How to verify the integrity of Windows/Sysinternals tools

Question

Hi,
Does Microsoft publish checksum values for Windows/Sysinternals tools? I want to verify the integrity after downloading.

Thanks.
Marcel

Answer 1

All EXE/DLL files in sysinternals tools are now signed with signature from Microsoft. You can:

1) Right click and select Properties, then change to Digital Signatures tab and open the cert that used to sign it and see if it's valid.

2) If you have the Visual Studio installed, you can open the "development command prompt for VS20XX", and use "signtool verify /all /pa <your exe/dll filename>" to verifiy them.

3) If you have older version of Sysinternal Tools Suite, you may also consider verify with SigCheck.

Answer 2

sigcheck -c -h -w c:\temp\sysint.csv c:\sysinternalssuite

or

sigcheck -c -h -vt -vr -w c:\temp\sysint.csv c:\sysinternalssuite

This latest line will verify each hash against Virus Total.. there may be few false positive as always with Sysinternals tools.

HTH
-mario