SigcheckGUI v1.1.3

smaragdus on 21 Feb 2017
  • 1MB (uncompressed)
  • Released on 4 Nov 2016
  • Suggested by Checker

SigcheckGUI is a system and security analysis tool for understanding files and processes. The program shows a variety of file data including signing source, 32/64-bit status, version, publisher, and more. Security options include VirusTotal analysis and file hashing (MD5, SHA1, and SHA256). The program can even run on all active processes.

The program can export results to spreadsheet (CSV) or copied to the clipboard.

SigcheckGUI is a front-end for Sigcheck from Sysinternals.

Category:
System Requirements: Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? No. HKCU\Software\Sysinternals\SigCheck: "EulaAccepted"
License: Freeware for non-commercial use (obtain commercial license)
How to extract:
  1. Download the ZIP package and extract to a folder of your choice.
  2. Download Sigcheck ZIP package and extract sigcheck.exe or sigcheck64.exe (for 64-bit OS) to the same folder.
  3. Rename sigcheck64.exe to sigcheck.exe.
  4. Launch SigcheckGUI.exe.

Optionally:
  • To enable Compute Hashes and Query VirusTotal features, check those boxes in the Options tab
  • To check extensions other than EXE and DLL, select the Options tab and enter them in the "Allowed Extentions" entry
Similar/alternative apps: RapidCRC Unicode
What's new? Added:
  • SigcheckGUI now handles passed files and folders.
  • Added "Clear unknown" to the Clear menu.
Changed:
  • Changed/added some icons.
  • Verified SigcheckGUI works with sigcheck.exe v2.54.

11 comments on SigcheckGUI  The Portable Freeware Collection Latest Entries Feed

__philippe 2015-03-11 20:25

The underlying SysInternals's SIGCHECK utility (CLI) has just been updated to V2.2
(as of 10-MAR-2015), with a slew of new options, notably :

- the capability to check a file status with V*irusTotal.
- import-hash reporting
- support for files > 4Gb.

Full details here:

https://technet.microsoft.com/en-us/sysinternals/bb897441.aspx

__philippe

v1.0.9

__philippe 2015-11-09 13:01

The underlying Sysinternal's SIGCHECK utility (CLI) is updated to v2.3 (as of 26-OCT-2015)
https://technet.microsoft.com/en-us/sysinternals/bb897441

Changelog:
- includes updated Windows 10 certificate OIDs,
- support for checking corresponding MUI (internationalization strings) files for more accurate version data,
- shows the version company name as well as signature publisher for signed files.

v1.1.0

__philippe 2016-01-09 18:06

The underlying SysInternals's SIGCHECK utility (CLI) is updated to V2.4
(as of 04-JAN-2016) with the following new options :

1. Reports any certificates installed on the system that do not chain to one of the certificates in the Microsoft certificate trust list (CTL).

2. Adds the ability to take image information captured from Sigcheck on a system disconnected from the Internet and obtain Vir*Total status from one that’s connected.

Full details here:
https://technet.microsoft.com/en-us/sysinternals/bb897441.aspx

Warning to die-hard WinXP users:
Regrettably, this newer version aborts with a dire admonition about
"Entry point SetfileInformationByHandle not found in Kernel32.dll"...:-(

Better stick with former version V2.3 which behaves itself under XP.

v1.1.0

billon 2016-01-10 11:34

Damn, and AccessChk too!
Where to get previous?

v1.1.0

__philippe 2016-01-10 14:46

@billon
Perhaps here, if you hurry...;-)

http://www.downloadcrew.com/article/31427-sigcheck

v1.1.0

billon 2016-01-10 15:59

Thank you, _philippe, but it's 2.4, 'cause their links direct to Sysinternals' site.
but that's wrong place for such discussion, so never mind.

v1.1.0

I am Baas 2016-01-10 18:02

@billon

Download Sysinternals Suite October 26, 2015 from http://www.afterdawn.com/software/system_tools/system_information/sysint_suite.cfm/october_26,_2015 and extract. You will find previous version of AccessChk and Sigcheck inside.

Direct link @ http://www.afterdawn.com/software/general/download.cfm/sysint_suite?mirror_id=0&version_id=105175&software_id=1917

v1.1.0

I am Baas 2016-01-11 14:15

Unfortunately, links do not seem to displayed well in the comment section...

Select "Sysinternals Suite October 26, 2015" under the "All versions" tab...

http://www.afterdawn.com/software/system_tools/system_information/sysint_suite.cfm#tab3

v1.1.0

__philippe 2016-02-04 13:18

The underlying SysInternals's SIGCHECK utility (CLI) is updated to V2.5 (as of 02-FEB-2016)
with the following change :

- now reports all the signatures of images that have multiple signers

https://technet.microsoft.com/en-us/sysinternals/bb897441.aspx

Please note that since v2.4, SigCheck requires Vista, Win7 or higher.
(v2.3 still works fine under XP)

v1.1.0

smaragdus 2016-09-03 20:01

Version 1.1.2 does not include 'sigcheck.exe'.

v1.1.2

__philippe 2016-09-03 21:33

The underlying SysInternals's SIGCHECK utility (CLI) is updated to V2.54 (as of 29-AUG-2016) with the following change :

- fixes a bug that could result in it reporting signed files that have been modified as having a valid signature.

v1.1.2

Post your comment