c++ - How to verify (programmatically) if an exe has been tampered or not? -


context : third party exe tries communicate application. application should ensure third party exe not tampered or modified other owner. both external pe , application runs on same machine , external pe relies on com interface fetch data needs application.

i extent aware sole purpose of signing executable ca certificate ensure authenticity , integrity. have validate certificate of external pe confirm identity. still have following doubts.

1) win-api provides winverifytrust , certverifycertificatechainpolicy functions. both of these functions can used trust verification of executable. difference? in case should function?

2) if use these function verify certificates, possible malicious app can spoof certificates(pose valid exe) or fool other means , connect application?

thanks in advance help.


Comments

Popular posts from this blog

Angularjs unit testing - ng-disabled not working when adding text to textarea -

sql - invalid in the select list because it is not contained in either an aggregate function -

How to start daemon on android by adb -