Re: Intel Graphics Driver for Windows [15.40] - Files Not Signed With A Valid Certificate

Paul_L · ‎08-21-2020

Intel recently released new drivers on the below download page:
https://downloadcenter.intel.com/download/29804/Intel-Graphics-Driver-for-Windows-15-40-?product=97501

This was the original ZIP file from that download page:
win64_15.40.46.5144.zip
MD5: 8e7277d6071e303954380aca235fa2db

In this ZIP file, it wouldn't extract properly due to a problem with "igd11dxva32.dll". Also, a number of files in that ZIP file weren't signed with a valid code-signing certificate; they had been signed with an expired certificate.

Intel then released this new version of the ZIP file to fix the "igd11dxva32.dll" problem:
win64_15.40.46.5144.zip
MD5: b358258f4abae0d5711c7ae1892743fb

In this new ZIP file however, a number of .exe files still aren't signed with a valid code-signing certificate. They were signed on 10 August 2020 with a code-signing certificate that expired in 1 March 2020. These .exe files are therefore invalid and need to be signed with a certificate that is valid at the time of signing.

Screenshot:

PowerShell code to check for .exe and .dll files without a valid code-signing certificate in the extracted ZIP file:

# Path
$Path = "$env:UserProfile\Desktop\win64_15.40.46.5144"

# Run
Get-ChildItem -Recurse -Force -File -Path $Path | 
Where-Object { ($_.Extension -eq ".exe") -or ($_.Extension -eq ".dll") } | 
Get-AuthenticodeSignature | 
Where-Object { ($_.Status -ne "Valid") } | 
Select-Object -Property * -ExpandProperty SignerCertificate | 
Format-List -Property Path, Status, StatusMessage, Subject, SerialNumber, NotBefore, NotAfter

Output from the above PowerShell script:

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\igxpin.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\DPTopologyApp.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\DPTopologyAppv2_0.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\GfxUIEx.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\Gfxv2_0.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\Gfxv4_0.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igfxCUIService.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igfxEM.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igfxext.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igfxHK.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igfxSDK.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igfxTray.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\igxpun.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Path          : C:\Users\UserName\Desktop\win64_15.40.46.5144\Graphics\IntelCpHDCPSvc.exe
Status        : UnknownError
StatusMessage : A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Subject       : CN=Intel(R) pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US
SerialNumber  : 56000005DAB0988313DA8AB3E10000000005DA
NotBefore     : 02/03/2018 17:58:46
NotAfter      : 01/03/2020 17:58:46

Paul_L · ‎08-27-2020

Is this being looked in to?

Bielzaca · ‎03-24-2021

Dude, I can't believe that months later they still haven't fixed it, I tried to install the newest drivers for the Intel HD 4400 and couldn't because the installation doesn't work properly due to these expired certificate problem, and had to install the outdated manufacturer driver from 2014, is there any chances that this will be ever looked into?

Stefan3D · ‎03-24-2021

@Bielzaca

When you say "I tried to install the newest drivers" do you mean Version: 15.40.48.5171 (Latest) Date: 2/5/2021 ?

Which OS?

LookinForSolutionsvL · ‎10-18-2021

I'm investigating a possible security breach of an uncommon port that has been outdated for more than a decade and port scanners show n/a unknown. Trying to rule out PID's, I just need to know (about a million things but only 1 here, I guess): All this looks legit, albeit broken and FUBAR squared but ... legit... Is that a fair evaluation? The port number should remain untold, but it is scary as can be, and unknown also. Not sure which is scarierER.