Sigcheck 2.54

This is a lightweight command line utility that verifies that images are digitally signed, displaying info related to timestamp and version

Sigcheck is a handy and reliable application designed to show file version number, timestamp information, and digital signature details, including certificate chains.

Usage: sigcheck [-a][-h][-i][-e][-n][[-s]|[-c|-ct]|[-m]][-q][-r][-u][-vt][-v[r][n]][-f catalog file]

· a - Show extended version information
· c - CSV output with comma delimiter
· ct - CSV output with tab delimiter
· e - Scan executable images only (regardless of their extension)
· f - Look for signature in the specified catalog file
· h - Show file hashes
· i - Show catalog name and image signers
· m - Dump manifest
· n - Only show file version number
· q - Quiet (no banner)
· r - Disable check for certificate revocation
· s - Recurse subdirectories
· u - If VirusTotal check is enabled, show files that are unknown by VirusTotal or have non-zero detection, otherwise show only unsigned files.
· v[rn] - Query VirusTotal for malware based on file hash. Add 'r' to open reports for files with non-zero detection. Files reported as not previously scanned will be uploaded to VirusTotal unless the 'n' option is specified. Note scan results may not be available for five of more minutes.
· vt - Before using VirusTotal features, you must accept VirusTotal terms of service. If you haven't accepted the terms and you omit this option, you will be interactively prompted.