Dynatrace_onepCap detected as malicious

echwallah — Wed, 07 Dec 2022 15:31:07 GMT

One of our customers has flagged an executable file known as Dynatrace-onepcap.exe and it is signed by Dynatrace.

The security tool has flagged and associated it to Dynatrace under folder c:\program files\dynatrace\oneagent\agent\pcap\dynatrace_onepcap.exe quoting "potentially malicious"

Has anyone come across this and is it the same npcap/winpcap Packet Monitoring driver or is this a different executable?

Please let me know in order to clarify to the client.

Re: Dynatrace_onepCap detected as malicious

MaciejNeumann — Tue, 06 Dec 2022 10:42:57 GMT

Hi @echwallah,

Could you share with us what tool was used to detect the file as malicious? This would help us a lot.

We had a similar support case, but we got a reply from NPCAP developers, that this was a false positive.

topic Re: Dynatrace_onepCap detected as malicious in Open Q&A

Dynatrace_onepCap detected as malicious

Re: Dynatrace_onepCap detected as malicious