

Standard Non-Application Layer Protocol 2ĭeobfuscate/Decode Files or Information 1Įxfiltration Over Command and Control Channel

Report size getting too big, too many NtWriteFile calls found.Report size getting too big, too many NtSetInformationFile calls found.Report size getting too big, too many NtQueryValueKey calls found.

Report size getting too big, too many NtQueryAttributesFile calls found.Report size getting too big, too many NtProtectVirtualMemory calls found.Report size getting too big, too many NtOpenKeyEx calls found.Report size getting too big, too many NtCreateFile calls found.Report size getting too big, too many NtAllocateVirtualMemory calls found.Report size exceeded maximum capacity and may have missing network information.Report size exceeded maximum capacity and may have missing behavior information.Execution Graph export aborted for target wget.exe, PID 4336 because there are no executed function.Excluded domains from analysis (whitelisted): au.net, wu.ec.,, ,, wu., au.,, ,, au., ., wu.Exclude process from analysis (whitelisted): dllhost.exe, conhost.exe, CompatTelRunner.exe.
