Yes, kind of like that. That’s basically the point of digital signatures (when they don’t have a bug to bypass them, like in this case). They don’t treat conca

Yes, kind of like that. That’s basically the point of digital signatures (when they don’t have a bug to bypass them, like in this case). They don’t treat concatenated malicious files as safe, they trust that files signed by MS are safe. You aren’t supposed to be able to concatenate a file and still have the signature check out. That’s the bug. If you want a good reason why, ask McAfee about the time that they incorrectly detected svchost.exe as a virus and made every customer’s windows machine around the world unbootable.