MSI (s) (C8:74) [13:44:16:595]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (C8:74) [13:44:16:595]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (C8:74) [13:44:16:595]: Executing op: ActionStart(Name=CA_CleanupInfs,,)
Action 13:44:16: CA_CleanupInfs. 
MSI (s) (C8:74) [13:44:16:615]: Executing op: CustomActionSchedule(Action=CA_CleanupInfs,ActionType=1025,Source=BinaryData,Target=MSI_CleanupInfs,)
MSI (s) (C8:74) [13:44:16:615]: Creating MSIHANDLE (26) of type 790536 for thread 4724
MSI (s) (C8:68) [13:44:16:625]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI8E37.tmp, Entrypoint: MSI_CleanupInfs
MSI (s) (C8!40) [13:44:16:645]: Creating MSIHANDLE (27) of type 790531 for thread 4160
1: [13:44:16]: FCSetupWx: MSI_CleanupInfs 
MSI (s) (C8!40) [13:44:16:645]: Closing MSIHANDLE (27) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:145]: Creating MSIHANDLE (28) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem0.inf 
MSI (s) (C8!40) [13:44:18:175]: Closing MSIHANDLE (28) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:175]: Creating MSIHANDLE (29) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem1.inf 
MSI (s) (C8!40) [13:44:18:175]: Closing MSIHANDLE (29) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:175]: Creating MSIHANDLE (30) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem10.inf 
MSI (s) (C8!40) [13:44:18:185]: Closing MSIHANDLE (30) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:185]: Creating MSIHANDLE (31) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem11.inf 
MSI (s) (C8!40) [13:44:18:185]: Closing MSIHANDLE (31) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:185]: Creating MSIHANDLE (32) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem12.inf 
MSI (s) (C8!40) [13:44:18:185]: Closing MSIHANDLE (32) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:185]: Creating MSIHANDLE (33) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem13.inf 
MSI (s) (C8!40) [13:44:18:185]: Closing MSIHANDLE (33) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:185]: Creating MSIHANDLE (34) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem14.inf 
MSI (s) (C8!40) [13:44:18:185]: Closing MSIHANDLE (34) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:185]: Creating MSIHANDLE (35) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem15.inf 
MSI (s) (C8!40) [13:44:18:195]: Closing MSIHANDLE (35) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:195]: Creating MSIHANDLE (36) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem16.inf 
MSI (s) (C8!40) [13:44:18:215]: Closing MSIHANDLE (36) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:215]: Creating MSIHANDLE (37) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem17.inf 
MSI (s) (C8!40) [13:44:18:225]: Closing MSIHANDLE (37) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:225]: Creating MSIHANDLE (38) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem18.inf 
MSI (s) (C8!40) [13:44:18:225]: Closing MSIHANDLE (38) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:225]: Creating MSIHANDLE (39) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem19.inf 
MSI (s) (C8!40) [13:44:18:225]: Closing MSIHANDLE (39) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:225]: Creating MSIHANDLE (40) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem2.inf 
MSI (s) (C8!40) [13:44:18:225]: Closing MSIHANDLE (40) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:225]: Creating MSIHANDLE (41) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem20.inf 
MSI (s) (C8!40) [13:44:18:235]: Closing MSIHANDLE (41) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:235]: Creating MSIHANDLE (42) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem21.inf 
MSI (s) (C8!40) [13:44:18:235]: Closing MSIHANDLE (42) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:235]: Creating MSIHANDLE (43) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem22.inf 
MSI (s) (C8!40) [13:44:18:235]: Closing MSIHANDLE (43) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:235]: Creating MSIHANDLE (44) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem23.inf 
MSI (s) (C8!40) [13:44:18:245]: Closing MSIHANDLE (44) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:245]: Creating MSIHANDLE (45) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem24.inf 
MSI (s) (C8!40) [13:44:18:245]: Closing MSIHANDLE (45) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:245]: Creating MSIHANDLE (46) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem25.inf 
MSI (s) (C8!40) [13:44:18:245]: Closing MSIHANDLE (46) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:245]: Creating MSIHANDLE (47) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem26.inf 
MSI (s) (C8!40) [13:44:18:245]: Closing MSIHANDLE (47) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:255]: Creating MSIHANDLE (48) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem27.inf 
MSI (s) (C8!40) [13:44:18:255]: Closing MSIHANDLE (48) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:255]: Creating MSIHANDLE (49) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem28.inf 
MSI (s) (C8!40) [13:44:18:255]: Closing MSIHANDLE (49) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:255]: Creating MSIHANDLE (50) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem29.inf 
MSI (s) (C8!40) [13:44:18:255]: Closing MSIHANDLE (50) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:255]: Creating MSIHANDLE (51) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem3.inf 
MSI (s) (C8!40) [13:44:18:255]: Closing MSIHANDLE (51) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:255]: Creating MSIHANDLE (52) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem30.inf 
MSI (s) (C8!40) [13:44:18:255]: Closing MSIHANDLE (52) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:275]: Creating MSIHANDLE (53) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem31.inf 
MSI (s) (C8!40) [13:44:18:275]: Closing MSIHANDLE (53) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:275]: Creating MSIHANDLE (54) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem32.inf 
MSI (s) (C8!40) [13:44:18:285]: Closing MSIHANDLE (54) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:285]: Creating MSIHANDLE (55) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem33.inf 
MSI (s) (C8!40) [13:44:18:285]: Closing MSIHANDLE (55) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:285]: Creating MSIHANDLE (56) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem34.inf 
MSI (s) (C8!40) [13:44:18:285]: Closing MSIHANDLE (56) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:285]: Creating MSIHANDLE (57) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem35.inf 
MSI (s) (C8!40) [13:44:18:285]: Closing MSIHANDLE (57) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:285]: Creating MSIHANDLE (58) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem36.inf 
MSI (s) (C8!40) [13:44:18:295]: Closing MSIHANDLE (58) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:295]: Creating MSIHANDLE (59) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem37.inf 
MSI (s) (C8!40) [13:44:18:295]: Closing MSIHANDLE (59) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:295]: Creating MSIHANDLE (60) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem38.inf 
MSI (s) (C8!40) [13:44:18:295]: Closing MSIHANDLE (60) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:295]: Creating MSIHANDLE (61) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem39.inf 
MSI (s) (C8!40) [13:44:18:295]: Closing MSIHANDLE (61) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:295]: Creating MSIHANDLE (62) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem4.inf 
MSI (s) (C8!40) [13:44:18:295]: Closing MSIHANDLE (62) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:295]: Creating MSIHANDLE (63) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem40.inf 
MSI (s) (C8!40) [13:44:18:305]: Closing MSIHANDLE (63) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:305]: Creating MSIHANDLE (64) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem41.inf 
MSI (s) (C8!40) [13:44:18:305]: Closing MSIHANDLE (64) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:305]: Creating MSIHANDLE (65) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem42.inf 
MSI (s) (C8!40) [13:44:18:305]: Closing MSIHANDLE (65) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:305]: Creating MSIHANDLE (66) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem44.inf 
MSI (s) (C8!40) [13:44:18:305]: Closing MSIHANDLE (66) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:305]: Creating MSIHANDLE (67) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem45.inf 
MSI (s) (C8!40) [13:44:18:305]: Closing MSIHANDLE (67) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:305]: Creating MSIHANDLE (68) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem46.inf 
MSI (s) (C8!40) [13:44:18:315]: Closing MSIHANDLE (68) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:315]: Creating MSIHANDLE (69) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem47.inf 
MSI (s) (C8!40) [13:44:18:315]: Closing MSIHANDLE (69) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:315]: Creating MSIHANDLE (70) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: C:\Windows\inf\oem49.inf 
MSI (s) (C8!40) [13:44:18:315]: Closing MSIHANDLE (70) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:315]: Creating MSIHANDLE (71) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: FG 
MSI (s) (C8!40) [13:44:18:315]: Closing MSIHANDLE (71) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:315]: Creating MSIHANDLE (72) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: Fortinet Inc. 
MSI (s) (C8!40) [13:44:18:315]: Closing MSIHANDLE (72) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:315]: Creating MSIHANDLE (73) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: PPPoP WAN 
MSI (s) (C8!40) [13:44:18:325]: Closing MSIHANDLE (73) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:325]: Creating MSIHANDLE (74) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: PPPoP tunnel 
MSI (s) (C8!40) [13:44:18:325]: Closing MSIHANDLE (74) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:18:325]: Creating MSIHANDLE (75) of type 790531 for thread 4160
1: [13:44:18]: FCSetupWx: Delete C:\Windows\inf\oem49.inf 
MSI (s) (C8!40) [13:44:18:325]: Closing MSIHANDLE (75) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:19:625]: Creating MSIHANDLE (76) of type 790531 for thread 4160
1: [13:44:19]: FCSetupWx: C:\Windows\inf\oem5.inf 
MSI (s) (C8!40) [13:44:19:655]: Closing MSIHANDLE (76) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:19:655]: Creating MSIHANDLE (77) of type 790531 for thread 4160
1: [13:44:19]: FCSetupWx: C:\Windows\inf\oem6.inf 
MSI (s) (C8!40) [13:44:19:655]: Closing MSIHANDLE (77) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:19:655]: Creating MSIHANDLE (78) of type 790531 for thread 4160
1: [13:44:19]: FCSetupWx: C:\Windows\inf\oem7.inf 
MSI (s) (C8!40) [13:44:19:655]: Closing MSIHANDLE (78) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:19:655]: Creating MSIHANDLE (79) of type 790531 for thread 4160
1: [13:44:19]: FCSetupWx: C:\Windows\inf\oem8.inf 
MSI (s) (C8!40) [13:44:19:655]: Closing MSIHANDLE (79) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:19:665]: Creating MSIHANDLE (80) of type 790531 for thread 4160
1: [13:44:19]: FCSetupWx: C:\Windows\inf\oem9.inf 
MSI (s) (C8!40) [13:44:19:665]: Closing MSIHANDLE (80) of type 790531 for thread 4160
MSI (s) (C8!40) [13:44:19:665]: Creating MSIHANDLE (81) of type 790531 for thread 4160
1: [13:44:19]: FCSetupWx: MSI_CleanupInfs(),retval=0 
MSI (s) (C8!40) [13:44:19:665]: Closing MSIHANDLE (81) of type 790531 for thread 4160
MSI (s) (C8:68) [13:44:19:665]: Closing MSIHANDLE (26) of type 790536 for thread 4724
MSI (s) (C8:74) [13:44:19:665]: Executing op: ActionStart(Name=CA_BPFS,,)
Action 13:44:19: CA_BPFS. 
MSI (s) (C8:74) [13:44:19:665]: Executing op: CustomActionSchedule(Action=CA_BPFS,ActionType=3073,Source=BinaryData,Target=MSI_BPFS,)
MSI (s) (C8:74) [13:44:19:665]: Creating MSIHANDLE (82) of type 790536 for thread 4724
MSI (s) (C8:B4) [13:44:19:725]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9A29.tmp, Entrypoint: MSI_BPFS
MSI (s) (C8:B0) [13:44:19:725]: Generating random cookie.
MSI (s) (C8:B0) [13:44:19:735]: Created Custom Action Server with PID 4284 (0x10BC).
MSI (s) (C8:98) [13:44:19:755]: Running as a service.
MSI (s) (C8:98) [13:44:19:765]: Hello, I'm your 32bit Elevated custom action server.
