Benign Download

f4/1f/f41f7405083fdb7b2b1509b1f80dc314eeefb076d8b55c2556b6e832e69e9101

Logman trace update removes an ETW providerWevtutil disables an event log channel
SHA-256f41f7405083fdb7b2b1509b1f80dc314eeefb076d8b55c2556b6e832e69e9101
MaleculeO(Er)

Evidence

Logman trace update removes an ETW provider lines 1–3
1@echo off
2wevtutil.exe set-log "Microsoft-Windows-DNS-Client/Operational" /e:false
3logman update trace EventLog-Application --p "Microsoft-Windows-Security-Auditing" -ets

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.