Detections
Analytics
Malicious Process Detection: Authenticode Signed
info Nessus Plugin ID 104857
Language:
Synopsis
Nessus found trusted signed processes on the remote host.Description
Running processes that are signed and trusted and today's date falls in the Not Before and Not After range on the certificate.See Also
Plugin Details
Severity: Info
ID: 104857
File Name: wmi_malware_authenticode_signed.nbin
Version: 1.166
Type: local
Agent: windows
Family: Windows
Published: 11/29/2017
Updated: 11/22/2024
Supported Sensors: Nessus Agent, Nessus
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: malscan/enabled