Check Windows folders for file signatures with SigcheckGUI - gHacks Tech News

Check Windows folders for file signatures with SigcheckGUI

Sigcheck is one of those awesome Sysinternals programs that you can use to check signatures and other information of all files of a folder.

The original program is only available as a command line version which at least sometimes is not as comfortable to work with.

This is especially true for repeat checks but also because it takes some time to get accustomed to all the parameters you can run the program with.

SigcheckGUI

signature check

SigcheckGUI is a new portable program for Windows that adds a graphical user interface to the application.

You can start the software right after you have downloaded and extracted it to the target system. Here you have three main options to check files:

  • Scan all running processes with a click on a button in the main toolbar.
  • Scan select files you specify or all files in a folder using buttons.
  • Import a file list and check it.

You may want to switch to the options tab first before you start scans though. Here you find a couple of preferences that you may find interesting. Among them an option to enable Virustotal scanning of all files, the computing of hash files, managing allowed extensions (exe and dll by default), and adding files to a trusted list so that they are not displayed by the program at all.

Once you have made changes here, you can start the actual scanning of the files. SigcheckGUI displays the progress and current file in the status bar so that you know how far the scan has progressed already.

Each file is listed with information such as its file name, verification status, signing date, the publisher, a description, version and several other information that you may find useful.

A double-click on a file, a tap on F4 or the selection of Edit > Info Box displays the same information in a new window on the screen.

You can use the View menu to hide signed, unsigned or expired files so that you can work with files that match the selected verification status.

The data can be exported as a text file list or a csv file, and it is also possible to copy raw table data to the Windows Clipboard instead.

You may find the Ctrl-1 to Ctrl-4 shortcuts useful as well. The first opens the Virustotal url of the file which works only if you have enabled virus scanning in the options.

The three remaining options run a search for the file name on Google, Bing and DuckDuckGo respectively.

Closing Words

The Virustotal scanning did not work correctly during tests. When enabled, it would not display any information about the file besides its name. What weights even more is the fact that the program opened the Virustotal TOS for each file that you have added to the application. It did open the site 48 times for instance during a test when I selected to scan all running processes.  The issue has been fixed.

SigcheckGUI is a useful program on the other hand and I'm pretty certain that the issue will be resolved quickly by its author. If you use Sigcheck regularly or want a program that can quickly check a folder for legitimate and possibly dangerous files then this is as good as it gets.

Related articles

Summary
software image
Author Rating
1star1star1star1star1star
5 based on 2 votes
Software Name
SigcheckGUI
Operating System
Windows
Software Category
Administration
Landing Page

We need your help

Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.

We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats or subscription fees.

If you like our content, and would like to help, please consider making a contribution:

Comments

  1. mouser said on September 11, 2014 at 10:00 pm
    Reply

    Thanks for your review, Martin!
    Skwire read your comments and is fixing the bugs as we speak!

    Looks like he already posted a fix:
    https://www.donationcoder.com/forum/index.php?topic=38612.msg364217#msg364217

  2. Jody Holmes (Skwire, author) said on September 11, 2014 at 10:02 pm
    Reply

    Hi Martin,

    I think I fixed that VirusTotal issue you ran into. Would you mind downloading the latest version and re-testing? Thank you.

    All the best,


    Jody Holmes
    [email protected]
    http://skwire.dcmembers.com

    1. Martin Brinkmann said on September 11, 2014 at 11:37 pm
      Reply

      Hi there, great it works fine now.

      1. Jody Holmes (Skwire, author) said on September 12, 2014 at 12:09 am
        Reply

        Wonderful. =] Thanks for re-testing.

  3. Rick said on September 12, 2014 at 12:08 am
    Reply

    Well I can’t get VT to open at all now :) using the latest version 1.0.6 build 1

    Does it open IE only per chance?

    1. Jody Holmes (Skwire, author) said on September 12, 2014 at 12:13 am
      Reply

      No, it tries to use your default browser. Do you not have a default browser set?

      1. Rick said on September 12, 2014 at 12:17 am
        Reply

        FF 32 as default. No tab opens when FF is open; FF does not open if not running.

        Isn’t a firewall or security issue either. I ran it from a clean win7x64 virtualbox image to make sure :)

        PS: do you mean to have your code visible using say a tool like PEStudio? It is naked, in all of it’s glory btw lol

        Looking thru the code… my registry entry for VT did not get set for some reason

  4. Jody Holmes (Skwire, author) said on September 12, 2014 at 12:29 am
    Reply

    Would you mind contacting me at skwire [at] dcmembers [dot] com and I’ll see if I can’t get this resolved for you.

  5. CHEF-KOCH said on September 12, 2014 at 9:34 pm
    Reply

    Nice GUI, for VT I use VT Hash Check (better than original Virus Total Uploader)
    http://www.boredomsoft.org/vt-hash-check.bs

  6. Anonymous said on September 13, 2014 at 2:06 am
    Reply

    very good. thanks

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

Please note that your comment may not appear immediately after you post it.