MSI (s) (C8!AC) [13:44:19:815]: Creating MSIHANDLE (83) of type 790531 for thread 3756
1: [13:44:19]: FCSetupWx: MSI_BPFS 
MSI (s) (C8!AC) [13:44:19:815]: Closing MSIHANDLE (83) of type 790531 for thread 3756
MSI (s) (C8!AC) [13:44:19:815]: Creating MSIHANDLE (84) of type 790531 for thread 3756
1: [13:44:19]: FCSetupWx: MSI_BPFS(),retval=0 
MSI (s) (C8!AC) [13:44:19:825]: Closing MSIHANDLE (84) of type 790531 for thread 3756
MSI (s) (C8:B4) [13:44:19:825]: Closing MSIHANDLE (82) of type 790536 for thread 4724
MSI (s) (C8:74) [13:44:19:825]: Executing op: ActionStart(Name=CA_VerifyDriverStatus,,)
Action 13:44:19: CA_VerifyDriverStatus. 
MSI (s) (C8:74) [13:44:19:825]: Executing op: CustomActionSchedule(Action=CA_VerifyDriverStatus,ActionType=1025,Source=BinaryData,Target=MSI_VerifyDriverStatus,)
MSI (s) (C8:74) [13:44:19:825]: Creating MSIHANDLE (85) of type 790536 for thread 4724
MSI (s) (C8:5C) [13:44:19:865]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9AC6.tmp, Entrypoint: MSI_VerifyDriverStatus
MSI (s) (C8!74) [13:44:19:915]: Creating MSIHANDLE (86) of type 790531 for thread 4468
1: [13:44:19]: FCSetupWx: DriverErrorStatus=0 
MSI (s) (C8!74) [13:44:19:915]: Closing MSIHANDLE (86) of type 790531 for thread 4468
MSI (s) (C8:5C) [13:44:19:915]: Closing MSIHANDLE (85) of type 790536 for thread 4724
MSI (s) (C8:74) [13:44:19:925]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
Action 13:44:19: ProcessComponents. Updating component registration
MSI (s) (C8:74) [13:44:19:925]: Executing op: ProgressTotal(Total=141,Type=1,ByteEquivalent=24000)
MSI (s) (C8:74) [13:44:19:925]: Executing op: ComponentRegister(ComponentId={4B897488-D57A-4BC6-90A1-018F1825E2E5},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiClient.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {4B897488-D57A-4BC6-90A1-018F1825E2E5} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiClient.exe 
MSI (s) (C8:74) [13:44:19:925]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:925]: Executing op: ComponentRegister(ComponentId={F2F980FC-F3AD-445B-87D0-2B270FF80879},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {F2F980FC-F3AD-445B-87D0-2B270FF80879} 
MSI (s) (C8:74) [13:44:19:925]: Executing op: ComponentRegister(ComponentId={F741517C-E1E8-40C0-86E0-AA1233CFEF9C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {F741517C-E1E8-40C0-86E0-AA1233CFEF9C} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe 
MSI (s) (C8:74) [13:44:19:935]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:935]: Executing op: ComponentRegister(ComponentId={768FCDC7-A6E7-424A-BF92-93B5338C9D2F},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\utilsdll.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {768FCDC7-A6E7-424A-BF92-93B5338C9D2F} 3: C:\Program Files (x86)\Fortinet\FortiClient\utilsdll.dll 
MSI (s) (C8:74) [13:44:19:955]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\utilsdll.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:955]: Executing op: ComponentRegister(ComponentId={D3625B0C-335B-4B52-B024-D5D7EB11E566},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCConfig.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {D3625B0C-335B-4B52-B024-D5D7EB11E566} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCConfig.exe 
MSI (s) (C8:74) [13:44:19:955]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCConfig.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:965]: Executing op: ComponentRegister(ComponentId={D534A235-1B67-4E6B-9461-7E1DFEA28659},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {D534A235-1B67-4E6B-9461-7E1DFEA28659} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe 
MSI (s) (C8:74) [13:44:19:965]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:965]: Executing op: ComponentRegister(ComponentId={C757E5C7-789A-4834-AB89-23B93C3EB0BB},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fcappdb.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {C757E5C7-789A-4834-AB89-23B93C3EB0BB} 3: C:\Program Files (x86)\Fortinet\FortiClient\fcappdb.exe 
MSI (s) (C8:74) [13:44:19:965]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fcappdb.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:975]: Executing op: ComponentRegister(ComponentId={230DD0E2-5CA8-4AE5-8ACA-2CE37CD7889B},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {230DD0E2-5CA8-4AE5-8ACA-2CE37CD7889B} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:19:975]: Executing op: ComponentRegister(ComponentId={ED7BDADF-32E3-4A37-A3E2-BEC3ECF2AE3D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {ED7BDADF-32E3-4A37-A3E2-BEC3ECF2AE3D} 3: C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe 
MSI (s) (C8:74) [13:44:19:975]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:975]: Executing op: ComponentRegister(ComponentId={2C7D23D6-EA1E-4E98-91FE-44169C7089A2},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {2C7D23D6-EA1E-4E98-91FE-44169C7089A2} 
MSI (s) (C8:74) [13:44:19:985]: Executing op: ComponentRegister(ComponentId={6CCA0134-7D57-48F7-8C4E-6ADC15E4B534},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiSkin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {6CCA0134-7D57-48F7-8C4E-6ADC15E4B534} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiSkin.dll 
MSI (s) (C8:74) [13:44:19:985]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiSkin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:19:985]: Executing op: ComponentRegister(ComponentId={9596EDC3-2411-4A1D-A95F-AEB60428D5FD},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCResc.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {9596EDC3-2411-4A1D-A95F-AEB60428D5FD} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCResc.dll 
MSI (s) (C8:74) [13:44:20:025]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCResc.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:025]: Executing op: ComponentRegister(ComponentId={1D2030F4-E975-45B7-ACAF-45FB3304AE3C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCRes.res,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {1D2030F4-E975-45B7-ACAF-45FB3304AE3C} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCRes.res 
MSI (s) (C8:74) [13:44:20:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCRes.res' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:035]: Executing op: ComponentRegister(ComponentId={A142EEAD-C9D3-46A0-8AB6-2113F015F64C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {A142EEAD-C9D3-46A0-8AB6-2113F015F64C} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe 
MSI (s) (C8:74) [13:44:20:535]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:535]: Executing op: ComponentRegister(ComponentId={AB1A79DB-E898-4C0D-B0E1-C2E3FCAFBB50},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\update_task.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {AB1A79DB-E898-4C0D-B0E1-C2E3FCAFBB50} 3: C:\Program Files (x86)\Fortinet\FortiClient\update_task.exe 
MSI (s) (C8:74) [13:44:20:535]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\update_task.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:535]: Executing op: ComponentRegister(ComponentId={A2A6E3E0-05E9-40F1-BA15-6819AACC0D7A},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiScand.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {A2A6E3E0-05E9-40F1-BA15-6819AACC0D7A} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiScand.exe 
MSI (s) (C8:74) [13:44:20:545]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiScand.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:545]: Executing op: ComponentRegister(ComponentId={7B2E1B28-1641-4A32-87FC-D9601B52A87A},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\cacert.pem,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {7B2E1B28-1641-4A32-87FC-D9601B52A87A} 3: C:\Program Files (x86)\Fortinet\FortiClient\cacert.pem 
MSI (s) (C8:74) [13:44:20:545]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\cacert.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:545]: Executing op: ComponentRegister(ComponentId={92C772AE-C907-4FF2-8DD9-5605E7060248},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\server.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {92C772AE-C907-4FF2-8DD9-5605E7060248} 3: C:\Program Files (x86)\Fortinet\FortiClient\server.crt 
MSI (s) (C8:74) [13:44:20:545]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\server.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:545]: Executing op: ComponentRegister(ComponentId={C617FE15-C708-4F43-84F7-8C519577F4FD},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\server.key,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {C617FE15-C708-4F43-84F7-8C519577F4FD} 3: C:\Program Files (x86)\Fortinet\FortiClient\server.key 
MSI (s) (C8:74) [13:44:20:555]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\server.key' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:555]: Executing op: ComponentRegister(ComponentId={9C935EDD-D8C1-472D-A40F-0DF0698B1BC7},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {9C935EDD-D8C1-472D-A40F-0DF0698B1BC7} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:575]: Executing op: ComponentRegister(ComponentId={26B723FD-833F-43C8-9C5E-280B8066F79D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {26B723FD-833F-43C8-9C5E-280B8066F79D} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:585]: Executing op: ComponentRegister(ComponentId={E478D957-2BF5-4E23-A459-EB7362D59B76},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E478D957-2BF5-4E23-A459-EB7362D59B76} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:585]: Executing op: ComponentRegister(ComponentId={87E3698E-9FF8-4E03-B2FF-01E82C1468E2},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fcp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {87E3698E-9FF8-4E03-B2FF-01E82C1468E2} 3: C:\Program Files (x86)\Fortinet\FortiClient\fcp.dll 
MSI (s) (C8:74) [13:44:20:585]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fcp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:585]: Executing op: ComponentRegister(ComponentId={782E8B9B-AAE0-455F-BADA-82A03B532E29},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\sqlite3.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {782E8B9B-AAE0-455F-BADA-82A03B532E29} 3: C:\Program Files (x86)\Fortinet\FortiClient\sqlite3.dll 
MSI (s) (C8:74) [13:44:20:595]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\sqlite3.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:595]: Executing op: ComponentRegister(ComponentId={07ED1320-9201-4DC4-943A-416EEC65ECFF},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiClient_Diagnostic_Tool.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {07ED1320-9201-4DC4-943A-416EEC65ECFF} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiClient_Diagnostic_Tool.exe 
MSI (s) (C8:74) [13:44:20:595]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiClient_Diagnostic_Tool.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:595]: Executing op: ComponentRegister(ComponentId={49A2A5A0-077A-441C-9C74-4E75B0504AF5},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\sslvpnlib.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {49A2A5A0-077A-441C-9C74-4E75B0504AF5} 3: C:\Program Files (x86)\Fortinet\FortiClient\sslvpnlib.dll 
MSI (s) (C8:74) [13:44:20:595]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\sslvpnlib.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:595]: Executing op: ComponentRegister(ComponentId={22A7CDF8-28B5-4004-867A-358EE909AEEF},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiVPNSt.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {22A7CDF8-28B5-4004-867A-358EE909AEEF} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiVPNSt.exe 
MSI (s) (C8:74) [13:44:20:605]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiVPNSt.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:605]: Executing op: ComponentRegister(ComponentId={61AC1E1B-A887-4AD7-80DB-AF14607E9B0F},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiProxy.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {61AC1E1B-A887-4AD7-80DB-AF14607E9B0F} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiProxy.exe 
MSI (s) (C8:74) [13:44:20:605]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiProxy.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:605]: Executing op: ComponentRegister(ComponentId={C745AC93-08D0-41C1-9140-81F076718078},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {C745AC93-08D0-41C1-9140-81F076718078} 3: C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll 
MSI (s) (C8:74) [13:44:20:685]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:685]: Executing op: ComponentRegister(ComponentId={54725E1C-9FA6-456D-B679-74419788EE55},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {54725E1C-9FA6-456D-B679-74419788EE55} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:695]: Executing op: ComponentRegister(ComponentId={FB025B94-C0F0-4EC5-9218-50E5C8E5A609},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {FB025B94-C0F0-4EC5-9218-50E5C8E5A609} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:695]: Executing op: ComponentRegister(ComponentId={4A519A5A-1A9A-4874-ADBB-12EF5DD12F75},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\submitv.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {4A519A5A-1A9A-4874-ADBB-12EF5DD12F75} 3: C:\Program Files (x86)\Fortinet\FortiClient\submitv.exe 
