Re: [PATCH v6 0/1] MR5516: wintrust: Add support for the PE image hash in CryptCATAdminCalcHashFromFileHandle().

[Alexandre Julliard (＠julliard)]

On Wed Apr 24 15:30:39 2024 +0000, Hans Leidekker wrote:
> Interesting. This patch produces the same hash for Windows 10
> kernel32.dll as native however. osslsigncode also makes this assumption.

Note that you can't compare RVAs to find out which is last, because the security directory address is a raw file offset, not an RVA.