Benign Download

f6/51/f651f7f8d2cd5fb688dd229e73963929d19796cd971221a521202f69484221bb

ETW command suppresses keyword-zero eventsRemoves provider from EventLog autologger
SHA-256f651f7f8d2cd5fb688dd229e73963929d19796cd971221a521202f69484221bb
MaleculeO(Er)

Evidence

Removes provider from EventLog autologger lines 1–2
1Set-EtwTraceProvider -Guid '{A0C1853B-5C40-4B15-8766-3CF1C58F985A}' -AutologgerName 'EventLog-Application' -Property 17
2Remove-EtwTraceProvider -AutologgerName 'EventLog-Application' -Guid '{54849625-5478-4994-A5BA-3E3B0328C30D}'

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.