Stack Overflow
Stack Overflow

Questions tagged [winverifytrust]

28 questions
18
votes
2 answers

Getting WinVerifyTrust to work with catalog signed files such as cmd.exe

Thanks to a very old post available here https://web.archive.org/web/20140217003950/http://forum.sysinternals.com/topic16893_post83634.html I came across a function that will call WinVerifyTrust on a file to check an embedded signature, and if that…
DougN
  • 4,407
  • 11
  • 56
  • 81
14
votes
4 answers

WinVerifyTrust to check for a specific signature?

I'm implementing a process elevation helper for Windows. It's a program that will run in elevated mode and launch other programs with administrator privileges without displaying additional UAC prompts. For security reasons, I want to make sure only…
joshk0
  • 2,574
  • 2
  • 25
  • 36
10
votes
1 answer

How to verify that my orgainization signed a trusted windows binary?

This is a followup question to question 1072540, 'WinVerifyTrust to check for a specific signature?'. I want to write a C++ function Lets call it TrustedByUs of the form: bool TrustedByUs(std::string pathToBinary, std::string pathToPublicKey) The…
Jim In Texas
  • 1,524
  • 4
  • 20
  • 31
6
votes
2 answers

Check digital signature of OSX (.dmg) file in Windows

I am currently checking that the digital signature of windows installer files (.msi) is valid in C# using the WinVerifyTrust api. I am also verifying that the thumbprint from the signature is from a known list. I need to do the same for Mac OSX…
SturmUndDrang
  • 1,876
  • 5
  • 27
  • 47
5
votes
1 answer

WinVerifyTrust function takes long time to excecute

I am using windows WinVerifyTrust function on windows 10 pro, to verify dll signatures. when I activate this function for the first time, it takes 4 seconds for the function to execute and return verification status for the first dll. for the other…
N.avraham
  • 333
  • 2
  • 15
4
votes
0 answers

What is the difference between WinVerifyTrust() and WinVerifyTrustEx()?

MSDN documents the WinVerifyTrust() and WinVerifyTrustEx() functions, and it isn't very clear what the difference between them is. The function signatures are the same except for the last parameter: LONG WINAPI WinVerifyTrust( _In_ HWND hWnd, …
Michael Geary
  • 28,450
  • 9
  • 65
  • 75
4
votes
4 answers

Memory Leak while verifying Authenticode Signature of Executables?

I am using WinVerifyTrust to verify the validity of some Windows executables with the following function, called in a loop from _tmain: int signature_is_valid(const wchar_t *filepath) { GUID guid = WINTRUST_ACTION_GENERIC_VERIFY_V2; …
the_void
  • 5,512
  • 2
  • 28
  • 34
3
votes
3 answers

Detect a digital signature without WinVerifyTrust

I have a large number of EXE files and need to figure out which ones have digital signatures. Does anyone know if there is a way to check without access to WinVerifyTrust (they're all on a Unix server). I can't seem to find any information on where…
Mitchell V
  • 837
  • 1
  • 7
  • 13
3
votes
3 answers

WinVerifyTrust fails rarely

I use winverifytrust to validate signature. I am verifying using WINTRUST_ACTION_GENERIC_VERIFY_V2. But rarely it has returned "NO SIGNATURE FOUND". I am unable to simulate the issue. I am getting feedback that this is happening in some users.…
user738471
  • 879
  • 1
  • 8
  • 10
3
votes
0 answers

validating a digitally signed vbscript in C#

Need example code for validating a signed vbscript in C# using WinVerifyTrust. Per MS - you can sign a vbscript - https: //technet.microsoft.com /en-us/library/ee176795.aspx I grabbed an example from msdn written in C and successfully…
kpirkl
  • 31
  • 1
3
votes
1 answer

How to check for revocation list only from the CRL?

I am using WinVerifyTrust to verify a file signature. the connection to the internet is very bad so I want to check only the local cache. The problem is that I am confused about how should I set the parameters in WinTrustData regarding…
user844541
  • 2,868
  • 5
  • 32
  • 60
3
votes
2 answers

How can I check the digital signature of an .exe or .dll in Perl?

I'm trying to find a way to script (preferably in Perl) - a check to see if an .exe or .dll is digitally signed - if anyone has an easy direction to point me, I'd appreciate it.
user158046
3
votes
1 answer

WinVerifyTrust returns 0x80092003 - CRYPT_E_FILE_ERROR

I am working on C# .net 3.5 and running on 64 bit platform. I have a 32 bit dll that I need to dynamically load. The dll is located under "C:\Program files\ApplicationToLoad\Application.dll" because the dll is 32 bit I have to compile my application…
user844541
  • 2,868
  • 5
  • 32
  • 60
1
vote
2 answers

Verify digital signature within system32/drivers folder

I've spent all night researching this without a solution. I'm trying to verify the digital signature of a file in the drives folder (C:\Windows\System32\drivers*.sys) pick whatever one you want. I know that the code is correct because if you move…
SNyamathi
  • 658
  • 6
  • 10
1
vote
1 answer

I am trying to implement WinVerifyTrust in rust but facing issue in initializing WinTrustData structure members

Initializing Wintrust_File_Info let mut wt_file_info = WINTRUST_FILE_INFO{ cbStruct : std::mem::size_of::() as DWORD, pcwszFilePath : file_path_wide.as_ptr(),//.as_ptr() as *const u16, hFile :…
Amit
  • 13
  • 4
1
2