Deployment and Application do not have matching Security Zones

I am trying to install a piece of software from a Application Manifest. I get an error of the following:

Application cannot be started. Contact the application vendor.

After contacting the vendor, the answer is that there is a corrupt file on my machine (Windows 10).

I also looked at detailed information in the error message.

Summary:

Below is a summary of the errors, details of these errors are listed later in the log.
    * Activation of C:\Users\.... resulted in exception. Following failure messages were detected:
        + Deployment and application do not have matching security zones.

Detail:

Following errors were detected during this operation.
    * [2/25/2017 12:12:07 AM] System.Deployment.Application.InvalidDeploymentException (Zone)
        - Deployment and application do not have matching security zones.
        - Source: System.Deployment
        - Stack trace:
            at System.Deployment.Application.DownloadManager.DownloadApplicationManifest(AssemblyManifest deploymentManifest, String targetDir, Uri deploymentUri, IDownloadNotification notification, DownloadOptions options, Uri& appSourceUri, String& appManifestPath)
            at System.Deployment.Application.ApplicationActivator.DownloadApplication(SubscriptionState subState, ActivationDescription actDesc, Int64 transactionId, TempDirectory& downloadTemp)
            at System.Deployment.Application.ApplicationActivator.InstallApplication(SubscriptionState& subState, ActivationDescription actDesc)
            at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
            at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)

When researching the issue, there are many application developers on stackoverflow (and other sites) working to resolve corrupted files. But none of them were from the end user standpoint.

My question is: How do I figure out which file is corrupt? And how do I fix that file?

This is wrongly tagged as a Windows 10 issue, when it is actually an issue that applies to all versions of Windows.

Deployment and application do not have matching security zones means there is a mis-match between the security settings in the deployment environment - i.e. your Windows O/S, and those embedded in the .exe application you are trying to run.

Detecting such a mis-match is a basic security feature, common to all versions of Windows (going all the way back to Windows 98). If the O/S thinks the program being run is a security risk, it isn't going to run it.

The answer to the question being asked, of course, is that there is no solution.

This error, in many (though not all) of its various manifestations, informs the user to contact the application vendor: this is because (and is an admission of the fact that) this error has no user solutions. It can only be resolved by the developer.

If you're getting the error, it means Windows doesn't think the developer has signed the manifests. The developer has likely failed, in the Signing tab, to check/tick the check box; and/or has failed to select a valid security certificate; and/or has failed to publish the software as Full Trust (but only as partial trust). (There are other possibilities too, but those are the obvious ones.) Such errors are developer errors, so can't be fixed by the end-user.

In my case (Microsoft Office 365 eDiscovery Export Tool), the error appeared when downloading the file with Firefox. I switched to Internet Explorer to download and start the .application file and then the installation succeeded.