6 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Windows File Download Via CertUtil | Medium |
| File Encoded To Base64 Via Certutil.EXE | Medium |
| Suspicious File Downloaded From File-Sharing Website Via Certutil.EXE | High |
| Suspicious File Downloaded From Direct IP Via Certutil.EXE | High |
| Suspicious Download Via Certutil.EXE | Medium |
| File Decoded From Base64/Hex Via Certutil.EXE | High |
Showing 6 of 6