189a3842-3041-11d1-85e1-00c04fc295ee
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Signature

189a3842-3041-11d1-85e1-00c04fc295ee 1997-09-18 16:13:51⋮22658· 5882 HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Signature

MSTrustProvider

path: Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Signature\{189A3842-3041-11D1-85E1-00C04FC295EE}
Function: SoftpubLoadSignature
DLL: WINTRUST.DLL
(voting is disabled)
0 c.ps1v001 Microsoft Windows 7 Entreprise v6.1.7601.65536 2018-04-18
WINTRUST_ACTION_GENERIC_CERT_VERIFY

MSTrust provider
from https://specterops.io/assets/resources/SpecterOps_Subverting_Trust_in_Windows.pdf
(voting is disabled)
0 autopush - mstrust
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Initialization

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Initialization

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Message

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Message

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Signature

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Signature

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Certificate

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Certificate

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\CertCheck

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\CertCheck

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Cleanup

Windows 98 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Cleanup

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
(voting is disabled)
0 autopush - reg-win98
HKLM\Software\Microsoft\Cryptography\Providers\Trust\CertCheck

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\CertCheck

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Certificate

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Certificate

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Cleanup

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Cleanup

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Initialization

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Initialization

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Message

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Message

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\Software\Microsoft\Cryptography\Providers\Trust\Signature

Wine 1.1.0 Registry
object: reg-subkey
name: None
key: HKLM\Software\Microsoft\Cryptography\Providers\Trust\Signature

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-wine11.xml
(voting is disabled)
0 autopush - reg-wine11
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\CertCheck

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\CertCheck

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Certificate

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Certificate

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Cleanup

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Cleanup

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\FinalPolicy

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\FinalPolicy

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Initialization

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Initialization

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Message

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Message

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Signature

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Signature

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
(voting is disabled)
0 autopush - reg-vista
(in wine/dlls/wintrust/register.c:518) * WINTRUST_ACTION_GENERIC_CERT_VERIFY ({189A3842-3041-11D1-85E1-00C04FC295EE})

from the wine source code
(voting is disabled)
-1 autopush - wine
wine/dlls/wintrust/register.c:517

*   WINTRUST_ACTION_GENERIC_CERT_VERIFY ({189A3842-3041-11D1-85E1-00C04FC295EE})
in wine/dlls/wintrust/register.c:517
(voting is disabled)
-2 wine
reactos/dll/win32/wintrust/register.c:517

*   WINTRUST_ACTION_GENERIC_CERT_VERIFY ({189A3842-3041-11D1-85E1-00C04FC295EE})
in reactos/dll/win32/wintrust/register.c:517
(voting is disabled)
-2 reactos
Include/10.0.16299.0/um/SoftPub.h:91

//          {189A3842-3041-11d1-85E1-00C04FC295EE}
in Include/10.0.16299.0/um/SoftPub.h:91
(voting is disabled)
-2