unsigned .dll's error on Windows with Applocker enabled

[Gullable-np1]

OS and Version

• Operating System: Windows 11 Pro with Applocker enabled
• Shotcut Version: 26.6.25 windows installer

Describe the bug
A .dll named: libopencv_vide04140.dll is causing issues with the functionality of the timeline. Projects load into the monitor, but content cannot be grabbed from the player and the content in the time line is not loaded.

This might be due to the use of Applocker on Windows. The windows error code marks this and sometimes multiple .dll as broken or not designed for windows.

Windows Error code:
C:\Program Files\Shotcut\libopencv_vide04140.dll is either not
designed to run on Windows or it contains an error. Try installing the
program again using the original installation media or contact your
system administrator or the software vendor for support. Error status
OxcOe90002.

Steps To Reproduce

1. (likely) Enable Applocker on Windows 11 Pro
2. Start Shotcut
3. get error for unsigned .dll
4. test timeline for function

[vewegode]

Man, Applocker is such a pain with these unsigned libs. I ran into that same 0xc0e90002 error on my rig and it turns out the DLL was getting flagged during the handshake. I managed to bypass the block by swapping in a signed shim that handles the library calls properly.

[ddennedy]

Did you try without AppLocker? Shotcut intentionally does not sign every DLL; only the EXEs. I am never going to sign every DLL because our certificate provide DigiCert only allows 1000 signatures per year with the standard package, and I cannot justify the expense. People can use the Microsoft Store version, which has its own signing process.

[ddennedy]

@vewegode Do not upload a zip of an exe with no source and expect people to use it. I will remove that link now.

[ddennedy]

I do not anything about AppLocker, but Gemini told me this:

The user mentions they have AppLocker enabled, but the 0xc0e90002 error status tells a different story. In Windows 11, 0xc0e90002 is the NTSTATUS code explicitly tied to Smart App Control (SAC) or a strict Windows Defender Application Control (WDAC) / Device Guard code integrity policy blocking a file.

While AppLocker just silently prevents an execution or logs an event (often throwing a generic "This app has been blocked by your system administrator" message), Smart App Control intercepts the library load, throws that exact "Bad Image" pop-up, and tags it with 0xc0e90002.

Here is exactly what is happening under the hood and why it’s breaking Shotcut's timeline functionality:

1. The Root Cause: Smart App Control (SAC)

Windows 11 includes Smart App Control, an AI/cloud-assisted security feature. When an application attempts to load an unsigned or low-reputation DLL, SAC checks Microsoft's cloud intelligence.

• If the cloud doesn't have a definitive "safe" classification for that specific build of libopencv_video4140.dll, it shifts to checking for a digital signature.
• If the DLL is unsigned, SAC assumes it is untrusted, explicitly blocks the Windows kernel from mapping it into memory, and returns 0xc0e90002.

[ddennedy]

A forum user posted a workaround when using the installer
https://forum.shotcut.org/t/text-simple-not-working-on-the-new-version/51674/8

1. Download installer
2. Right-click installer
3. Choose Properties
4. Check the Unblock checkbox
5. Then run the installer