In Windows 10 it is possible to run unsigned applications but it is not possible to run signed applications where the signature has expired.

Is there any way to rip the signature out of an application and make it unsigned so that it could run?

  • No; What you want is not possible. If you could do what you describe the signature could be replaced using the same mechanic and thus would basically be useless. – Ramhound Jul 27 '15 at 16:04
  • @Ramhound, if the signature would be replaced by someone else, it would have a different signer? I don't know about Windows, but on a Mac, that is perfectly possible. (On a Mac, that would only prompt the user if deemed important for the applicable security policy. And on a Mac, deleting a signature is possible as well.) – Arjan Jul 27 '15 at 19:33
  • Owyn, are you sure code signatures can expire? – Arjan Jul 27 '15 at 19:34
  • If the signature had a valid Time Server set when it was signed it can't expire (unless the certificate was revoked, not just expired). The only two things that matter are that the certificate was valid at the time of signing and the certificate for the time server's is currently valid. – Scott Chamberlain Jul 27 '15 at 19:46
  • I'm not talking about replacing a signature, just getting rid of it. I've heard it is expired and windows just blocks this app saying its author isn't trustworthy (so I googled around and it said its signature expired cuz program is old) – Owyn Jul 27 '15 at 21:20

I already downloaded windows sdk with signtool as it was suggested in comments but then I found delcert small tool that strips (removes) digital sign (Authenticode) from PE executable files

easy. Now I can finally run that app without windows blocking it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.