MSI (s) (C8:74) [13:44:20:695]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\submitv.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:705]: Executing op: ComponentRegister(ComponentId={AA51C5C6-776C-46CC-8CE4-0ED1669EF4CA},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {AA51C5C6-776C-46CC-8CE4-0ED1669EF4CA} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:705]: Executing op: ComponentRegister(ComponentId={E81E3B2D-73BF-48F1-B3D9-4CAE092C0C29},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E81E3B2D-73BF-48F1-B3D9-4CAE092C0C29} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh64.dll 
MSI (s) (C8:74) [13:44:20:705]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:705]: Executing op: ComponentRegister(ComponentId={6FC2F412-978D-46CC-90B3-0D9D61B37CE0},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {6FC2F412-978D-46CC-90B3-0D9D61B37CE0} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh.dll 
MSI (s) (C8:74) [13:44:20:715]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:715]: Executing op: ComponentRegister(ComponentId={E5458BE4-5160-409C-A95E-D921E58DB85D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCWscD7.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E5458BE4-5160-409C-A95E-D921E58DB85D} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCWscD7.exe 
MSI (s) (C8:74) [13:44:20:715]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCWscD7.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:715]: Executing op: ComponentRegister(ComponentId={556726E8-073D-4789-A7FA-492705D1615D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCWsc.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {556726E8-073D-4789-A7FA-492705D1615D} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCWsc.exe 
MSI (s) (C8:74) [13:44:20:715]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCWsc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:715]: Executing op: ComponentRegister(ComponentId={BB5660C7-9CC7-411D-AD9B-FEF25BA445F5},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\ConnectUtils.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {BB5660C7-9CC7-411D-AD9B-FEF25BA445F5} 3: C:\Program Files (x86)\Fortinet\FortiClient\ConnectUtils.dll 
MSI (s) (C8:74) [13:44:20:745]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\ConnectUtils.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:745]: Executing op: ComponentRegister(ComponentId={8A104CAC-1758-40CC-9D96-50A45735EC6B},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlvpn.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {8A104CAC-1758-40CC-9D96-50A45735EC6B} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlvpn.dll 
MSI (s) (C8:74) [13:44:20:745]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlvpn.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:755]: Executing op: ComponentRegister(ComponentId={54D115F1-A207-43E6-A8FE-B21F0F48249E},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlsystem.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {54D115F1-A207-43E6-A8FE-B21F0F48249E} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlsystem.dll 
MSI (s) (C8:74) [13:44:20:755]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlsystem.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:755]: Executing op: ComponentRegister(ComponentId={25A77065-EAEC-4532-AE99-C91ABF3B02E7},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {25A77065-EAEC-4532-AE99-C91ABF3B02E7} 3: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\ 
MSI (s) (C8:74) [13:44:20:755]: Executing op: ComponentRegister(ComponentId={D8957EC4-0EA1-4959-935F-5EB0795169FC},KeyPath=02:\Software\Fortinet\FortiClient\FA_DBLOG\enabled,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {D8957EC4-0EA1-4959-935F-5EB0795169FC} 3: 02:\Software\Fortinet\FortiClient\FA_DBLOG\enabled 
MSI (s) (C8:74) [13:44:20:765]: Executing op: ComponentRegister(ComponentId={823D78D7-47D7-41AF-8667-0C8B1DA0C0D1},KeyPath=02:\Software\Fortinet\FortiClient\FA_APPDB\enabled,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {823D78D7-47D7-41AF-8667-0C8B1DA0C0D1} 3: 02:\Software\Fortinet\FortiClient\FA_APPDB\enabled 
MSI (s) (C8:74) [13:44:20:765]: Executing op: ComponentRegister(ComponentId={C0A82788-1263-462B-9D79-02DF31734E68},KeyPath=02:\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FortiClient.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {C0A82788-1263-462B-9D79-02DF31734E68} 3: 02:\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FortiClient.exe 
MSI (s) (C8:74) [13:44:20:765]: Executing op: ComponentRegister(ComponentId={77B63FD2-FFD1-48AD-A803-61CC94C05B54},KeyPath=20:\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {77B63FD2-FFD1-48AD-A803-61CC94C05B54} 3: 20:\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\ 
MSI (s) (C8:74) [13:44:20:765]: Executing op: ComponentRegister(ComponentId={863409A4-6324-445D-89C8-D39A21750FCD},KeyPath=21:\Software\Fortinet\FortiClient\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {863409A4-6324-445D-89C8-D39A21750FCD} 3: 21:\Software\Fortinet\FortiClient\installed 
MSI (s) (C8:74) [13:44:20:775]: Executing op: ComponentRegister(ComponentId={68868F73-6455-44C4-8688-8C14D9AC9DFF},KeyPath=21:\Software\Fortinet\FortiClient\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {68868F73-6455-44C4-8688-8C14D9AC9DFF} 3: 21:\Software\Fortinet\FortiClient\installed 
MSI (s) (C8:74) [13:44:20:775]: Executing op: ComponentRegister(ComponentId={AC7F204F-5AC8-4996-B124-96444A1563FC},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\ipsec.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {AC7F204F-5AC8-4996-B124-96444A1563FC} 3: C:\Program Files (x86)\Fortinet\FortiClient\ipsec.exe 
MSI (s) (C8:74) [13:44:20:775]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\ipsec.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:795]: Executing op: ComponentRegister(ComponentId={9216B835-27AD-45C5-88E7-188512B4F2F5},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\libcfg.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {9216B835-27AD-45C5-88E7-188512B4F2F5} 3: C:\Program Files (x86)\Fortinet\FortiClient\libcfg.dll 
MSI (s) (C8:74) [13:44:20:795]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\libcfg.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:805]: Executing op: ComponentRegister(ComponentId={4B4BF7EF-23A2-49D8-835F-7E58D7000A0E},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCAuth.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {4B4BF7EF-23A2-49D8-835F-7E58D7000A0E} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCAuth.exe 
MSI (s) (C8:74) [13:44:20:805]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCAuth.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:805]: Executing op: ComponentRegister(ComponentId={E9FD446A-10A0-4DED-85FC-49DD67E76B19},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\libvpcp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E9FD446A-10A0-4DED-85FC-49DD67E76B19} 3: C:\Program Files (x86)\Fortinet\FortiClient\libvpcp.dll 
MSI (s) (C8:74) [13:44:20:805]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\libvpcp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:805]: Executing op: ComponentRegister(ComponentId={DD174253-2AF8-4F0D-A818-EF52B0CC515D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\libgmp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {DD174253-2AF8-4F0D-A818-EF52B0CC515D} 3: C:\Program Files (x86)\Fortinet\FortiClient\libgmp.dll 
MSI (s) (C8:74) [13:44:20:815]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\libgmp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:815]: Executing op: ComponentRegister(ComponentId={FC8D852D-50B5-48E1-A25C-8BB0845F6F31},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vpcd.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {FC8D852D-50B5-48E1-A25C-8BB0845F6F31} 3: C:\Program Files (x86)\Fortinet\FortiClient\vpcd.exe 
MSI (s) (C8:74) [13:44:20:815]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\vpcd.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:815]: Executing op: ComponentRegister(ComponentId={01D18EAE-9246-49CF-8C72-22FBE168D93F},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCCOMIntDLL.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {01D18EAE-9246-49CF-8C72-22FBE168D93F} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCCOMIntDLL.dll 
MSI (s) (C8:74) [13:44:20:815]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCCOMIntDLL.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:825]: Executing op: ComponentRegister(ComponentId={AE8BA59D-1F2D-4583-A992-E5EAE9313FC2},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCCOMInt.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {AE8BA59D-1F2D-4583-A992-E5EAE9313FC2} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCCOMInt.exe 
MSI (s) (C8:74) [13:44:20:825]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCCOMInt.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:825]: Executing op: ComponentRegister(ComponentId={50A69DB4-A3F3-4A47-88B4-C1473D11F2F6},KeyPath=02:\Software\Fortinet\FortiClient\FA_IKE\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {50A69DB4-A3F3-4A47-88B4-C1473D11F2F6} 3: 02:\Software\Fortinet\FortiClient\FA_IKE\installed 
MSI (s) (C8:74) [13:44:20:825]: Executing op: ComponentRegister(ComponentId={975B3B37-D1A6-4DF9-9480-9267CBCE015F},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {975B3B37-D1A6-4DF9-9480-9267CBCE015F} 
MSI (s) (C8:74) [13:44:20:825]: Executing op: ComponentRegister(ComponentId={88B1596D-CD68-4E18-A636-77B1D43B3C44},KeyPath=C:\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {88B1596D-CD68-4E18-A636-77B1D43B3C44} 3: C:\ 
MSI (s) (C8:74) [13:44:20:835]: Executing op: ComponentRegister(ComponentId={5E62F50F-81EA-48C7-8E13-C65EF0AD96F2},KeyPath=C:\Program Files\Common Files\Fortinet\FortiClient\FortiFilter\FortiFilter.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5E62F50F-81EA-48C7-8E13-C65EF0AD96F2} 3: C:\Program Files\Common Files\Fortinet\FortiClient\FortiFilter\FortiFilter.inf 
MSI (s) (C8:74) [13:44:20:835]: Executing op: ComponentRegister(ComponentId={848E8E6B-FE37-49BA-A792-168BAD673D9D},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {848E8E6B-FE37-49BA-A792-168BAD673D9D} 
MSI (s) (C8:74) [13:44:20:835]: Executing op: ComponentRegister(ComponentId={1B09569F-34DC-4E5A-8874-6B53A248F91F},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {1B09569F-34DC-4E5A-8874-6B53A248F91F} 
MSI (s) (C8:74) [13:44:20:835]: Executing op: ComponentRegister(ComponentId={893DA1EC-405A-48B6-B703-51C684929B80},KeyPath=C:\Program Files\Common Files\Fortinet\FortiClient\ftvnic\ft_vnic.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {893DA1EC-405A-48B6-B703-51C684929B80} 3: C:\Program Files\Common Files\Fortinet\FortiClient\ftvnic\ft_vnic.inf 
MSI (s) (C8:74) [13:44:20:845]: Executing op: ComponentRegister(ComponentId={69E891C0-EDC3-4F13-A6D5-6B3C423421DD},KeyPath=C:\Windows\system32\Drivers\fortidrv.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {69E891C0-EDC3-4F13-A6D5-6B3C423421DD} 3: C:\Windows\system32\Drivers\fortidrv.sys 
MSI (s) (C8:74) [13:44:20:845]: Executing op: ComponentRegister(ComponentId={E27E0EC5-0502-4081-A39B-7029837C4B17},KeyPath=C:\Windows\system32\Drivers\FortiFilter.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E27E0EC5-0502-4081-A39B-7029837C4B17} 3: C:\Windows\system32\Drivers\FortiFilter.sys 
MSI (s) (C8:74) [13:44:20:845]: Executing op: ComponentRegister(ComponentId={005526F2-B0F4-44B8-AD0E-3DCD09BC278C},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {005526F2-B0F4-44B8-AD0E-3DCD09BC278C} 
MSI (s) (C8:74) [13:44:20:845]: Executing op: ComponentRegister(ComponentId={E1A864BC-B288-4E81-B485-FAF4D4054A26},KeyPath=C:\Windows\system32\Drivers\fortips.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E1A864BC-B288-4E81-B485-FAF4D4054A26} 3: C:\Windows\system32\Drivers\fortips.sys 
MSI (s) (C8:74) [13:44:20:855]: Executing op: ComponentRegister(ComponentId={9BD83AF9-5EC6-494D-8DB0-C1F8737802CB},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {9BD83AF9-5EC6-494D-8DB0-C1F8737802CB} 
MSI (s) (C8:74) [13:44:20:855]: Executing op: ComponentRegister(ComponentId={93F72689-DB4A-4949-B9A4-7DBABCF41BE7},KeyPath=C:\Windows\system32\Drivers\FortiRdr2.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {93F72689-DB4A-4949-B9A4-7DBABCF41BE7} 3: C:\Windows\system32\Drivers\FortiRdr2.sys 
MSI (s) (C8:74) [13:44:20:855]: Executing op: ComponentRegister(ComponentId={4B6A9F92-835A-4A41-A41F-14FCFCB21A1B},KeyPath=C:\Windows\system32\Drivers\fortimon2.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {4B6A9F92-835A-4A41-A41F-14FCFCB21A1B} 3: C:\Windows\system32\Drivers\fortimon2.sys 
MSI (s) (C8:74) [13:44:20:855]: Executing op: ComponentRegister(ComponentId={2B1E22CF-E5EA-45C2-BA28-34D5F05C0045},KeyPath=C:\Windows\system32\Drivers\FortiRmon.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {2B1E22CF-E5EA-45C2-BA28-34D5F05C0045} 3: C:\Windows\system32\Drivers\FortiRmon.sys 
