It was a bug in the third party scanning products though. ("This behaviour could be used to hide and distribute malicious code in MSI signed files, in fact seve

It was a bug in the third party scanning products though. ("This behaviour could be used to hide and distribute malicious code in MSI signed files, in fact several security solutions rely on the output of Microsoft Windows code signing validation to avoid an in-depth scan").