lines, with CRLF line terminators
MD5:

EDF767D60614C42D39A4FA586C01B6B8

SHA1:

530FDBFC5B32D2ECDACFA7FA42A339172CF24B3D

SHA256:

26FA008FB38CA01EDB3952C23943AA5AE791ECB286F81B5D908217B25F18D8D5

SSDEEP:

3072:f8gJ+cbBONCmQhrNkozJqvQEwXXa3LwCjJWTVQwYVKEQ:v+cONCmQ+QZnKLpjJyQR/Q

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    No malicious indicators.
  • SUSPICIOUS

    • Reads Microsoft Outlook installation path

      • iexplore.exe (PID: 1924)
    • Modifies files in Chrome extension folder

      • chrome.exe (PID: 2556)
  • INFO

    • Reads the computer name

      • iexplore.exe (PID: 2728)
      • iexplore.exe (PID: 1924)
      • iexplore.exe (PID: 860)
      • chrome.exe (PID: 2556)
      • chrome.exe (PID: 3356)
      • chrome.exe (PID: 3328)
      • chrome.exe (PID: 2776)
      • chrome.exe (PID: 3744)
      • chrome.exe (PID: 1636)
      • chrome.exe (PID: 1876)
    • Checks supported languages

      • iexplore.exe (PID: 1924)
      • iexplore.exe (PID: 860)
      • iexplore.exe (PID: 2728)
      • chrome.exe (PID: 2556)
      • chrome.exe (PID: 3328)
      • chrome.exe (PID: 2868)
      • chrome.exe (PID: 3356)
      • chrome.exe (PID: 3744)
      • chrome.exe (PID: 1128)
      • chrome.exe (PID: 484)
      • chrome.exe (PID: 3976)
      • chrome.exe (PID: 2776)
      • chrome.exe (PID: 3992)
      • chrome.exe (PID: 404)
      • chrome.exe (PID: 188)
      • chrome.exe (PID: 4052)
      • chrome.exe (PID: 2928)
      • chrome.exe (PID: 1876)
      • chrome.exe (PID: 1636)
      • chrome.exe (PID: 3720)
    • Changes internet zones settings

      • iexplore.exe (PID: 2728)
    • Checks Windows Trust Settings

      • iexplore.exe (PID: 2728)
    • Reads internet explorer settings

      • iexplore.exe (PID: 1924)
    • Application launched itself

      • iexplore.exe (PID: 1924)
      • iexplore.exe (PID: 2728)
      • chrome.exe (PID: 2556)
    • Reads settings of System Certificates

      • iexplore.exe (PID: 2728)
      • chrome.exe (PID: 3356)
    • Reads the hosts file

      • chrome.exe (PID: 3356)
      • chrome.exe (PID: 2556)
    • Reads the date of Windows installation

      • iexplore.exe (PID: 2728)
      • chrome.exe (PID: 1876)
    • Manual execution by user

      • chrome.exe (PID: 2556)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.html | HyperText Markup Language (100)
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
56
Monitored processes
20
Malicious processes
0
Suspicious processes
0

