Windows Installer is Unverified or Unsigned

Bug reports
1

Once you’ve done the above, delete everything above this line.

Steps to reproduce

  1. On Windows 10.0.19045 Build 19045, Firefox navigate to Download - Obsidian
  2. Click on “Download for Windows”
  3. You should see that “Obsidian-1.8.4.exe” is downloaded. (SHA-256 4e6ef740d13b2e6713fd83de9475aca1468c4a6c8de1781d0e0f75c5e57caa20)
  4. If you double-click and attempt to install, Windows will warn you with the following message:

Windows protected your PC

Microsoft Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.

App: Obsidian-1.8.4.exe
Publisher: Dynalist Inc.

Did you follow the troubleshooting guide? [Y/N]

No, this is not related to the actual program but rather the installer.

Expected result

Installer should not trigger Microsoft SmartScreen while installing

Actual result

Installer triggers warning message from Microsoft SmartScreen.

Environment

Windows 10.0.19045 Build 19045, Firefox.

Additional information

This probably means one of the following:

  1. The publisher forgot to submit the installer to be signed by Microsoft
  2. Download page is hacked and installer may actually contain malicious code
1 Like
2

This?

3

The installer is signed. The key is relatively new. We think, Smart screen is being triggered regardless because Microsoft is slow to recognize the new version (exe) of the app.

1 Like
4

That makes sense, I will wait a few more days and check back to see if the installer still triggers the warning.

1 Like