Questions tagged [winverifytrust]
28 questions
1
vote
1 answer
WinVerifyTrust only works when using a file not a memory blob
I am trying to the WinVerifyTrust function to verify the signature of a msi.
And while this works for files on the file system I cannot get it to work with a memory blob.
This basis of my example to show the problem is the example program from…
mkaes
- 13,781
- 10
- 52
- 72
1
vote
1 answer
What is a trust provider?
As the documentation says:
The WinVerifyTrust function enables applications to invoke a trust provider to verify that a specified object satisfies the criteria of a specified verification operation.
(from…
Mr Guy
- 11
- 1
1
vote
1 answer
Why does WinVerifyTrust() failing only on machine which is not connected to internet?
I wanted to check the trust of the one of the .exe file in our project for which I am using C#.
I have referred - http://pinvoke.net/default.aspx/wintrust/WinVerifyTrust.html
Here is my code snippet.
WinTrustData wtd = new…
Tausif
- 117
- 1
- 3
- 17
1
vote
1 answer
Getting digital signature from mmc.exe at windows 8
I have an application that tries to verify the mmc.exe (services) signature. (the context of the application I think is irrelevant) I am trying with winapi function which both fails with
WinVerifyTrust. I get TRUST_E_BAD_DIGEST when I am trying…
whIsrael
- 27
- 10
1
vote
1 answer
winverifytrust memory leak
I had a question on winverifytrust's catalog signing. We are using winverifytrust and we don't call WTD_ACTION_STATE_CLOSE after the call, we call it only if hWVTStateData is not NULL. What we see is that system memory consumption continues to rise…
balbir
- 13
- 2
1
vote
2 answers
How to identify an Isolated Network
I am developing a c# .Net3.5 application.
The applications checks the signature of files using WinVerifyTrust. The problem is that on isolated networks (i.e. no Internet access but machine still has an IP address) it takes a very long time (~20…
user844541
- 2,868
- 5
- 32
- 60
0
votes
0 answers
Get-AuthenticodeSignature Status is returning UnknownError for 1 exe out of 2
I call the Get-AuthenticodeSignature for the 2 exe that deployed on one of the machine. for One exe I am getting status as valid for other I am getting UnknownError
PS > Get-AuthenticodeSignature -FilePath "exe1.exe"
SignerCertificate …
Nikhil
- 1
0
votes
0 answers
How to verify trust of Certificate/Digital signature of PE file in a file-stream and not a file on disk
I am receiving a pointer to memory which contains a file and I need to check if the file has an embedded certificate (digital signature) and that it is valid.
In the past I used winverifytrust for checking this with the…
TBD
- 509
- 7
- 15
0
votes
1 answer
WinVerifyTrust returns CERT_E_UNTRUSTEDROOT for a valid (loaded) driver
In the following code snippet, WinVerifyTrust returns CERT_E_UNTRUSTEDROOT for a kernel driver file (.sys) that is loaded and running on the system:
GUID guidAction = DRIVER_ACTION_VERIFY;
WINTRUST_FILE_INFO sWintrustFileInfo = { 0 };
…
Uriel G
- 23
- 6
0
votes
0 answers
How can I verify SHA-2 signature of PE file?
I would like to verify SHA-2 authenticode digital signature of PE file on Windows platform.
I tried to verify a SHA-2 signature by using WinVerifyTrustEx().
WinVerifyTrustEx works fine on Windows 7. But WinVerifyTrustEx does not work on Windows…
橋本敬
- 9
- 2
0
votes
1 answer
WinVerifyTrust error code handling
I've been tasked with determining whether a particular DLL from a third party company has been tampered with, after installation on a user's system. I've never done anything related to digital signing before. I'm trying to set up a test on my own…
Sasquatchua
- 53
- 7
0
votes
1 answer
WinVerifyTrust uses Windows Driver Verification Policy when run as part of MSI custom action
I have some (c++ win32 api) code that verifies signature of the files.
The same code executed in ActiveX and in custom action of the MSI.
When it run as part of ActiveX the check succeed, but when it is executed as part of custom action of MSI the…
Zaky
- 369
- 6
- 21
0
votes
1 answer
winVerifyTrust is crushed when the sys time is not accurate
I am developing a C# .net 3.5 application.
I am trying to verify a file signature by using WinVerifyTrust.
I also want a revocation check so I set the following parametrs of the WinTrustData.
FdwRevocationChecks =…
user844541
- 2,868
- 5
- 32
- 60