Windows by default requires 3rd party executables to be signed by Microsoft certificate chains.