content: Great intention and practical precaution. But if the system is already compromised, the ".exe" file may as well be modified to eliminate certificate verification. It would be very nice if there is a tool to detect whether the machine is compromised or not.