How to authenticate Windows file systems?

Question

Microsoft

Is there any way to verify that a file is from Microsoft and has not been modified? Maybe there is some database of hashes of all files of all editions of the OS (first of all, files from the% systemroot% directory are of interest)?
I understand that with every update some of the files are modified, but I don't think it's too difficult for a company like Microsoft to add information about fixed files to the database.

Answer 1

Checking the integrity of system files with the sfc.exe command on the command line with prefixes

Answer 2

sigverif
But what is the task? If you catch viruses, then you just need to reinstall.

Answer 3

Digital signature?

Answer 4

When combofix is ​​running , there is a check for modified files, and if they are found, it tries to restore from a backup copy, it rolls in 50-70% and the file is restored. If it was not possible to restore, then you can simply manually restore / copy from the working machine.

Answer 5

and that 's not it at all?

Answer 6

AVZ+VirusTotal+Winternals