MSI (s) (C8:74) [13:44:20:855]: Executing op: ComponentRegister(ComponentId={CEDDEDDA-53AA-40AE-930A-E0E74B3F6AD2},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {CEDDEDDA-53AA-40AE-930A-E0E74B3F6AD2} 
MSI (s) (C8:74) [13:44:20:855]: Executing op: ComponentRegister(ComponentId={4CF1151F-5EB1-4D07-8E1D-A440485385D2},KeyPath=C:\Windows\system32\Drivers\fortifw2.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {4CF1151F-5EB1-4D07-8E1D-A440485385D2} 3: C:\Windows\system32\Drivers\fortifw2.sys 
MSI (s) (C8:74) [13:44:20:865]: Executing op: ComponentRegister(ComponentId={0706CC1A-BF73-4B33-8AE1-779A80A00C73},KeyPath=C:\Windows\system32\Drivers\FortiShield.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {0706CC1A-BF73-4B33-8AE1-779A80A00C73} 3: C:\Windows\system32\Drivers\FortiShield.sys 
MSI (s) (C8:74) [13:44:20:865]: Executing op: ComponentRegister(ComponentId={B86CC61E-9CA4-400F-B67A-D7BFB63D10A9},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B86CC61E-9CA4-400F-B67A-D7BFB63D10A9} 
MSI (s) (C8:74) [13:44:20:865]: Executing op: ComponentRegister(ComponentId={09B5EFDF-FC6F-4E7C-92A0-8D1927B74F28},KeyPath=C:\Windows\system32\Drivers\fortiapd.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {09B5EFDF-FC6F-4E7C-92A0-8D1927B74F28} 3: C:\Windows\system32\Drivers\fortiapd.sys 
MSI (s) (C8:74) [13:44:20:865]: Executing op: ComponentRegister(ComponentId={88E0BABA-F095-4621-8F8F-6FF2BCE28CE5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {88E0BABA-F095-4621-8F8F-6FF2BCE28CE5} 
MSI (s) (C8:74) [13:44:20:865]: Executing op: ComponentRegister(ComponentId={287790BA-EC06-4970-A94F-8B0A04EF5CAB},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\libeay32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {287790BA-EC06-4970-A94F-8B0A04EF5CAB} 3: C:\Program Files (x86)\Fortinet\FortiClient\libeay32.dll 
MSI (s) (C8:74) [13:44:20:865]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\libeay32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:865]: Executing op: ComponentRegister(ComponentId={842BDE8A-ACF5-443D-BE97-A26415A6C350},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\ssleay32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {842BDE8A-ACF5-443D-BE97-A26415A6C350} 3: C:\Program Files (x86)\Fortinet\FortiClient\ssleay32.dll 
MSI (s) (C8:74) [13:44:20:875]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\ssleay32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:875]: Executing op: ComponentRegister(ComponentId={FF36C1B2-AAC3-4950-941A-49ED461A3C4C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\av_task.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {FF36C1B2-AAC3-4950-941A-49ED461A3C4C} 3: C:\Program Files (x86)\Fortinet\FortiClient\av_task.exe 
MSI (s) (C8:74) [13:44:20:875]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\av_task.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:875]: Executing op: ComponentRegister(ComponentId={5A69DBE0-32CD-4FC6-949A-5FCABA7F2038},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fmon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5A69DBE0-32CD-4FC6-949A-5FCABA7F2038} 3: C:\Program Files (x86)\Fortinet\FortiClient\fmon.exe 
MSI (s) (C8:74) [13:44:20:875]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fmon.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:875]: Executing op: ComponentRegister(ComponentId={5CEB60D4-3529-4EE6-9A9E-63403A8CF9E6},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiEce.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5CEB60D4-3529-4EE6-9A9E-63403A8CF9E6} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiEce.dll 
MSI (s) (C8:74) [13:44:20:875]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiEce.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:875]: Executing op: ComponentRegister(ComponentId={B6657DA1-0C2D-4EB8-90D2-6FA9B93BD489},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiLSPHeuristics.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B6657DA1-0C2D-4EB8-90D2-6FA9B93BD489} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiLSPHeuristics.dll 
MSI (s) (C8:74) [13:44:20:875]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiLSPHeuristics.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:885]: Executing op: ComponentRegister(ComponentId={6893C115-A697-4F59-B30B-8D675CDC9941},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\libavr.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {6893C115-A697-4F59-B30B-8D675CDC9941} 3: C:\Program Files (x86)\Fortinet\FortiClient\libavr.dll 
MSI (s) (C8:74) [13:44:20:885]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\libavr.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:885]: Executing op: ComponentRegister(ComponentId={91CD7287-4A1A-4EFF-AADC-314E4E6B21B9},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {91CD7287-4A1A-4EFF-AADC-314E4E6B21B9} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:885]: Executing op: ComponentRegister(ComponentId={5A7726E2-2340-40E0-9682-53ACA74AE962},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5A7726E2-2340-40E0-9682-53ACA74AE962} 3: C:\Program Files (x86)\Fortinet\FortiClient\ 
MSI (s) (C8:74) [13:44:20:885]: Executing op: ComponentRegister(ComponentId={57F7B947-2E34-47BF-83C8-16C4B784FBFF},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\rmon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {57F7B947-2E34-47BF-83C8-16C4B784FBFF} 3: C:\Program Files (x86)\Fortinet\FortiClient\rmon.exe 
MSI (s) (C8:74) [13:44:20:885]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\rmon.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:885]: Executing op: ComponentRegister(ComponentId={14F60449-EC6F-4EA1-88F1-B577CCC7389F},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCOEAM.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {14F60449-EC6F-4EA1-88F1-B577CCC7389F} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCOEAM.dll 
MSI (s) (C8:74) [13:44:20:895]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCOEAM.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:895]: Executing op: ComponentRegister(ComponentId={EA28DCA7-D1DE-4E0F-B7D4-99FFBEF89459},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCOEHook.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {EA28DCA7-D1DE-4E0F-B7D4-99FFBEF89459} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCOEHook.dll 
MSI (s) (C8:74) [13:44:20:895]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCOEHook.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:895]: Executing op: ComponentRegister(ComponentId={E4511BAC-EE94-4FD2-9423-16040A4ED96B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E4511BAC-EE94-4FD2-9423-16040A4ED96B} 
MSI (s) (C8:74) [13:44:20:975]: Executing op: ComponentRegister(ComponentId={F62E4CB3-7B0B-40C3-8BAD-98AC1AE7EAA9},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlav.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {F62E4CB3-7B0B-40C3-8BAD-98AC1AE7EAA9} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlav.dll 
MSI (s) (C8:74) [13:44:20:985]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlav.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:20:985]: Executing op: ComponentRegister(ComponentId={D9A22554-3D5B-4661-BDC5-0398BFEA40D7},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {D9A22554-3D5B-4661-BDC5-0398BFEA40D7} 3: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\ 
MSI (s) (C8:74) [13:44:20:985]: Executing op: ComponentRegister(ComponentId={4DC623A2-C3AE-40B2-987E-5BA78D951251},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {4DC623A2-C3AE-40B2-987E-5BA78D951251} 3: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\ 
MSI (s) (C8:74) [13:44:20:995]: Executing op: ComponentRegister(ComponentId={52D16955-4605-4180-9B5B-9FF987DF5A43},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {52D16955-4605-4180-9B5B-9FF987DF5A43} 3: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\ 
MSI (s) (C8:74) [13:44:20:995]: Executing op: ComponentRegister(ComponentId={1C6A132F-1741-4E55-B9E9-547597DE1B2C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {1C6A132F-1741-4E55-B9E9-547597DE1B2C} 3: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\ 
MSI (s) (C8:74) [13:44:20:995]: Executing op: ComponentRegister(ComponentId={FAD02347-7BAD-4CD0-BB2D-431B36535B4C},KeyPath=02:\Software\Fortinet\FortiClient\FA_AV\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {FAD02347-7BAD-4CD0-BB2D-431B36535B4C} 3: 02:\Software\Fortinet\FortiClient\FA_AV\installed 
MSI (s) (C8:74) [13:44:20:995]: Executing op: ComponentRegister(ComponentId={5BB021A6-63D6-447A-AFFC-CCEC73FCC85A},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiWF.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5BB021A6-63D6-447A-AFFC-CCEC73FCC85A} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiWF.exe 
MSI (s) (C8:74) [13:44:21:005]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiWF.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:005]: Executing op: ComponentRegister(ComponentId={3F958F41-CE82-4C2E-81DA-2DAD9D777B6C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlwf.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {3F958F41-CE82-4C2E-81DA-2DAD9D777B6C} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlwf.dll 
MSI (s) (C8:74) [13:44:21:005]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlwf.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:005]: Executing op: ComponentRegister(ComponentId={126E12F0-A197-40CD-8E5C-3C6AFA80A840},KeyPath=02:\Software\Fortinet\FortiClient\FA_WEBFILTER\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {126E12F0-A197-40CD-8E5C-3C6AFA80A840} 3: 02:\Software\Fortinet\FortiClient\FA_WEBFILTER\installed 
MSI (s) (C8:74) [13:44:21:005]: Executing op: ComponentRegister(ComponentId={F81E8FB1-2CD1-45E1-8EFB-534BED38BC17},KeyPath=02:\Software\Fortinet\FortiClient\FA_WEBFILTER\Profiles\00000000\display_name,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {F81E8FB1-2CD1-45E1-8EFB-534BED38BC17} 3: 02:\Software\Fortinet\FortiClient\FA_WEBFILTER\Profiles\00000000\display_name 
MSI (s) (C8:74) [13:44:21:015]: Executing op: ComponentRegister(ComponentId={827EF41F-5AB3-4905-BE12-B1A9CD84E3C9},KeyPath=02:\Software\Fortinet\FortiClient\FA_Scheduler\000010\apptype,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {827EF41F-5AB3-4905-BE12-B1A9CD84E3C9} 3: 02:\Software\Fortinet\FortiClient\FA_Scheduler\000010\apptype 
MSI (s) (C8:74) [13:44:21:015]: Executing op: ComponentRegister(ComponentId={CA324974-0CDA-4C5A-BDB9-A85898205672},KeyPath=C:\Windows\pppop64.cat,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {CA324974-0CDA-4C5A-BDB9-A85898205672} 3: C:\Windows\pppop64.cat 
MSI (s) (C8:74) [13:44:21:015]: Executing op: ComponentRegister(ComponentId={EC34A111-E7B0-48F2-8522-81AC94109F32},KeyPath=C:\Windows\pppop64.inf,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {EC34A111-E7B0-48F2-8522-81AC94109F32} 3: C:\Windows\pppop64.inf 
MSI (s) (C8:74) [13:44:21:025]: Executing op: ComponentRegister(ComponentId={BD65ED1C-D147-46DC-A0DA-502366CA08C0},KeyPath=C:\Windows\pppop64.sys,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {BD65ED1C-D147-46DC-A0DA-502366CA08C0} 3: C:\Windows\pppop64.sys 
MSI (s) (C8:74) [13:44:21:025]: Executing op: ComponentRegister(ComponentId={A4E74FAA-97C0-439B-8F74-27352C1673FE},KeyPath=C:\Windows\fcsetup.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {A4E74FAA-97C0-439B-8F74-27352C1673FE} 3: C:\Windows\fcsetup.exe 
MSI (s) (C8:74) [13:44:21:035]: Executing op: ComponentRegister(ComponentId={CBEE456F-DDCF-4873-B84A-A75A7A57ECE2},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNclient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {CBEE456F-DDCF-4873-B84A-A75A7A57ECE2} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNclient.exe 
MSI (s) (C8:74) [13:44:21:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNclient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNclient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:035]: Executing op: ComponentRegister(ComponentId={23F6D51D-44DF-4B55-8385-9065168E80FC},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fortisslcacert.pem,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {23F6D51D-44DF-4B55-8385-9065168E80FC} 3: C:\Program Files (x86)\Fortinet\FortiClient\fortisslcacert.pem 
MSI (s) (C8:74) [13:44:21:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortisslcacert.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortisslcacert.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:045]: Executing op: ComponentRegister(ComponentId={284CB6C8-85F6-4E7B-8391-D5AA86C4C1BA},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.crt,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {284CB6C8-85F6-4E7B-8391-D5AA86C4C1BA} 3: C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.crt 
MSI (s) (C8:74) [13:44:21:045]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:045]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:045]: Executing op: ComponentRegister(ComponentId={01A69D17-2128-447C-BCC0-D628C5577C3C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.key,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {01A69D17-2128-447C-BCC0-D628C5577C3C} 3: C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.key 
