Office document signature is cryptographically invalid

The document's Authenticode/PKCS#7 signature is present but does not cryptographically verify: either the signer's signature over the signed attributes is invalid, or the signed content digest does not match the signature's encapsulated content. The signature was tampered with, forged, or corrupted — a strong tell when paired with payload signals.