Certutil.exe is a Microsoft-supplied Windows Certificate Services utility for inspecting certificates and CA configuration. Microsoft documents URL-cache fetch and Base64 encode/decode operations; MITRE ATT&CK records adversary use for ingress transfer, decoding, encoding collected data, and installing root certificates. LOLBAS also documents Base64 file encoding as a way to evade defensive measures. These dual-use administrative functions are not by themselves evidence of compromise. Syntax and available parameters vary by Windows release.
RESTRICTED_ACCESS_BLUR_MARKER