Malicious Process Detection: Authenticode Not Signed

info Nessus Plugin ID 104856

Synopsis

Nessus found processes running on the host that are unsigned.

Description

Running processes that are unsigned.

See Also

http://www.nessus.org/u?6a0123a1

http://www.nessus.org/u?c7777bf7

Plugin Details

Severity: Info

ID: 104856

File Name: wmi_malware_authenticode_not_signed.nbin

Version: 1.161

Type: local

Agent: windows

Family: Windows

Published: 11/29/2017

Updated: 11/12/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: malscan/enabled