osslsigncode

osslsigncode is an OpenSSL-based cross-platform command-line tool for Microsoft Authenticode operations. It can sign and timestamp supported PE, CAB, CAT, MSI, APPX, and script files; verify embedded or catalog signatures; and extract, attach, or remove signatures. It is not a phishing framework and does not create redirectors. A valid signature indicates integrity and a signing identity under the selected trust chain, not that the file is benign or will be allowed by a target policy.