I have had some binary executable files (.exe) for Windows signed, I have checked the signature of the signed files, but I would also like to check that the file that I sent for signing is indeed identical to the signed file that I got back.
Obviously, the sha-256 hash of the signed and unsigned version of the executable file will not be identical since the signed file includes the signature.
So, how do I compare a signed .exe file with the unsigned version of the same .exe file on Windows?
signtool
appends a signature to a Windows .exe file: stackoverflow.com/questions/47646135/… Perhaps it's possible to reverse-engineer this process to remove the signature from the signed file, then compare this file to the unsigned file.