CryptVerifySignature returns original message with an additional header, why?

Question

I have used signtool to produce a PKCS#7 bundle that contains:

• a message
• a digital signature
• the signer certificate.

<