We are a software publisher. Our installer EXEs are signed with our code signing certificate issued by Thawte. Recently, our installers are being flagged as "####.exe is not commonly downloaded and could be dangerous" --the call-to-action being discard.
These files do not have any malware in them. VirusTotal lists no error for the files. These files were created newly but were signed using our certificate that is in use for the past 1 year
On what grounds is Chrome flagging this as "dangerous". How many downloads does it need to be completed before it is no more "uncommon"?
How can we prevent such a dialog from appearing in the future?