SigCheck

Sigcheck is a powerful tool for verifying digital signatures and scanning for malware. Its key features include showing file version number, timestamp information, and digital signature details, including certificate chains. It also includes options to check a file's status on VirusTotal, a site that performs automated file scanning against over 40 antivirus engines, and to upload a file for scanning. The tool can be used to check for unsigned files in system directories, such as the Windows System32 directory, and to investigate the purpose of any files that are not signed. Sigcheck runs on Windows 8.1 and higher, Windows Server 2012 and higher, and Nano Server 2016 and higher. It provides a range of technical implementation details, including options to show extended version information, scan executable images only, and dump manifest. Specific use cases include checking for malware and verifying digital signatures, and the tool provides a range of benefits, including improved system security and integrity.