diff --git a/vendor/THIRD_PARTY_NOTICES.md b/vendor/THIRD_PARTY_NOTICES.md
index 99339d07..cb5285f9 100644
--- a/vendor/THIRD_PARTY_NOTICES.md
+++ b/vendor/THIRD_PARTY_NOTICES.md
@@ -1,10 +1,10 @@
 # Vendor Binaries
 This folder contains pre-compiled binaries from a variety of sources. These should be updated periodically.
 
-### signtool.exe v10.0.22621
+### signtool.exe v10.0.22621.3233
 - Signs application binaries while building packages.
-- Can be found in the Windows SDK at "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x86\signtool.exe" or similar, depending on the version of the SDK you have installed.
-- License? https://github.com/dotnet/docs/issues/10478
+- Can be found at https://www.nuget.org/packages/Microsoft.Windows.SDK.BuildTools/10.0.22621.3233 under bin\10.0.22621.0\x64
+- License: https://aka.ms/WinSDKLicenseURL
 
 ### zstd.exe v1.5.5
 - Fast compression and diff/patch
diff --git a/vendor/signing/Microsoft.Windows.Build.Appx.AppxPackaging.dll.manifest b/vendor/signing/Microsoft.Windows.Build.Appx.AppxPackaging.dll.manifest
new file mode 100644
index 00000000..becc73ae
--- /dev/null
+++ b/vendor/signing/Microsoft.Windows.Build.Appx.AppxPackaging.dll.manifest
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes" ?> 
+
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+
+  <assemblyIdentity
+      name="Microsoft.Windows.Build.Appx.AppxPackaging.dll"
+      version="0.0.0.0"/>
+
+  <file name="AppxPackaging.dll">
+    <comClass
+        clsid="{5842a140-ff9f-4166-8f5c-62f5b7b0c781}"
+        threadingModel="Both"
+        description="AppxFactory class"/>
+    <comClass
+        clsid="{DC664FDD-D868-46EE-8780-8D196CB739F7}"
+        threadingModel="Both"
+        description="AppxEncryptionFactory class"/>
+    <comClass
+        clsid="{378E0446-5384-43B7-8877-E7DBDD883446}"
+        threadingModel="Both"
+        description="AppxBundleFactory class"/>
+    <comClass
+        clsid="{48DE828C-730C-49AF-AE84-759C609911EE}"
+        threadingModel="Both"
+        description="AppxNoValidationFactory class"/>
+    <comClass
+        clsid="{F004F2CA-AEBC-4B0D-BF58-E516D5BCC0AB}"
+        threadingModel="Both"
+        description="AppxPackageEditor class"/>
+    <comClass
+        clsid="{7F00FA1E-9820-47B1-9C4F-8701F1432177}"
+        threadingModel="Both"
+        description="AppxPackagingLayoutReader class"/>
+    <comClass
+        clsid="{0CF07551-EEF2-420C-B5AB-7E4FEB2249CF}"
+        threadingModel="Both"
+        description="AppxFactoryInternal class"/>
+    <comClass
+        clsid="{50CA0A46-1588-4161-8ED2-EF9E469CED5D}"
+        threadingModel="Both"
+        description="AppxPackagingDiagnosticEventSinkManager class"/>
+  </file>
+
+  <dependency>
+    <dependentAssembly>
+      <assemblyIdentity
+        name="Microsoft.Windows.Build.Appx.OpcServices.dll"
+        version="0.0.0.0"/>
+    </dependentAssembly>
+  </dependency>
+
+</assembly>
diff --git a/vendor/signing/Microsoft.Windows.Build.Appx.AppxSip.dll.manifest b/vendor/signing/Microsoft.Windows.Build.Appx.AppxSip.dll.manifest
new file mode 100644
index 00000000..111d35ec
--- /dev/null
+++ b/vendor/signing/Microsoft.Windows.Build.Appx.AppxSip.dll.manifest
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes" ?> 
+
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+
+  <assemblyIdentity
