Trusted Installer Permissions -

| Principal | Permissions | |-----------|--------------| | NT SERVICE\TrustedInstaller | Full Control | | NT AUTHORITY\SYSTEM | Full Control | | BUILTIN\Administrators | Read & Execute, List, Read | | BUILTIN\Users | Read & Execute, List, Read |

bool verifyInstaller(const std::string& digitalSignature, const std::string& expectedSignature) unsigned char hash[SHA256_DIGEST_LENGTH]; SHA256_CTX sha256; SHA256_Init(&sha256); SHA256_Update(&sha256, digitalSignature.c_str(), digitalSignature.size()); SHA256_Final(hash, &sha256); trusted installer permissions

#include <iostream> #include <string> #include <openssl/sha.h> trusted installer permissions

Even SYSTEM may have fewer rights than TrustedInstaller on some files. trusted installer permissions