Windows 10: RE exe file certificates

I have 2 files - supposedly the same version but not the same size.
1 has Verisign certificate and the UAC says it is a know vendor
2 has Symantec certificate and the UAC says it is an unknow vendor.
I checked the certificate in file explorer and the Symantec certificate is 1 day newer than the Verisign
That alone seems odd that a company would have 2 certificate licenses 1 day apart for the same software.
Can someone explain how this works.
Does W10 UAC chk the certs?
If so, then is it saying the Symantec cert isn't valid?

:)

 

Cannot install Nokia Suite

No luck. Installed the certificate and re-downloaded the install exe. Still same problem.

Screenshot attached.

Thanks





Capture.JPG

 

Window Smartscreen seems to forbid all certificated exe that went through the Internet since a few days, on every computers. What is happenning?

Hello,

Since this week, me and my clients realized that we can't send .exe files over the internet anymore.

We work in eLearning and we have to send exe applications, for instance presentations made with Articulate Storyline, or ElectronJS, which contain already certificated by the editor executable files.

What is happenning is that when sending the file via internet to someone, or to ourself (via file sharing services, or even by ftp using only client ftp), and then when launching the exe, SmartScreen triggers every time. This is very problematic because
we can't send something like that to our clients.

Also, I downloaded some exe files certificated by github, here: electron/electron

And these also trigger Windows SmartScreen!

This was not the case last week. And this seems to happen on every Windows 10 on the planet.

Does someone know what is going on?

Thank you per advance.

 

Hello ruggb:

As a beginning, please consider posting the SHA256 hash from the VirusTotal.com report of each file.

Thanks

 

they r too large to upload - but what I really want to know is the deal with the certs.
Both files have text about Symantec - only 1 has text about verisign and the mfg name in it.
1 is about 7k bigger than the other.
if UAC says it is a known vendor then does that mean the file was signed by the vendor and the file is as it left the vendor.
Similarly, if it has a cert and UAC says it is unknown does that imply that what was signed for is not what is in the file?
If the cert is invalid, that must mean it has a cert but the cert itself does not compute, correct?

 

Hello ruggb:

Without more detail the safest thing to tell you is that certs can possibly be counterfeited.

I am not even certain that Microsoft's Sysinternals sigcheck.exe check for digital signing/countersigning would bring you that much comfort.

Is anymore detail about these very large files forthcoming?

Thank you.

 

well, I guess I need to find a discussion on security certificates. I was thinking there might be some info here as to what W10s process for them was.
thx