Authenticode digital signatures
Authenticode is a code-signing technology developed by Microsoft that helps users to check the publisher who signed the program. It also ensures that the signed program has not been tampered with by attackers during transport. Additionally, the signature used to sign must be verified by trusted certificate authorities (CAs) to ensure that the file being signed actually comes from the publisher.
For more information, please refer to Microsoft’s public document Authenticode Digital Signatures https://learn.microsoft.com/en-us/windows-hardware/drivers/install/authenticode. This introduction states that Microsoft has designed the Authenticode specification to provide a digital signature mechanism that allows users to verify the code’s integrity. This integrity proves that the program has not been tampered with by hackers or backdoors, but rather that the original program content has been obtained from a trusted company without forgery.
...