Behavior graph

Click at the process to see the details
start iexplore.exe iexplore.exe no specs iexplore.exe no specs chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
2728"C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\admin\AppData\Local\Temp\Invoice LQA134.html"C:\Program Files\Internet Explorer\iexplore.exe
Explorer.EXE
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Internet Explorer
Exit code:
1
Version:
11.00.9600.16428 (winblue_gdr.131013-1700)
Modules
Images
c:\program files\internet explorer\iexplore.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
1924"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2728 CREDAT:144385 /prefetch:2C:\Program Files\Internet Explorer\iexplore.exeiexplore.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Internet Explorer
Exit code:
0
Version:
11.00.9600.16428 (winblue_gdr.131013-1700)
Modules
Images
c:\program files\internet explorer\iexplore.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
860"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2728 CREDAT:333057 /prefetch:2C:\Program Files\Internet Explorer\iexplore.exeiexplore.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Internet Explorer
Exit code:
0
Version:
11.00.9600.16428 (winblue_gdr.131013-1700)
Modules
Images
c:\windows\system32\ntdll.dll
c:\program files\internet explorer\iexplore.exe
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2556"C:\Program Files\Google\Chrome\Application\chrome.exe" C:\Program Files\Google\Chrome\Application\chrome.exe
Explorer.EXE
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Version:
86.0.4240.198
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\winmm.dll
c:\windows\system32\user32.dll
2868"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=86.0.4240.198 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd4,0x6e04d988,0x6e04d998,0x6e04d9a4C:\Program Files\Google\Chrome\Application\chrome.exechrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Version:
86.0.4240.198
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
c:\windows\system32\shell32.dll
3328"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1036,9019701801308215191,5060584571780811672,131072 --enable-features=PasswordImport --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1064 /prefetch:2C:\Program Files\Google\Chrome\Application\chrome.exechrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
86.0.4240.198
Modules
Images
c:\windows\system32\ntdll.dll
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
c:\windows\system32\shlwapi.dll
3356"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1036,9019701801308215191,5060584571780811672,131072 --enable-features=PasswordImport --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1256 /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe
chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Version:
86.0.4240.198
Modules
Images
c:\windows\system32\ntdll.dll
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
c:\windows\system32\gdi32.dll
484"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1036,9019701801308215191,5060584571780811672,131072 --enable-features=PasswordImport --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1744 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exechrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Version:
86.0.4240.198
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
c:\windows\system32\shell32.dll
1128"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1036,9019701801308215191,5060584571780811672,131072 --enable-features=PasswordImport --lang=en-US --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1948 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exechrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
86.0.4240.198
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\version.dll
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
c:\windows\system32\shell32.dll
188"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1036,9019701801308215191,5060584571780811672,131072 --enable-features=PasswordImport --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2300 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exechrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
86.0.4240.198
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\86.0.4240.198\chrome_elf.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\version.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
c:\windows\system32\shell32.dll
Total events
21 397
Read events
21 149
Write events
0
Delete events
0