MSI (s) (C8:74) [13:44:21:045]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.key' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:045]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortisslclient.key' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:045]: Executing op: ComponentRegister(ComponentId={B91F1EF5-398D-46EB-B2B8-6D6EAD072F23},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B91F1EF5-398D-46EB-B2B8-6D6EAD072F23} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe 
MSI (s) (C8:74) [13:44:21:045]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:045]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:055]: Executing op: ComponentRegister(ComponentId={63221A87-4327-4A81-A95B-C15A28B7F65E},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {63221A87-4327-4A81-A95B-C15A28B7F65E} 
MSI (s) (C8:74) [13:44:21:055]: Executing op: ComponentRegister(ComponentId={231D8C27-A1F6-4C20-80BB-0DE5C8617BA5},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {231D8C27-A1F6-4C20-80BB-0DE5C8617BA5} 3: C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll 
MSI (s) (C8:74) [13:44:21:055]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:055]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:055]: Executing op: ComponentRegister(ComponentId={6CC678AC-5860-4683-BEE3-53F6BA142028},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\forticontrol64.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {6CC678AC-5860-4683-BEE3-53F6BA142028} 3: C:\Program Files (x86)\Fortinet\FortiClient\forticontrol64.dll 
MSI (s) (C8:74) [13:44:21:055]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticontrol64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:055]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticontrol64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:055]: Executing op: ComponentRegister(ComponentId={E2464FA9-E97E-45A7-B7FE-5FC7683190B3},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {E2464FA9-E97E-45A7-B7FE-5FC7683190B3} 3: C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll 
MSI (s) (C8:74) [13:44:21:065]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:065]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:065]: Executing op: ComponentRegister(ComponentId={30B47E5D-A474-4D56-949B-28D3294B6390},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck64.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {30B47E5D-A474-4D56-949B-28D3294B6390} 3: C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck64.dll 
MSI (s) (C8:74) [13:44:21:065]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:065]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:065]: Executing op: ComponentRegister(ComponentId={2935D186-C7C7-4873-9E4A-C3C1C91A1712},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {2935D186-C7C7-4873-9E4A-C3C1C91A1712} 3: C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll 
MSI (s) (C8:74) [13:44:21:065]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:065]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:075]: Executing op: ComponentRegister(ComponentId={DA9B244F-1A4B-46A8-90CD-192AC3503040},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiCacheCleaner64.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {DA9B244F-1A4B-46A8-90CD-192AC3503040} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiCacheCleaner64.dll 
MSI (s) (C8:74) [13:44:21:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiCacheCleaner64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiCacheCleaner64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:075]: Executing op: ComponentRegister(ComponentId={C557D7A7-93B1-449F-A2BD-9DBF786715B3},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {C557D7A7-93B1-449F-A2BD-9DBF786715B3} 3: C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP.exe 
MSI (s) (C8:74) [13:44:21:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:075]: Executing op: ComponentRegister(ComponentId={DA84185B-DF89-43E7-BDFA-BEBFCC8172F0},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {DA84185B-DF89-43E7-BDFA-BEBFCC8172F0} 3: C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP64.exe 
MSI (s) (C8:74) [13:44:21:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:075]: Executing op: ComponentRegister(ComponentId={ECD0524F-FEDE-418E-B8ED-17979163087A},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {ECD0524F-FEDE-418E-B8ED-17979163087A} 3: C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean.dll 
MSI (s) (C8:74) [13:44:21:085]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:085]: Executing op: ComponentRegister(ComponentId={B9CB93C0-8D64-4A49-93C0-C66FFF7066B9},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B9CB93C0-8D64-4A49-93C0-C66FFF7066B9} 3: C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean64.dll 
MSI (s) (C8:74) [13:44:21:085]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:085]: Executing op: ComponentRegister(ComponentId={B70712BE-E6E0-417A-8DA5-6443A3F05050},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B70712BE-E6E0-417A-8DA5-6443A3F05050} 3: C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll 
MSI (s) (C8:74) [13:44:21:085]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:085]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:085]: Executing op: ComponentRegister(ComponentId={5637DE4F-025A-4948-9CF0-841D93F17946},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5637DE4F-025A-4948-9CF0-841D93F17946} 3: C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll 
MSI (s) (C8:74) [13:44:21:085]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:085]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:295]: Executing op: ComponentRegister(ComponentId={61ECA5A7-7499-409E-BF15-FB4E10040D3D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiWad.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {61ECA5A7-7499-409E-BF15-FB4E10040D3D} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiWad.exe 
MSI (s) (C8:74) [13:44:21:305]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiWad.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:305]: Executing op: ComponentRegister(ComponentId={32E3DBFF-1C90-4EFF-9E7A-57016489E527},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiWadbd.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {32E3DBFF-1C90-4EFF-9E7A-57016489E527} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiWadbd.exe 
MSI (s) (C8:74) [13:44:21:305]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiWadbd.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:305]: Executing op: ComponentRegister(ComponentId={270205BB-6977-455A-B722-8B03F653B4DD},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlwanopt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {270205BB-6977-455A-B722-8B03F653B4DD} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlwanopt.dll 
MSI (s) (C8:74) [13:44:21:315]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlwanopt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:315]: Executing op: ComponentRegister(ComponentId={45989275-4F0F-4F28-A5C6-B6C2301A1764},KeyPath=02:\Software\Fortinet\FortiClient\FA_WANACC\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {45989275-4F0F-4F28-A5C6-B6C2301A1764} 3: 02:\Software\Fortinet\FortiClient\FA_WANACC\installed 
MSI (s) (C8:74) [13:44:21:315]: Executing op: ComponentRegister(ComponentId={17A20B0F-3B6D-4F9D-BA8D-510434D83306},KeyPath=02:\Software\Fortinet\FortiClient\FA_ESNAC\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {17A20B0F-3B6D-4F9D-BA8D-510434D83306} 3: 02:\Software\Fortinet\FortiClient\FA_ESNAC\installed 
MSI (s) (C8:74) [13:44:21:315]: Executing op: ComponentRegister(ComponentId={714847EC-5830-49CE-B5EE-930B45955C5D},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {714847EC-5830-49CE-B5EE-930B45955C5D} 3: C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe 
MSI (s) (C8:74) [13:44:21:325]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:325]: Executing op: ComponentRegister(ComponentId={D88E6875-1052-4A5E-9B8E-8D58A71DD6A2},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlesnac.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {D88E6875-1052-4A5E-9B8E-8D58A71DD6A2} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlesnac.dll 
MSI (s) (C8:74) [13:44:21:325]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlesnac.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:325]: Executing op: ComponentRegister(ComponentId={5A5D448B-5242-41DA-AAC4-45D558F251E6},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5A5D448B-5242-41DA-AAC4-45D558F251E6} 
MSI (s) (C8:74) [13:44:21:325]: Executing op: ComponentRegister(ComponentId={0F990D91-B8D6-4D47-8090-28532ABCAE62},KeyPath=C:\Windows\system32\Drivers\fortistat2.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {0F990D91-B8D6-4D47-8090-28532ABCAE62} 3: C:\Windows\system32\Drivers\fortistat2.sys 
MSI (s) (C8:74) [13:44:21:335]: Executing op: ComponentRegister(ComponentId={B809E72A-7010-415E-AEA5-214B0E8D7F46},KeyPath=02:\Software\Fortinet\FortiClient\FA_SSOMA\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B809E72A-7010-415E-AEA5-214B0E8D7F46} 3: 02:\Software\Fortinet\FortiClient\FA_SSOMA\installed 
MSI (s) (C8:74) [13:44:21:335]: Executing op: ComponentRegister(ComponentId={B5A4D197-6A08-4CE4-ADDA-892B7CCD752B},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FSSOMA.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {B5A4D197-6A08-4CE4-ADDA-892B7CCD752B} 3: C:\Program Files (x86)\Fortinet\FortiClient\FSSOMA.exe 
MSI (s) (C8:74) [13:44:21:335]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FSSOMA.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:335]: Executing op: ComponentRegister(ComponentId={3281ECCD-FFBD-46CC-8AD8-E86D26D2FA7C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlfssoma.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {3281ECCD-FFBD-46CC-8AD8-E86D26D2FA7C} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlfssoma.dll 
MSI (s) (C8:74) [13:44:21:335]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlfssoma.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:345]: Executing op: ComponentRegister(ComponentId={7E06FA0C-3E25-48C2-BCE6-520FE0824071},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlfw.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {7E06FA0C-3E25-48C2-BCE6-520FE0824071} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlfw.dll 
MSI (s) (C8:74) [13:44:21:345]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlfw.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:345]: Executing op: ComponentRegister(ComponentId={D429963E-500F-41BD-9A48-FF925E3BBD8E},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\fortifws.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {D429963E-500F-41BD-9A48-FF925E3BBD8E} 3: C:\Program Files (x86)\Fortinet\FortiClient\fortifws.exe 
MSI (s) (C8:74) [13:44:21:345]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\fortifws.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:345]: Executing op: ComponentRegister(ComponentId={14AAB086-D46A-4079-A630-3AF75B757D52},KeyPath=02:\Software\Fortinet\FortiClient\FA_FW\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {14AAB086-D46A-4079-A630-3AF75B757D52} 3: 02:\Software\Fortinet\FortiClient\FA_FW\installed 
MSI (s) (C8:74) [13:44:21:345]: Executing op: ComponentRegister(ComponentId={051332D2-EED8-4DFF-A825-9E362743D179},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\FCVbltScan.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {051332D2-EED8-4DFF-A825-9E362743D179} 3: C:\Program Files (x86)\Fortinet\FortiClient\FCVbltScan.exe 
MSI (s) (C8:74) [13:44:21:355]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\FCVbltScan.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:355]: Executing op: ComponentRegister(ComponentId={5020280E-C6E1-483E-B015-D243AA87C8DE},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\vcm.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {5020280E-C6E1-483E-B015-D243AA87C8DE} 3: C:\Program Files (x86)\Fortinet\FortiClient\vcm.exe 
MSI (s) (C8:74) [13:44:21:355]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\vcm.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:355]: Executing op: ComponentRegister(ComponentId={40CB46B4-2FEF-4CA1-8718-48193AFE324C},KeyPath=C:\Program Files (x86)\Fortinet\FortiClient\xmlvuln.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {40CB46B4-2FEF-4CA1-8718-48193AFE324C} 3: C:\Program Files (x86)\Fortinet\FortiClient\xmlvuln.dll 
MSI (s) (C8:74) [13:44:21:355]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Fortinet\FortiClient\xmlvuln.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (C8:74) [13:44:21:355]: Executing op: ComponentRegister(ComponentId={C4B25E80-48C4-44B8-BD95-B13CCD4F32B5},KeyPath=02:\Software\Fortinet\FortiClient\FA_VULN\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
1: {863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C} 2: {C4B25E80-48C4-44B8-BD95-B13CCD4F32B5} 3: 02:\Software\Fortinet\FortiClient\FA_VULN\installed 
MSI (s) (C8:74) [13:44:21:365]: Executing op: ActionStart(Name=CA_UnregCOMServer_Rollback,,)
Action 13:44:21: CA_UnregCOMServer_Rollback. 
