{"id":6535,"date":"2016-04-03T14:21:29","date_gmt":"2016-04-03T14:21:29","guid":{"rendered":"http:\/\/www.top-password.com\/blog\/?p=6535"},"modified":"2016-04-03T14:34:54","modified_gmt":"2016-04-03T14:34:54","slug":"fix-the-signature-of-this-program-is-corrupt-or-invalid","status":"publish","type":"post","link":"https:\/\/www.top-password.com\/blog\/fix-the-signature-of-this-program-is-corrupt-or-invalid\/","title":{"rendered":"How to Fix “The signature of this program is corrupt or invalid”"},"content":{"rendered":"

When you download a software with Microsoft Edge or Internet Explorer, you might receive the error message saying “The signature of this program is corrupt or invalid<\/em>“.<\/p>\n

\"edge-warn-signature-corrupt\"<\/p>\n

\"ie-warn-signature-corrupt\"<\/p>\n

Recently we’ve also heard of our customers having this issue when downloading the Lock My Folders<\/a> program in Windows 10, so we spend lots of time trying to reproduce this issue. We finally got to the bottom of the issue (we believe).<\/p>\n

The signature was never corrupt or even invalid. Microsoft released a cumulative security update KB3140745<\/a> for Windows 10 that deprecated support for SHA1 code signing certificate. Any programs signed with SHA1 certificate after January 1st, 2016 will be flagged as an invalid signature. In this tutorial we’ll explain how to check if your downloaded program is signed with SHA1 or not, then discuss the methods to get around the download issue.<\/p>\n

How do I know if a program is signed with SHA1?<\/strong><\/p>\n

    \n
  1. Right-click on your program and select Properties<\/strong>.<\/li>\n
  2. Click on the Digital Signatures<\/strong> tab.<\/li>\n
  3. Select the signature and click on the Details<\/strong> button.<\/li>\n
  4. Click the View Certificate<\/strong> button.<\/li>\n
  5. Click the Details<\/strong> tab.<\/li>\n
  6. Look at the Signature hash algorithm<\/strong>.\n

    \"sha1-certificate\"<\/li>\n<\/ol>\n

    Methods to fix “The signature of this program is corrupt or invalid”<\/strong><\/p>\n

    If you are the software developer, just contact the CA to re-issue or replace your SHA1 certificate with a new stronger SHA2 certificate, then sign your program with SHA2 certificate and the issue will be resolved.<\/p>\n

    If you download software from a reliable website and get the “The signature of this program is corrupt or invalid<\/strong>” error message, here are 3 ways to work around this problem:<\/p>\n