Modification events

No data
Executable files
0
Suspicious files
129
Text files
90
Unknown types
14

Dropped files

PID
Process
Filename
Type
2728iexplore.exeC:\Users\admin\AppData\Local\Temp\~DF7359BC9C61C7AF04.TMPgmc
MD5:486D11096A28044586204D59A7151CA8
SHA256:0A7F7D9D2FCC1AF531CC16C7197F48B0BFBC848573BED30D226A420963E24135
2728iexplore.exeC:\Users\admin\AppData\Local\Temp\~DFF491757ED01292DD.TMPgmc
MD5:123BCA4601D070DF2B009EDAF2629446
SHA256:DB4A2AD12F41D2063A388954AF7AA2107868D920A1E5E4624A3FBA4EB330CFF3
2728iexplore.exeC:\Users\admin\AppData\Local\Temp\~DF1EADEFDD937872ED.TMPgmc
MD5:BE654443BB7894F28CAAADFE9757927B
SHA256:4799E2246A38C76F7621D99B022D1CB0A257D0A1F928666C064C4E77ED5AD1EE
2728iexplore.exeC:\Users\admin\AppData\Local\Temp\~DF570CEB2284A11240.TMPgmc
MD5:807BA873EBA7A8A29AB54CC7E3DABDAE
SHA256:95DCD7F214A2AF40D0FC8BA51FE2D59230886123C3089BC35DF63B58218F8C7B
2728iexplore.exeC:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157binary
MD5:EA6AA0FD78EA3DA6ECB56ACD1A156E9A
SHA256:5A05B5DDB1DA846741481592CB8C5339A2A6C55A9FD114E1EC930EA7B4BD6752
2728iexplore.exeC:\Users\admin\AppData\Local\Temp\~DF5D5D5843E1577351.TMPgmc
MD5:A9D16F9D8FCC129C105A32A606AC2424
SHA256:1DFBE15EC7BB5DCC1D5CEBDF5C08B7CBFE7EC70980CEA80EB1BEE84C4D8BC390
2728iexplore.exeC:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63binary
MD5:A2B4E909C9C1DCB6802265789C25E476
SHA256:7BD0E22D2371C1C0C58C48EE20E6C975D45AD95FE7BAA27B340CAEC551B3BEDD
2556chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-623F4D11-9FC.pma
MD5:
SHA256:
2728iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{046D931B-AD2A-11EC-BE1B-12A9866C77DE}.datbinary
MD5:03C014C7ABE82AE965E61EE9457733CB
SHA256:10717CB7259EA2B2404F22564C146B3D681C0A3564A33348AB26E601E4F42F93
2728iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{42C873D0-1D90-11EB-BA2C-12A9866C77DE}.datbinary
MD5:7A32C9BBA6C40A9ED86AD2D6B8DAB729
SHA256:388CBFB1256AEC82D028C8D632F00B462AA909C7FF3501E04ED8186738E55B9A
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
8
TCP/UDP connections
32
DNS requests
24
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
3356
chrome.exe
HEAD
159.223.143.85:80
http://159.223.143.85/fdkjghdfjkgvutereryecfc/kdfjhgskdjgheterererwfkcbswcfe/dsfkjdgsttrrererwbdk776653ncfkbvge.php
US
suspicious
3356
chrome.exe
POST
159.223.143.85:80
http://159.223.143.85/fdkjghdfjkgvutereryecfc/kdfjhgskdjgheterererwfkcbswcfe/dsfkjdgsttrrererwbdk776653ncfkbvge.php
US
suspicious
2728
iexplore.exe
GET
200
93.184.220.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8Ull8gIGmZT9XHrHiJQeI%3D
US
der
1.47 Kb
whitelisted
3356
chrome.exe
GET
302
142.250.185.110:80
http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx
US
html
591 b
whitelisted
3356
chrome.exe
GET
200
188.120.127.142:80
http://r3---sn-nvm-cxbz.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx?cms_redirect=yes&mh=e_&mip=45.86.200.90&mm=28&mn=sn-nvm-cxbz&ms=nvh&mt=1648315223&mv=m&mvi=3&pl=25&rmhost=r1---sn-nvm-cxbz.gvt1.com&shardbypass=sd&smhost=r1---sn-nvm-cxbs.gvt1.com
RS
crx
242 Kb
whitelisted
2728
iexplore.exe
GET
200
23.32.238.208:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?62ebceabaa1fbbef
US
compressed
4.70 Kb
whitelisted
2728
iexplore.exe
GET
200
93.184.220.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
US
der
471 b
whitelisted
2728
iexplore.exe
GET
200
93.184.221.240:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c4d1992dc9b80147
US
compressed
4.70 Kb
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
3356
chrome.exe
142.250.185.195:443
clientservices.googleapis.com
Google Inc.
US
whitelisted
2728
iexplore.exe
204.79.197.200:443
www.bing.com
Microsoft Corporation
US
whitelisted
3356
chrome.exe
216.58.212.170:443
fonts.googleapis.com
Google Inc.
US
whitelisted
3356
chrome.exe
142.250.186.35:443
fonts.gstatic.com
Google Inc.
US
whitelisted
2728
iexplore.exe
93.184.220.29:80
ocsp.digicert.com
MCI Communications Services, Inc. d/b/a Verizon Business
US
whitelisted
3356
chrome.exe
142.250.181.228:443
www.google.com
Google Inc.
US
whitelisted
3356
chrome.exe
142.250.185.78:443
clients2.google.com
Google Inc.
US
whitelisted
142.250.185.78:443
clients2.google.com
Google Inc.
US
whitelisted
2728
iexplore.exe
23.32.238.208:80
ctldl.windowsupdate.com
XO Communications
US
unknown
3356
chrome.exe
172.217.23.99:443
www.gstatic.com
Google Inc.
US
whitelisted

DNS requests

Domain
IP
Reputation
api.bing.com
  • 13.107.5.80
whitelisted
www.bing.com
  • 204.79.197.200
  • 13.107.21.200
whitelisted
ctldl.windowsupdate.com
  • 23.32.238.208
  • 23.32.238.201
  • 93.184.221.240
whitelisted
ocsp.digicert.com
  • 93.184.220.29
whitelisted
clientservices.googleapis.com
  • 142.250.185.195
whitelisted
clients2.google.com
  • 142.250.185.78
whitelisted
accounts.google.com
  • 142.250.185.205
shared
www.google.com
  • 142.250.181.228
whitelisted
fonts.googleapis.com
  • 216.58.212.170
whitelisted
www.gstatic.com
  • 172.217.23.99
whitelisted

Threats

Found threats are available for the paid subscriptions
1 ETPRO signatures available at the full report
No debug info