Is ‘certutil.exe' related to Dynatrace?

[ponnuchelvam_v]

Could you confirm, please that ‘certutil.exe' is related to Dynatrace?

We are running Dynatrace agent one of the customer Windows box. The same day as oneagent installation. This exe is running.

The customer received multiple malware alerts due to this exe. That's why they raised concerns with Dynatrace agent. Please help to give positive feedback to the customer.

[skrystosik]

To by honest I’ve never seen such process in context of OneAgent.

Sebastian

[AntonioSousa · Accepted solution]

Certutil.exe is a utility from Microsoft that is used essentially for diagnostics. I use it a lot, as I also work with Digital Certificates. You can find more at:

https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/certutil

If it is running on a continuous basis, I would say that it might be indeed some kind of malware, masquerading as an apparent valid system process.