+      name="Microsoft.Windows.Build.Appx.AppxSip.dll"
+      version="0.0.0.0"/>
+
+  <file name="AppxSip.dll"/>
+
+  <dependency>
+    <dependentAssembly>
+      <assemblyIdentity
+        name="Microsoft.Windows.Build.Appx.AppxPackaging.dll"
+        version="0.0.0.0"/>
+    </dependentAssembly>
+  </dependency>
+
+</assembly>
diff --git a/vendor/signing/Microsoft.Windows.Build.Appx.OpcServices.dll.manifest b/vendor/signing/Microsoft.Windows.Build.Appx.OpcServices.dll.manifest
new file mode 100644
index 00000000..b17e53d1
--- /dev/null
+++ b/vendor/signing/Microsoft.Windows.Build.Appx.OpcServices.dll.manifest
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes" ?> 
+
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+
+  <assemblyIdentity
+      name="Microsoft.Windows.Build.Appx.OpcServices.dll"
+      version="0.0.0.0"/>
+
+  <file name="OpcServices.dll">
+    <comClass
+        clsid="{6B2D6BA0-9F3E-4f27-920B-313CC426A39E}"
+        threadingModel="Both"
+        description="OpcFactory class"/>
+  </file>
+
+</assembly>
diff --git a/vendor/signing/Microsoft.Windows.Build.Signing.mssign32.dll.manifest b/vendor/signing/Microsoft.Windows.Build.Signing.mssign32.dll.manifest
new file mode 100644
index 00000000..422623cd
--- /dev/null
+++ b/vendor/signing/Microsoft.Windows.Build.Signing.mssign32.dll.manifest
@@ -0,0 +1,11 @@
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+
+<assemblyIdentity
+    name="Microsoft.Windows.Build.Signing.mssign32.dll"
+    version="0.0.0.0"
+/>
+
+  <file name="mssign32.dll">
+  </file>
+
+</assembly>
diff --git a/vendor/signing/Microsoft.Windows.Build.Signing.wintrust.dll.manifest b/vendor/signing/Microsoft.Windows.Build.Signing.wintrust.dll.manifest
new file mode 100644
index 00000000..651475f9
--- /dev/null
+++ b/vendor/signing/Microsoft.Windows.Build.Signing.wintrust.dll.manifest
@@ -0,0 +1,11 @@
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+
+<assemblyIdentity
+    name="Microsoft.Windows.Build.Signing.wintrust.dll"
+    version="0.0.0.0"
+/>
+
+  <file name="wintrust.dll">
+  </file>
+
+</assembly>
diff --git a/vendor/signing/appxpackaging.dll b/vendor/signing/appxpackaging.dll
new file mode 100644
index 00000000..6a7e4bde
Binary files /dev/null and b/vendor/signing/appxpackaging.dll differ
diff --git a/vendor/signing/appxsip.dll b/vendor/signing/appxsip.dll
new file mode 100644
index 00000000..e02e2b12
Binary files /dev/null and b/vendor/signing/appxsip.dll differ
diff --git a/vendor/signing/mssign32.dll b/vendor/signing/mssign32.dll
new file mode 100644
index 00000000..466e31b0
Binary files /dev/null and b/vendor/signing/mssign32.dll differ
diff --git a/vendor/signing/opcservices.dll b/vendor/signing/opcservices.dll
new file mode 100644
index 00000000..744130d3
Binary files /dev/null and b/vendor/signing/opcservices.dll differ
diff --git a/vendor/signing/signtool.exe b/vendor/signing/signtool.exe
index b34d5379..3a59f1bd 100644
Binary files a/vendor/signing/signtool.exe and b/vendor/signing/signtool.exe differ
diff --git a/vendor/signing/signtool.exe.manifest b/vendor/signing/signtool.exe.manifest
new file mode 100644
index 00000000..64796f05
--- /dev/null
+++ b/vendor/signing/signtool.exe.manifest
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?> 
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 
+
