>

Verify Code Signatures with Get-AuthenticodeSignature

Read the Authenticode signature status and signer of any executable or script in PowerShell.

WindowssignaturesecuritypowershellLow risk
Run `Get-AuthenticodeSignature "setup.exe" | Format-List Status, SignerCertificate` and confirm Status is Valid before running unknown software.

01Command

Command
$ Get-AuthenticodeSignature "C:\Downloads\setup.exe" | Format-List Status, StatusMessage, SignerCertificate

02What it does

Get-AuthenticodeSignature reads the Authenticode signature embedded in EXE, DLL, MSI, CAB and PS1 files and reports Valid, NotSigned, HashMismatch or UnknownError, along with the signer certificate subject. A HashMismatch status means the file was modified after signing, which is a strong tamper signal. It is the fastest pre-run check for scripts downloaded from the internet that Windows may block anyway.

03Risk

RiskLow risk
!Warning: A Valid status only proves the signature chain and file integrity, not that the publisher is trustworthy — also read the SignerCertificate subject.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

Last verified: 2026-09-17 · Category: Files & Folders

06Related solutions

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy
WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17
Grep on Windows: Select-String
Windowssearchtextpowershell

Search inside text files and logs with regex, returning file, line number and match.

Low risk ✓ 2026-09-17
Take ownership of a file or folder with takeown and icacls
WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17