Microsoft Sigcheck

Sigcheck inventories file versions, hashes and signing chains from the command line. Keep that local inspection separate from its optional VirusTotal features. Microsoft's guide says -v queries by file hash; adding the s modifier uploads files that VirusTotal has not previously scanned. Decide whether either disclosure is acceptable before enabling it for a confidential executable collection. A valid signature identifies a signing relationship, while the file's behavior and role still need investigation.