MSI (s) (C8:74) [13:44:21:365]: Executing op: CustomActionSchedule(Action=CA_UnregCOMServer_Rollback,ActionType=3393,Source=BinaryData,Target=MSI_RegCOMServer,)
MSI (s) (C8:74) [13:44:21:365]: Executing op: ActionStart(Name=CA_UnregCOMServer,,)
Action 13:44:21: CA_UnregCOMServer. 
MSI (s) (C8:74) [13:44:21:365]: Executing op: CustomActionSchedule(Action=CA_UnregCOMServer,ActionType=3137,Source=BinaryData,Target=MSI_UnregCOMServer,)
MSI (s) (C8:74) [13:44:21:365]: Creating MSIHANDLE (87) of type 790536 for thread 4724
MSI (s) (C8:78) [13:44:21:375]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA0D0.tmp, Entrypoint: MSI_UnregCOMServer
MSI (s) (C8!7C) [13:44:21:375]: Creating MSIHANDLE (88) of type 790531 for thread 4476
1: [13:44:21]: FCSetupWx: MSI_UnregCOMServer() 
MSI (s) (C8!7C) [13:44:21:385]: Closing MSIHANDLE (88) of type 790531 for thread 4476
MSI (s) (C8!7C) [13:44:21:385]: Creating MSIHANDLE (89) of type 790531 for thread 4476
1: [13:44:21]: FCSetupWx: MSI_UnregCOMServer(),retval=0 
MSI (s) (C8!7C) [13:44:21:385]: Closing MSIHANDLE (89) of type 790531 for thread 4476
MSI (s) (C8:78) [13:44:21:385]: Closing MSIHANDLE (87) of type 790536 for thread 4724
MSI (s) (C8:74) [13:44:21:385]: Executing op: ActionStart(Name=CA_UninstallFCTServices_Rollback,,)
Action 13:44:21: CA_UninstallFCTServices_Rollback. 
MSI (s) (C8:74) [13:44:21:385]: Executing op: CustomActionSchedule(Action=CA_UninstallFCTServices_Rollback,ActionType=3393,Source=BinaryData,Target=MSI_InstallFCService_For_Rollback,)
MSI (s) (C8:74) [13:44:21:385]: Executing op: ActionStart(Name=CA_UninstallFCTServices,,)
Action 13:44:21: CA_UninstallFCTServices. 
MSI (s) (C8:74) [13:44:21:385]: Executing op: CustomActionSchedule(Action=CA_UninstallFCTServices,ActionType=3137,Source=BinaryData,Target=MSI_UninstallFCService,)
MSI (s) (C8:74) [13:44:21:395]: Creating MSIHANDLE (90) of type 790536 for thread 4724
MSI (s) (C8:80) [13:44:21:415]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA0E0.tmp, Entrypoint: MSI_UninstallFCService
MSI (s) (C8!84) [13:44:21:415]: Creating MSIHANDLE (91) of type 790531 for thread 4484
1: [13:44:21]: FCSetupWx: MSI_UninstallFCService() 
MSI (s) (C8!84) [13:44:21:415]: Closing MSIHANDLE (91) of type 790531 for thread 4484
MSI (s) (C8!84) [13:44:21:425]: Creating MSIHANDLE (92) of type 790531 for thread 4484
1: [13:44:21]: FCSetupWx: MSI_UninstallFCService(),retval=0, Reboot=0 
MSI (s) (C8!84) [13:44:21:425]: Closing MSIHANDLE (92) of type 790531 for thread 4484
MSI (s) (C8:80) [13:44:21:425]: Closing MSIHANDLE (90) of type 790536 for thread 4724
MSI (s) (C8:74) [13:44:21:425]: Executing op: ActionStart(Name=CA_Remove_FW_From_WSC,,)
Action 13:44:21: CA_Remove_FW_From_WSC. 
MSI (s) (C8:74) [13:44:21:425]: Executing op: CustomActionSchedule(Action=CA_Remove_FW_From_WSC,ActionType=3137,Source=BinaryData,Target=MSI_Remove_FW_From_WSC,CustomActionData=C:\Program Files (x86)\Fortinet\FortiClient\FCWscD7.exe)
MSI (s) (C8:74) [13:44:21:425]: Creating MSIHANDLE (93) of type 790536 for thread 4724
MSI (s) (C8:88) [13:44:21:425]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA110.tmp, Entrypoint: MSI_Remove_FW_From_WSC
MSI (s) (C8!8C) [13:44:21:465]: Creating MSIHANDLE (94) of type 790531 for thread 4492
1: [13:44:21]: FCSetupWx: MSI_Remove_FW_From_WSC() 
MSI (s) (C8!8C) [13:44:21:465]: Closing MSIHANDLE (94) of type 790531 for thread 4492
MSI (s) (C8!8C) [13:44:21:465]: Creating MSIHANDLE (95) of type 790531 for thread 4492
1: [13:44:21]: FCSetupWx: MSI_Remove_FW_From_WSC(C:\Program Files (x86)\Fortinet\FortiClient\FCWscD7.exe) 
MSI (s) (C8!8C) [13:44:21:465]: Closing MSIHANDLE (95) of type 790531 for thread 4492
MSI (s) (C8:88) [13:44:21:475]: Closing MSIHANDLE (93) of type 790536 for thread 4724
MSI (s) (C8:74) [13:44:21:475]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
Action 13:44:21: CreateFolders. Creating folders
MSI (s) (C8:74) [13:44:21:475]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\
MSI (s) (C8:74) [13:44:21:525]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\
MSI (s) (C8:74) [13:44:21:535]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\
MSI (s) (C8:74) [13:44:21:535]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\
MSI (s) (C8:74) [13:44:21:535]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\
MSI (s) (C8:74) [13:44:21:535]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\
MSI (s) (C8:74) [13:44:21:535]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\logs\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\logs\
MSI (s) (C8:74) [13:44:21:535]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\cert\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\cert\
MSI (s) (C8:74) [13:44:21:545]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\cert\ca\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\cert\ca\
MSI (s) (C8:74) [13:44:21:545]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\cert\crl\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\cert\crl\
MSI (s) (C8:74) [13:44:21:545]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\cert\local\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\cert\local\
MSI (s) (C8:74) [13:44:21:555]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Fortinet\FortiClient\quarantine\,Foreign=0,,)
CreateFolders: Folder: C:\Program Files (x86)\Fortinet\FortiClient\quarantine\
MSI (s) (C8:74) [13:44:21:875]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1],  Directory: [9],  Size: [6])
Action 13:44:21: InstallFiles. Copying new files
MSI (s) (C8:74) [13:44:21:875]: Executing op: ProgressTotal(Total=27358218,Type=0,ByteEquivalent=1)
MSI (s) (C8:74) [13:44:21:875]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Fortinet\FortiClient\)
MSI (s) (C8:74) [13:44:21:875]: Executing op: SetSourceFolder(Folder=1\hf8yxqrb\Fortinet\llb99d9h\|ProgramFiles\Fortinet\FortiClient\)
MSI (s) (C8:74) [13:44:22:405]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,MediaCabinet=common.cab,BytesPerTick=65536,CopierType=2,ModuleFileName=C:\Windows\Installer\276b5.msi,,,,,IsFirstPhysicalMedia=1)
MSI (s) (C8:74) [13:44:22:405]: Executing op: FileCopy(SourceName=yuw7spct.exe|CacheCleanAP64.exe,SourceCabKey=CacheCleanAP64.exe,DestName=CacheCleanAP64.exe,Attributes=512,FileSize=61664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:435]: File: C:\Program Files (x86)\Fortinet\FortiClient\CacheCleanAP64.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:435]: Source for file 'CacheCleanAP64.exe' is compressed
InstallFiles: File: CacheCleanAP64.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 61664
MSI (s) (C8:74) [13:44:22:455]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\)
MSI (s) (C8:74) [13:44:22:455]: Executing op: SetSourceFolder(Folder=1\hf8yxqrb\Fortinet\llb99d9h\vir_sig\|ProgramFiles\Fortinet\FortiClient\vir_sig\)
MSI (s) (C8:74) [13:44:22:455]: Executing op: SetCompanionParent(ParentPath=C:\Program Files (x86)\Fortinet\FortiClient\,ParentName=fasle.dll,ParentVersion=File_FortiScand.exe,ParentLanguage=1033)
MSI (s) (C8:74) [13:44:22:455]: Executing op: FileCopy(SourceName=appsig.dat,SourceCabKey=File_appsig.dat,DestName=appsig.dat,Attributes=512,FileSize=4497,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=File_fasle.dll,,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:455]: File: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\appsig.dat;	Overwrite;	Won't patch;		(Checked using version of companion: C:\Program Files (x86)\Fortinet\FortiClient\fasle.dll)
MSI (s) (C8:74) [13:44:22:455]: Source for file 'File_appsig.dat' is compressed
InstallFiles: File: appsig.dat,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\vir_sig\,  Size: 4497
MSI (s) (C8:74) [13:44:22:455]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Fortinet\FortiClient\)
MSI (s) (C8:74) [13:44:22:475]: Executing op: SetSourceFolder(Folder=1\hf8yxqrb\Fortinet\llb99d9h\|ProgramFiles\Fortinet\FortiClient\)
MSI (s) (C8:74) [13:44:22:475]: Executing op: FileCopy(SourceName=cacert.pem,SourceCabKey=File_cacert.pem,DestName=cacert.pem,Attributes=512,FileSize=1402,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1698795902,HashPart2=1942034204,HashPart3=-379324041,HashPart4=1799653104,,)
MSI (s) (C8:74) [13:44:22:475]: File: C:\Program Files (x86)\Fortinet\FortiClient\cacert.pem;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:475]: Source for file 'File_cacert.pem' is compressed
InstallFiles: File: cacert.pem,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 1402
MSI (s) (C8:74) [13:44:22:475]: Executing op: FileCopy(SourceName=whz51k8o.dll|ConnectUtils.dll,SourceCabKey=File_ConnectUtils.dll,DestName=ConnectUtils.dll,Attributes=512,FileSize=229394,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:475]: File: C:\Program Files (x86)\Fortinet\FortiClient\ConnectUtils.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:475]: Source for file 'File_ConnectUtils.dll' is compressed
InstallFiles: File: ConnectUtils.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 229394
MSI (s) (C8:74) [13:44:22:485]: Executing op: SetCompanionParent(ParentPath=C:\Program Files (x86)\Fortinet\FortiClient\,ParentName=FortiScand.exe,ParentVersion=5.0.2.225,ParentLanguage=1033)
MSI (s) (C8:74) [13:44:22:485]: Executing op: FileCopy(SourceName=fasle.dll,SourceCabKey=File_fasle.dll,DestName=fasle.dll,Attributes=512,FileSize=118496,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=File_FortiScand.exe,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:485]: File: C:\Program Files (x86)\Fortinet\FortiClient\fasle.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:485]: Source for file 'File_fasle.dll' is compressed
InstallFiles: File: fasle.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 118496
MSI (s) (C8:74) [13:44:22:495]: Executing op: FileCopy(SourceName=fcappdb.exe,SourceCabKey=File_fcappdb.exe,DestName=fcappdb.exe,Attributes=512,FileSize=176146,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:515]: File: C:\Program Files (x86)\Fortinet\FortiClient\fcappdb.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:515]: Source for file 'File_fcappdb.exe' is compressed
InstallFiles: File: fcappdb.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 176146
MSI (s) (C8:74) [13:44:22:535]: Executing op: FileCopy(SourceName=FCCOMInt.exe,SourceCabKey=File_FCCOMInt.exe,DestName=FCCOMInt.exe,Attributes=512,FileSize=372754,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:535]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCCOMInt.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:535]: Source for file 'File_FCCOMInt.exe' is compressed
InstallFiles: File: FCCOMInt.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 372754
