Sigcheck Changelog

What's new in Sigcheck 2.71

Dec 12, 2018
  • Fixes a crash when attempting to scan small files (< 512 bytes) and resolves issue with incorrect timestamp being reported.

New in Sigcheck 2.55 (May 24, 2017)

  • Fix for a bug that caused the display of publisher names with commas to be truncated at the first comma.

New in Sigcheck 2.54 (Aug 29, 2016)

  • This update to Sigcheck, a command-line utility that reports detailed information about images, including their signatures and VirusTotal status, as well as certificate stores, fixes a bug that could result in it reporting signed files that have been modified as having a valid signature.

New in Sigcheck 2.51 (Apr 28, 2016)

  • This update to Sigcheck, a command-line utility that reports detailed information about images, including their signatures and VirusTotal status, as well as certificate stores, now cleanses newline and other characters from CSV output to prevent line breaks.

New in Sigcheck 2.50 (Feb 3, 2016)

  • This update to Sigcheck, a command-line utility that reports detailed information about images, including their signatures and VirusTotal status, as well as certificate stores, now reports all the signatures of images that have multiple signers.

New in Sigcheck 2.40 (Jan 5, 2016)

  • This update to Sigcheck, a powerful command-line utility that reports image file and signing information, as well as information on certificates, now has an option that will report any certificates installed on the system that do not chain to one of the certificates in the Microsoft certificate trust list (CTL). It also adds the ability to take image information captured from Sigcheck on a system disconnected from the Internet and obtain VirusTotal status from one that’s connected.

New in Sigcheck 2.20 (Oct 27, 2015)

  • This release of Sigcheck, a command-line tool that reports file version, code signing, and hash information, introduces import-hash reporting and support for files larger than 4 GB.

New in Sigcheck 2.1 (May 3, 2014)

  • This update to Sigcheck, a command-line utility that shows file version and digital signature information, now reports a file’s entropy (average bits/byte required to encode its data), can dump information about catalog files including the hashes they store, and can list the certificates installed in the per-user and machine certificate store.

New in Sigcheck 2.03 (Mar 8, 2014)

  • This version corrects a bug that caused the output of the –u switch to include signed files, and fixes several other minor bugs.

New in Sigcheck 2.02 (Feb 5, 2014)

  • This release fixes a bug that caused the –u switch to filter results incorrectly.

New in Sigcheck 2.01 (Nov 2, 2013)

  • This update fixes a bug in the handling of the -u option that sometimes resulted in Sigcheck reporting signed files.

New in Sigcheck 2.0 (Oct 24, 2013)

  • This major update to Sigcheck adds integration with the VirusTotal antivirus scanner aggregation service.
  • Sigcheck can now check the status of a file against over 40 antivirus engines and launch the associated online VirusTotal report, and even upload files for scanning that have not already been scanned by VirusTotal.
  • This release also reports the machine type of executable images, whether 16-, 32-, or 64-bit.

New in Sigcheck 1.92 (Jun 5, 2013)

  • With this update, it now includes support for Authenticode SHA256 hashes, which is the same hash type used to identify images by AppLocker.

New in Sigcheck 1.91 (Feb 6, 2013)

  • This update to Sigcheck prints the link time for executable files instead of the file last-modified time, and fixes a bug introduced in 1.9 where the –q switch didn’t suppress the print out of the banner.

New in Sigcheck 1.81 (Oct 4, 2012)

  • This update to Sigcheck, a command-line utility for analyzing the digital signatures of executable images, fixes a bug that could cause it to crash when reporting the signing status of images that have invalid signatures.

New in Sigcheck 1.8 (Sep 12, 2012)

  • This update to Sigcheck, a command-line file version and digital signature verification utility, shows detailed certificate information such as certificate usage, validity dates, and thumbprints, and also shows a file’s counter-signing chain if it has one.

New in Sigcheck 1.73 (Oct 15, 2010)

  • Reports a revoked certificate as “revoked” rather than “invalid certificate”.

New in Sigcheck 1.7 (Jun 9, 2010)

  • This version of Sigcheck, a file version and signature verification command-line utility, now returns an exit code of 0 to indicate that all code it checked was signed and 1 to report that some were unsigned.

New in Sigcheck 1.66 (Mar 3, 2010)

  • This update to Sigcheck, a file version and signature checking utility, fixes a bug in the certificate revocation check logic.

New in Sigcheck 1.65 (Jan 20, 2010)

  • Now includes all certificate errors in the unsigned image filter, not just images that have no code signing certificate.

New in Sigcheck 1.64 (Jan 12, 2010)

  • This release adds reporting for more signature verification errors.

New in Sigcheck 1.63 (Dec 2, 2009)

  • Instead of reporting ‘unsigned image’ for all signature check failures, Sigcheck now reports specific errors, such as the root not being trusted and the signing chain not being valid.

New in Sigcheck 1.62 (Nov 4, 2009)

  • This update to Sigcheck, a utility that displays file version and digital signature information, removes a file size limit for generating file hashes, works on 64-bit MSI files, and reports expired signatures.

New in Sigcheck 1.6 (Mar 2, 2009)

  • This update adds checking for .NET strong signatures and extends the output of the -i option, which shows the image signers, to also print the path of the catalog that stores a file's signature.