I found this in a Microsoft's document :
Let's see which commands are involved in these checks. WinVerifytrust call seems to be the way to verify a file with a catalog.5.7 Verifying Files and Pruning the File Queue
During the verifying-and-pruning stage of driver installation, SetupAPI logs messages that pertain to verifying and pruning (in other words, deleting) file-copy operations from the file queue. SetupAPI performs these tasks before it commits the file queue.
SetupAPI logs messages for this stage only if an error occurs or if one of the verbose logging levels is set.
If SetupAPI verifies a file, it deletes the file’s corresponding copy operation from the file queue; when SetupAPI subsequently commits the file queue, it does not copy the file to the system.
SetupAPI verifies a file if and only if the following conditions are true:
• The driver package has a Windows Hardware Quality Labs (WHQL) catalog, a Microsoft Authenticode® catalog, or a test catalog.
• All the INF files that are associated with the file’s driver package are installed in the default system INF file directory, and the catalog files that are associated with these INF files are installed in the crypto catalog store.
• The signatures of all the INF files that are associated with the file’s driver package are validated by their respective catalog files.
• The signature of the file is validated by the catalog file that is associated with a particular INF file—the one that specifies the source media layout for the file. (This INF file is the one containing the SourceDisksFiles and SourceDisksNames sections that identify the source media and the source file for the file to be verified.)
• The file exists in a particular destination directory—the one specified by the DestinationDirs section in the INF file that specifies the source media layout for the file.
If SetupAPI does not verify a file, it leaves the file’s copy operation in the file queue. When SetupAPI subsequently commits the file queue, it copies the file to the system—unless the existing file on the system is in use and a reboot is not required. In this case, SetupAPI compares the file in the driver package with the existing file. If they are identical, SetupAPI does not copy the file, and it logs the following type of message:
#I193 File "…\SET87.tmp" is identical to existing "…\Some_File_Name_And_Extension", delayed copy skipped.
5.7.1 Verifying Files and Pruning the File Queue: Verbose Logging
The following example illustrates what the verifying-and-pruning subsection in a SetupAPI log file looks like for a Blender device—if the most verbose logging level is set.
@ 10:18:25.843 #V286 Verification using alternate platform (Platform = 2, High Version = 5.1, Low Version = 5.0).
@ 10:18:25.890 #V132 File "e:\windows\inf\Blender_INF_File_Name.inf" (key "Blender_INF_File_Name.inf") is signed in catalog "Blender_Catalog_File_Path\Blender_Catalog_File_Name.cat".
@ 10:18:25.890 #V286 Verification using alternate platform (Platform = 2, High Version = 5.1, Low Version = 5.0).
@ 10:18:25.906 #V132 File "e:\windows\inf\layout.inf" (key "layout.inf") is signed in catalog "E:\WINDOWS\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT".
@ 10:18:25.906 #T185 Pruning Files: Verifying catalogs/INFs.
@ 10:18:25.906 #T186 Pruning Files: Verifying catalogs/INFs completed.
@ 10:18:25.906 #V286 Verification using alternate platform (Platform = 2, High Version = 5.1, Low Version = 5.0).
@ 10:18:25.921 #V132 File "E:\WINDOWS\System32\DRIVERS\blender.sys" (key "blender.sys") is signed in catalog "Blender_Catalog_File_Path\Blender_Catalog_File_Name.cat".
@ 10:18:25.921 #V191 File "E:\WINDOWS\System32\DRIVERS\blender.sys" pruned from copy.
UPDATE: The setupapi.log shows this error message:
[2013/09/26 10:45:55 2176.664 Driver Install]
#-019 Searching for hardware ID(s): acpi\genuineintel_-_x86_family_6_model_23,*genuineintel_-_x86_family_6_model_23,acpi\genuineintel_-_x86_family_6,*genuineintel_-_x86_family_6,acpi\genuineintel_-_x86,*genuineintel_-_x86
#-018 Searching for compatible ID(s): acpi\processor
#-198 Command line processed: "C:\SP3\i386\update\update.exe"
#I022 Found "ACPI\GenuineIntel_-_x86" in C:\WINDOWS\INF\cpu.inf; Device: "Intel Processor"; Driver: "Intel Processor"; Provider: "Microsoft"; Mfg: "Intel"; Section name: "IntelPPM_Inst".
#I023 Actual install section: [IntelPPM_Inst.NT]. Rank: 0x00000004. Effective driver date: 04/01/2004.
#-166 Device install function: DIF_SELECTBESTCOMPATDRV.
#I063 Selected driver installs from section [IntelPPM_Inst] in "c:\windows\inf\cpu.inf".
#I320 Class GUID of device remains: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}.
#I060 Set selected driver.
#I058 Selected best compatible driver.
#-124 Doing copy-only install of "ACPI\GENUINEINTEL_-_X86_FAMILY_6_MODEL_23\_0".
#E358 An unsigned or incorrectly signed file "c:\windows\inf\layout.inf" for driver "Intel Processor" blocked (server install). Error 1168: Element not found.
#W187 Install failed, attempting to restore original files.