File Signature Verification utility to verify digital signatures of files Located at: C:\Windows\System32\sigverif.exe; C:\Windows\SysWOW64\sigverif.exe.
sigverifsigverifSandbox: execFile · Timeout: 30s
security.execution.command Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | low |
| Disk I/O | low |
Launch sigverif.exe GUI, click 'Advanced', specify arbitrary executable path as 'log file name', then click 'View Log' to execute the binary. (Execute arbitrary programs through a trusted Microsoft-signed binary to bypass application whitelisting.)
sigverif.exe| Type | Rule / Indicator |
|---|---|
| ioc | sigverif.exe spawning unexpected child processes |
sigverif is a Windows LOLBin. File Signature Verification utility to verify digital signatures of files Located at: C:\Windows\System32\sigverif.exe; C:\Windows\SysWOW64\sigverif.exe.