MSI (s) (C8:74) [13:44:22:545]: Executing op: FileCopy(SourceName=azx-y67q.dll|FCCOMIntDLL.dll,SourceCabKey=File_FCCOMIntDLL.dll,DestName=FCCOMIntDLL.dll,Attributes=512,FileSize=434194,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:545]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCCOMIntDLL.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:545]: Source for file 'File_FCCOMIntDLL.dll' is compressed
InstallFiles: File: FCCOMIntDLL.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 434194
MSI (s) (C8:74) [13:44:22:555]: Executing op: FileCopy(SourceName=FCConfig.exe,SourceCabKey=File_FCConfig.exe,DestName=FCConfig.exe,Attributes=512,FileSize=82018,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:555]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCConfig.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:555]: Source for file 'File_FCConfig.exe' is compressed
InstallFiles: File: FCConfig.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 82018
MSI (s) (C8:74) [13:44:22:565]: Executing op: FileCopy(SourceName=FCDBLog.exe,SourceCabKey=File_FCDBLog.exe,DestName=FCDBLog.exe,Attributes=512,FileSize=364640,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:565]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:565]: Source for file 'File_FCDBLog.exe' is compressed
InstallFiles: File: FCDBLog.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 364640
MSI (s) (C8:74) [13:44:22:565]: Executing op: FileCopy(SourceName=fcp.dll,SourceCabKey=File_fcp.dll,DestName=fcp.dll,Attributes=512,FileSize=57362,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:575]: File: C:\Program Files (x86)\Fortinet\FortiClient\fcp.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:575]: Source for file 'File_fcp.dll' is compressed
InstallFiles: File: fcp.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 57362
MSI (s) (C8:74) [13:44:22:575]: Executing op: FileCopy(SourceName=FCResc.dll,SourceCabKey=File_FCResc.dll,DestName=FCResc.dll,Attributes=512,FileSize=290834,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:575]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCResc.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:575]: Source for file 'File_FCResc.dll' is compressed
InstallFiles: File: FCResc.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 290834
MSI (s) (C8:74) [13:44:22:575]: Executing op: FileCopy(SourceName=FCWsc.exe,SourceCabKey=File_FCWsc.exe,DestName=FCWsc.exe,Attributes=512,FileSize=65272,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:595]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCWsc.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:595]: Source for file 'File_FCWsc.exe' is compressed
InstallFiles: File: FCWsc.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 65272
MSI (s) (C8:74) [13:44:22:605]: Executing op: FileCopy(SourceName=FCWscD7.exe,SourceCabKey=File_FCWscD7.exe,DestName=FCWscD7.exe,Attributes=512,FileSize=146896,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2010.2.3.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:605]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCWscD7.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:605]: Source for file 'File_FCWscD7.exe' is compressed
InstallFiles: File: FCWscD7.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 146896
MSI (s) (C8:74) [13:44:22:605]: Executing op: FileCopy(SourceName=me3fslfy.exe|FortiClient.exe,SourceCabKey=File_FortiClient.exe,DestName=FortiClient.exe,Attributes=512,FileSize=4812536,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:615]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiClient.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:615]: Source for file 'File_FortiClient.exe' is compressed
InstallFiles: File: FortiClient.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 4812536
MSI (s) (C8:74) [13:44:22:665]: Executing op: FileCopy(SourceName=otloqmpo.exe|FortiClient_Diagnostic_Tool.exe,SourceCabKey=File_FortiClient_Diagnostic_Tool.exe,DestName=FortiClient_Diagnostic_Tool.exe,Attributes=512,FileSize=66296,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:665]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiClient_Diagnostic_Tool.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:675]: Source for file 'File_FortiClient_Diagnostic_Tool.exe' is compressed
InstallFiles: File: FortiClient_Diagnostic_Tool.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 66296
MSI (s) (C8:74) [13:44:22:685]: Executing op: FileCopy(SourceName=mglhhgfl.dll|FortiCliSh.dll,SourceCabKey=File_FortiCliSh.dll,DestName=FortiCliSh.dll,Attributes=512,FileSize=167954,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:685]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:685]: Source for file 'File_FortiCliSh.dll' is compressed
InstallFiles: File: FortiCliSh.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 167954
MSI (s) (C8:74) [13:44:22:685]: Executing op: FileCopy(SourceName=d1y6msfn.dll|forticredentialprovider64.dll,SourceCabKey=File_forticredentialprovider.dll,DestName=forticredentialprovider64.dll,Attributes=512,FileSize=823032,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:685]: File: C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:685]: Source for file 'File_forticredentialprovider.dll' is compressed
InstallFiles: File: forticredentialprovider64.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 823032
MSI (s) (C8:74) [13:44:22:695]: Executing op: FileCopy(SourceName=FortiEce.dll,SourceCabKey=File_FortiEce.dll,DestName=FortiEce.dll,Attributes=512,FileSize=438088,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:755]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiEce.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:765]: Source for file 'File_FortiEce.dll' is compressed
InstallFiles: File: FortiEce.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 438088
MSI (s) (C8:74) [13:44:22:775]: Executing op: FileCopy(SourceName=njxx3egy.exe|FortiProxy.exe,SourceCabKey=File_FortiProxy.exe,DestName=FortiProxy.exe,Attributes=512,FileSize=356370,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:775]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiProxy.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:775]: Source for file 'File_FortiProxy.exe' is compressed
InstallFiles: File: FortiProxy.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 356370
MSI (s) (C8:74) [13:44:22:785]: Executing op: FileCopy(SourceName=i70qrpdp.exe|FortiScand.exe,SourceCabKey=File_FortiScand.exe,DestName=FortiScand.exe,Attributes=512,FileSize=380664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:785]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiScand.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:785]: Source for file 'File_FortiScand.exe' is compressed
InstallFiles: File: FortiScand.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 380664
MSI (s) (C8:74) [13:44:22:795]: Executing op: FileCopy(SourceName=5dcmbjcd.dll|FortiSkin.dll,SourceCabKey=File_FortiSkin.dll,DestName=FortiSkin.dll,Attributes=512,FileSize=188434,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:825]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiSkin.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:825]: Source for file 'File_FortiSkin.dll' is compressed
InstallFiles: File: FortiSkin.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 188434
MSI (s) (C8:74) [13:44:22:825]: Executing op: FileCopy(SourceName=qwrogpy0.exe|FortiTray.exe,SourceCabKey=File_FortiTray.exe,DestName=FortiTray.exe,Attributes=512,FileSize=1150712,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:825]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:825]: Source for file 'File_FortiTray.exe' is compressed
InstallFiles: File: FortiTray.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 1150712
MSI (s) (C8:74) [13:44:22:845]: Executing op: FileCopy(SourceName=acwnuyjx.exe|FortiVPNSt.exe,SourceCabKey=File_FortiVPNSt.exe,DestName=FortiVPNSt.exe,Attributes=512,FileSize=229394,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:865]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiVPNSt.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:865]: Source for file 'File_FortiVPNSt.exe' is compressed
InstallFiles: File: FortiVPNSt.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 229394
MSI (s) (C8:74) [13:44:22:875]: Executing op: FileCopy(SourceName=FortiWF.exe,SourceCabKey=File_FortiWF.exe,DestName=FortiWF.exe,Attributes=512,FileSize=147474,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:875]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiWF.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:875]: Source for file 'File_FortiWF.exe' is compressed
InstallFiles: File: FortiWF.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 147474
MSI (s) (C8:74) [13:44:22:885]: Executing op: FileCopy(SourceName=libcfg.dll,SourceCabKey=File_libcfg.dll,DestName=libcfg.dll,Attributes=512,FileSize=57362,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:885]: File: C:\Program Files (x86)\Fortinet\FortiClient\libcfg.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:885]: Source for file 'File_libcfg.dll' is compressed
InstallFiles: File: libcfg.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 57362
MSI (s) (C8:74) [13:44:22:885]: Executing op: FileCopy(SourceName=libeay32.dll,SourceCabKey=File_libeay32.dll,DestName=libeay32.dll,Attributes=512,FileSize=1216280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.1.5,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:895]: File: C:\Program Files (x86)\Fortinet\FortiClient\libeay32.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:895]: Source for file 'File_libeay32.dll' is compressed
InstallFiles: File: libeay32.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 1216280
MSI (s) (C8:74) [13:44:22:925]: Executing op: FileCopy(SourceName=1lnywqc4.exe|scheduler.exe,SourceCabKey=File_scheduler.exe,DestName=scheduler.exe,Attributes=512,FileSize=86034,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:925]: File: C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:925]: Source for file 'File_scheduler.exe' is compressed
InstallFiles: File: scheduler.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 86034
MSI (s) (C8:74) [13:44:22:935]: Executing op: FileCopy(SourceName=server.crt,SourceCabKey=File_server.crt,DestName=server.crt,Attributes=512,FileSize=3583,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1445137782,HashPart2=1605530114,HashPart3=-728134135,HashPart4=-34466225,,)
MSI (s) (C8:74) [13:44:22:945]: File: C:\Program Files (x86)\Fortinet\FortiClient\server.crt;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:945]: Source for file 'File_server.crt' is compressed
InstallFiles: File: server.crt,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 3583
MSI (s) (C8:74) [13:44:22:955]: Executing op: FileCopy(SourceName=server.key,SourceCabKey=File_server.key,DestName=server.key,Attributes=512,FileSize=969,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=216074188,HashPart2=625958466,HashPart3=-655001486,HashPart4=-416998037,,)
