>

Verify Signatures in Bulk With Sigcheck

Check the signing status and version of many files at once.

WindowssignaturesecurityDiagnosticsLow risk
Run sigcheck -e -s -q <path> to list executables and their signature status.

01Command

Command
$ sigcheck -e -s -q C:\Windows\System32

02What it does

Sigcheck reports whether files are signed, by whom and whether the signature is valid, and can recurse and output CSV. Auditing an entire directory tree for unsigned binaries is a security task that is practical only as a command line, not by opening each file's properties dialog.

03Risk

RiskLow risk
RequirementsDownload Sigcheck from Microsoft Sysinternals
!Warning: Unsigned does not always mean malicious, and signed does not prove safe; use it as one signal among several.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • Sigcheck
    Microsoft Sysinternals · vendor-doc · 2026-09-20
    Evidence: Documents sigcheck options for verifying signatures and version info.

Last verified: 2026-10-13 · Category: Security & Privacy

06Related solutions

Check BitLocker encryption status with manage-bde
WindowssystemsecurityDiagnostics

See whether a volume is encrypted, which protectors guard it, and how far a conversion has progressed — all from one command.

Low risk ✓ 2026-09-17
List installed Windows updates and hotfixes with PowerShell
WindowssystemsecurityDiagnostics

Query every installed hotfix with its install date and type from PowerShell — the fastest way to confirm a specific KB number actually landed.

Low risk ✓ 2026-09-17
Run a Microsoft Defender scan from the command line
WindowsTerminalsecurityDiagnostics

Kick off quick, full, custom, or offline boot scans with PowerShell or the MpCmdRun.exe utility — no GUI clicking required.

Low risk ✓ 2026-09-17