+    <assemblyIdentity
+        name=" "
+        version="0.0.0.0"
+    />
+
+    <dependency>
+        <dependentAssembly>
+            <assemblyIdentity
+                name="Microsoft.Windows.Build.Signing.mssign32.dll"
+                version="0.0.0.0"
+            />
+        </dependentAssembly>
+    </dependency>
+
+    <dependency>
+        <dependentAssembly>
+            <assemblyIdentity
+                name="Microsoft.Windows.Build.Signing.wintrust.dll"
+                version="0.0.0.0"
+            />
+        </dependentAssembly>
+    </dependency>
+
+    <dependency>
+        <dependentAssembly>
+            <assemblyIdentity
+                name="Microsoft.Windows.Build.Appx.AppxSip.dll"
+                version="0.0.0.0"
+            />
+        </dependentAssembly>
+    </dependency>
+</assembly>
diff --git a/vendor/signing/wintrust.dll b/vendor/signing/wintrust.dll
new file mode 100644
index 00000000..e5e29c33
Binary files /dev/null and b/vendor/signing/wintrust.dll differ
diff --git a/vendor/signing/wintrust.dll.ini b/vendor/signing/wintrust.dll.ini
new file mode 100644
index 00000000..841c6091
--- /dev/null
+++ b/vendor/signing/wintrust.dll.ini
@@ -0,0 +1,53 @@
+[0]
+DLL=msisip.dll
+GUID={000C10F1-0000-0000-C000-000000000046}
+CryptSIPDllCreateIndirectData=MsiSIPCreateIndirectData
+CryptSIPDllGetSignedDataMsg=MsiSIPGetSignedDataMsg
+CryptSIPDllIsMyFileType2=MsiSIPIsMyTypeOfFile
+CryptSIPDllPutSignedDataMsg=MsiSIPPutSignedDataMsg
+CryptSIPDllRemoveSignedDataMsg=MsiSIPRemoveSignedDataMsg
+CryptSIPDllVerifyIndirectData=MsiSIPVerifyIndirectData
+
+
+[1]
+DLL=AppxSip.dll
+GUID={0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}
+CryptSIPDllCreateIndirectData=AppxSipCreateIndirectData
+CryptSIPDllGetSignedDataMsg=AppxSipGetSignedDataMsg
+CryptSIPDllIsMyFileType2=AppxSipIsFileSupportedName
+CryptSIPDllPutSignedDataMsg=AppxSipPutSignedDataMsg
+CryptSIPDllRemoveSignedDataMsg=AppxSipRemoveSignedDataMsg
+CryptSIPDllVerifyIndirectData=AppxSipVerifyIndirectData
+
+
+[2]
+DLL=AppxSip.dll
+GUID={0F5F58B3-AADE-4B9A-A434-95742D92ECEB}
+CryptSIPDllCreateIndirectData=AppxBundleSipCreateIndirectData
+CryptSIPDllGetSignedDataMsg=AppxBundleSipGetSignedDataMsg
+CryptSIPDllIsMyFileType2=AppxBundleSipIsFileSupportedName
+CryptSIPDllPutSignedDataMsg=AppxBundleSipPutSignedDataMsg
+CryptSIPDllRemoveSignedDataMsg=AppxBundleSipRemoveSignedDataMsg
+CryptSIPDllVerifyIndirectData=AppxBundleSipVerifyIndirectData
+
+
+[3]
+DLL=AppxSip.dll
+GUID={CF78C6DE-64A2-4799-B506-89ADFF5D16D6}
+CryptSIPDllCreateIndirectData=EappxSipCreateIndirectData
+CryptSIPDllGetSignedDataMsg=EappxSipGetSignedDataMsg
+CryptSIPDllIsMyFileType2=EappxSipIsFileSupportedName
+CryptSIPDllPutSignedDataMsg=EappxSipPutSignedDataMsg
+CryptSIPDllRemoveSignedDataMsg=EappxSipRemoveSignedDataMsg
+CryptSIPDllVerifyIndirectData=EappxSipVerifyIndirectData
+
+
+[4]
+DLL=AppxSip.dll
+GUID={D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}
+CryptSIPDllCreateIndirectData=EappxBundleSipCreateIndirectData
+CryptSIPDllGetSignedDataMsg=EappxBundleSipGetSignedDataMsg
+CryptSIPDllIsMyFileType2=EappxBundleSipIsFileSupportedName
+CryptSIPDllPutSignedDataMsg=EappxBundleSipPutSignedDataMsg
+CryptSIPDllRemoveSignedDataMsg=EappxBundleSipRemoveSignedDataMsg
+CryptSIPDllVerifyIndirectData=EappxBundleSipVerifyIndirectData
\ No newline at end of file