MSI (s) (C8:74) [13:44:22:955]: File: C:\Program Files (x86)\Fortinet\FortiClient\server.key;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:955]: Source for file 'File_server.key' is compressed
InstallFiles: File: server.key,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 969
MSI (s) (C8:74) [13:44:22:955]: Executing op: FileCopy(SourceName=sqlite3.dll,SourceCabKey=File_sqlite3.dll,DestName=sqlite3.dll,Attributes=512,FileSize=389138,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.7.9.0,Language=0,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:955]: File: C:\Program Files (x86)\Fortinet\FortiClient\sqlite3.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:955]: Source for file 'File_sqlite3.dll' is compressed
InstallFiles: File: sqlite3.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 389138
MSI (s) (C8:74) [13:44:22:965]: Executing op: FileCopy(SourceName=ssleay32.dll,SourceCabKey=File_ssleay32.dll,DestName=ssleay32.dll,Attributes=512,FileSize=286488,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.1.5,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:965]: File: C:\Program Files (x86)\Fortinet\FortiClient\ssleay32.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:975]: Source for file 'File_ssleay32.dll' is compressed
InstallFiles: File: ssleay32.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 286488
MSI (s) (C8:74) [13:44:22:975]: Executing op: FileCopy(SourceName=x3cwgjfx.dll|sslvpnlib.dll,SourceCabKey=File_sslvpnlib.dll,DestName=sslvpnlib.dll,Attributes=512,FileSize=340073,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:975]: File: C:\Program Files (x86)\Fortinet\FortiClient\sslvpnlib.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:985]: Source for file 'File_sslvpnlib.dll' is compressed
InstallFiles: File: sslvpnlib.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 340073
MSI (s) (C8:74) [13:44:22:995]: Executing op: FileCopy(SourceName=submitv.exe,SourceCabKey=File_submitv.exe,DestName=submitv.exe,Attributes=512,FileSize=196626,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:22:995]: File: C:\Program Files (x86)\Fortinet\FortiClient\submitv.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:22:995]: Source for file 'File_submitv.exe' is compressed
InstallFiles: File: submitv.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 196626
MSI (s) (C8:74) [13:44:22:995]: Executing op: FileCopy(SourceName=kqmv2ul-.exe|update_task.exe,SourceCabKey=File_update_task.exe,DestName=update_task.exe,Attributes=512,FileSize=213010,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:015]: File: C:\Program Files (x86)\Fortinet\FortiClient\update_task.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:015]: Source for file 'File_update_task.exe' is compressed
InstallFiles: File: update_task.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 213010
MSI (s) (C8:74) [13:44:23:025]: Executing op: FileCopy(SourceName=utilsdll.dll,SourceCabKey=File_utilsdll.dll,DestName=utilsdll.dll,Attributes=512,FileSize=667666,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:025]: File: C:\Program Files (x86)\Fortinet\FortiClient\utilsdll.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:025]: Source for file 'File_utilsdll.dll' is compressed
InstallFiles: File: utilsdll.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 667666
MSI (s) (C8:74) [13:44:23:035]: Executing op: FileCopy(SourceName=xmlav.dll,SourceCabKey=File_xmlav.dll,DestName=xmlav.dll,Attributes=512,FileSize=59640,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:035]: File: C:\Program Files (x86)\Fortinet\FortiClient\xmlav.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:045]: Source for file 'File_xmlav.dll' is compressed
InstallFiles: File: xmlav.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 59640
MSI (s) (C8:74) [13:44:23:045]: Executing op: FileCopy(SourceName=nbous8vx.dll|xmlsystem.dll,SourceCabKey=File_xmlsystem.dll,DestName=xmlsystem.dll,Attributes=512,FileSize=135186,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:045]: File: C:\Program Files (x86)\Fortinet\FortiClient\xmlsystem.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:045]: Source for file 'File_xmlsystem.dll' is compressed
InstallFiles: File: xmlsystem.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 135186
MSI (s) (C8:74) [13:44:23:055]: Executing op: FileCopy(SourceName=xmlvpn.dll,SourceCabKey=File_xmlvpn.dll,DestName=xmlvpn.dll,Attributes=512,FileSize=265976,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:055]: File: C:\Program Files (x86)\Fortinet\FortiClient\xmlvpn.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:055]: Source for file 'File_xmlvpn.dll' is compressed
InstallFiles: File: xmlvpn.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 265976
MSI (s) (C8:74) [13:44:23:055]: Executing op: FileCopy(SourceName=xmlwf.dll,SourceCabKey=File_xmlwf.dll,DestName=xmlwf.dll,Attributes=512,FileSize=58104,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:055]: File: C:\Program Files (x86)\Fortinet\FortiClient\xmlwf.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:055]: Source for file 'File_xmlwf.dll' is compressed
InstallFiles: File: xmlwf.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 58104
MSI (s) (C8:74) [13:44:23:065]: Executing op: FileCopy(SourceName=vncx25mm.dll|FortiCacheCleaner64.dll,SourceCabKey=FortiCacheCleaner64.dll,DestName=FortiCacheCleaner64.dll,Attributes=512,FileSize=192736,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:065]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiCacheCleaner64.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:065]: Source for file 'FortiCacheCleaner64.dll' is compressed
InstallFiles: File: FortiCacheCleaner64.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 192736
MSI (s) (C8:74) [13:44:23:075]: Executing op: FileCopy(SourceName=qghyrhea.dll|forticontrol64.dll,SourceCabKey=forticontrol64.dll,DestName=forticontrol64.dll,Attributes=512,FileSize=389344,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:085]: File: C:\Program Files (x86)\Fortinet\FortiClient\forticontrol64.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:085]: Source for file 'forticontrol64.dll' is compressed
InstallFiles: File: forticontrol64.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 389344
MSI (s) (C8:74) [13:44:23:095]: Executing op: FileCopy(SourceName=vy0ph2o0.dll|LaunchCacheClean64.dll,SourceCabKey=LaunchCacheClean64.dll,DestName=LaunchCacheClean64.dll,Attributes=512,FileSize=76512,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:095]: File: C:\Program Files (x86)\Fortinet\FortiClient\LaunchCacheClean64.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:095]: Source for file 'LaunchCacheClean64.dll' is compressed
InstallFiles: File: LaunchCacheClean64.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 76512
MSI (s) (C8:74) [13:44:23:095]: Executing op: FileCopy(SourceName=up4jvcx2.dll|SslvpnHostCheck64.dll,SourceCabKey=SslvpnHostCheck64.dll,DestName=SslvpnHostCheck64.dll,Attributes=512,FileSize=520416,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:095]: File: C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck64.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:095]: Source for file 'SslvpnHostCheck64.dll' is compressed
InstallFiles: File: SslvpnHostCheck64.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 520416
MSI (s) (C8:74) [13:44:23:105]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,MediaCabinet=x64.cab,BytesPerTick=65536,CopierType=2,ModuleFileName=C:\Windows\Installer\276b5.msi,,,,,IsFirstPhysicalMedia=1)
MSI (s) (C8:74) [13:44:23:115]: Executing op: FileCopy(SourceName=h3tzo1sg.exe|FCHelper64.exe,SourceCabKey=File_FCHelper.exe,DestName=FCHelper64.exe,Attributes=512,FileSize=235026,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:115]: File: C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:115]: Source for file 'File_FCHelper.exe' is compressed
InstallFiles: File: FCHelper64.exe,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 235026
MSI (s) (C8:74) [13:44:23:125]: Executing op: SetTargetFolder(Folder=C:\Windows\system32\Drivers\)
MSI (s) (C8:74) [13:44:23:125]: Executing op: SetSourceFolder(Folder=1\Windows\System64\Drivers\)
MSI (s) (C8:74) [13:44:23:125]: Executing op: FileCopy(SourceName=fortiapd.sys,SourceCabKey=File_fortiapd.sys,DestName=fortiapd.sys,Attributes=512,FileSize=16096,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:135]: File: C:\Windows\system32\Drivers\fortiapd.sys;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:165]: Source for file 'File_fortiapd.sys' is compressed
InstallFiles: File: fortiapd.sys,  Directory: C:\Windows\system32\Drivers\,  Size: 16096
MSI (s) (C8:74) [13:44:23:195]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Fortinet\FortiClient\)
MSI (s) (C8:74) [13:44:23:215]: Executing op: SetSourceFolder(Folder=1\hf8yxqrb\Fortinet\llb99d9h\|ProgramFiles\Fortinet\FortiClient\)
MSI (s) (C8:74) [13:44:23:215]: Executing op: FileCopy(SourceName=hk00lywx.dll|FortiCliSh64.dll,SourceCabKey=File_FortiCliSh64.dll,DestName=FortiCliSh64.dll,Attributes=512,FileSize=251922,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.0.2.225,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:215]: File: C:\Program Files (x86)\Fortinet\FortiClient\FortiCliSh64.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:215]: Source for file 'File_FortiCliSh64.dll' is compressed
InstallFiles: File: FortiCliSh64.dll,  Directory: C:\Program Files (x86)\Fortinet\FortiClient\,  Size: 251922
MSI (s) (C8:74) [13:44:23:225]: Executing op: SetTargetFolder(Folder=C:\Windows\system32\Drivers\)
MSI (s) (C8:74) [13:44:23:225]: Executing op: SetSourceFolder(Folder=1\Windows\System64\Drivers\)
MSI (s) (C8:74) [13:44:23:225]: Executing op: FileCopy(SourceName=fortidrv.sys,SourceCabKey=File_FortiDrv.sys2,DestName=fortidrv.sys,Attributes=512,FileSize=28264,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2009.12.30.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (C8:74) [13:44:23:235]: File: C:\Windows\system32\Drivers\fortidrv.sys;	To be installed;	Won't patch;	No existing file
MSI (s) (C8:74) [13:44:23:235]: Source for file 'File_FortiDrv.sys2' is compressed
InstallFiles: File: fortidrv.sys,  Directory: C:\Windows\system32\Drivers\,  Size: 28264
MSI (s) (C8:74) [13:44:23:235]: Executing op: SetTargetFolder(Folder=C:\Program Files\Common Files\Fortinet\FortiClient\FortiFilter\)
MSI (s) (C8:74) [13:44:23:235]: Executing op: SetSourceFolder(Folder=1\Windows\qi5dezlf\Fortinet\f21amypr\snbjwrt1\|Windows\Common Files\Fortinet\FortiClient\FortiFilter\)
MSI (s) (C8:74) [13:44:23:235]: Executing op: FileCopy(SourceName=ejkxkajz.cat|fortifilter.cat,SourceCabKey=File_FortiFilter.cat,DestName=fortifilter.cat,Attributes=512,FileSize=7627,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1816415074,HashPart2=1337002574,HashPart3=1964620616,HashPart4=1274470589,,)