VirtualBox

Ticket #13295: VBoxStartup.log

File VBoxStartup.log, 306.7 KB (added by Carsten H., 10 years ago)

Sorry, here the Startup.log

Line 
11e6c.1fe0: Log file opened: 4.3.19r96923 g_hStartupLog=0000000000000010 g_uNtVerCombined=0x63258000
21e6c.1fe0: \SystemRoot\System32\ntdll.dll:
31e6c.1fe0: CreationTime: 2014-10-06T07:40:57.842515900Z
41e6c.1fe0: LastWriteTime: 2014-05-03T11:29:49.253495800Z
51e6c.1fe0: ChangeTime: 2014-11-11T08:36:21.811121200Z
61e6c.1fe0: FileAttributes: 0x20
71e6c.1fe0: Size: 0x1a5710
81e6c.1fe0: NT Headers: 0xe8
91e6c.1fe0: Timestamp: 0x53649e73
101e6c.1fe0: Machine: 0x8664 - amd64
111e6c.1fe0: Timestamp: 0x53649e73
121e6c.1fe0: Image Version: 6.3
131e6c.1fe0: SizeOfImage: 0x1aa000 (1744896)
141e6c.1fe0: Resource Dir: 0x145000 LB 0x62450
151e6c.1fe0: ProductName: Microsoft® Windows® Operating System
161e6c.1fe0: ProductVersion: 6.3.9600.17114
171e6c.1fe0: FileVersion: 6.3.9600.17114 (winblue_gdr.140502-1623)
181e6c.1fe0: FileDescription: NT Layer DLL
191e6c.1fe0: \SystemRoot\System32\kernel32.dll:
201e6c.1fe0: CreationTime: 2014-10-06T07:56:07.012848600Z
211e6c.1fe0: LastWriteTime: 2014-03-20T04:19:59.915412000Z
221e6c.1fe0: ChangeTime: 2014-11-11T08:36:18.139203500Z
231e6c.1fe0: FileAttributes: 0x20
241e6c.1fe0: Size: 0x13b3c0
251e6c.1fe0: NT Headers: 0xe8
261e6c.1fe0: Timestamp: 0x532a419c
271e6c.1fe0: Machine: 0x8664 - amd64
281e6c.1fe0: Timestamp: 0x532a419c
291e6c.1fe0: Image Version: 6.3
301e6c.1fe0: SizeOfImage: 0x13a000 (1286144)
311e6c.1fe0: Resource Dir: 0x12a000 LB 0x520
321e6c.1fe0: ProductName: Microsoft® Windows® Operating System
331e6c.1fe0: ProductVersion: 6.3.9600.17056
341e6c.1fe0: FileVersion: 6.3.9600.17056 (winblue_gdr.140319-1520)
351e6c.1fe0: FileDescription: Windows NT BASE API Client DLL
361e6c.1fe0: \SystemRoot\System32\KernelBase.dll:
371e6c.1fe0: CreationTime: 2014-10-06T07:56:06.934727900Z
381e6c.1fe0: LastWriteTime: 2014-03-20T03:40:33.319954500Z
391e6c.1fe0: ChangeTime: 2014-11-11T08:36:21.279866200Z
401e6c.1fe0: FileAttributes: 0x20
411e6c.1fe0: Size: 0x10f9d8
421e6c.1fe0: NT Headers: 0xf0
431e6c.1fe0: Timestamp: 0x532954fb
441e6c.1fe0: Machine: 0x8664 - amd64
451e6c.1fe0: Timestamp: 0x532954fb
461e6c.1fe0: Image Version: 6.3
471e6c.1fe0: SizeOfImage: 0x10f000 (1110016)
481e6c.1fe0: Resource Dir: 0x10a000 LB 0x3530
491e6c.1fe0: ProductName: Microsoft® Windows® Operating System
501e6c.1fe0: ProductVersion: 6.3.9600.17055
511e6c.1fe0: FileVersion: 6.3.9600.17055 (winblue_gdr.140318-1651)
521e6c.1fe0: FileDescription: Windows NT BASE API Client DLL
531e6c.1fe0: \SystemRoot\System32\apisetschema.dll:
541e6c.1fe0: CreationTime: 2013-08-22T12:13:09.745625900Z
551e6c.1fe0: LastWriteTime: 2013-08-22T12:35:12.091034400Z
561e6c.1fe0: ChangeTime: 2014-09-08T14:06:07.182112100Z
571e6c.1fe0: FileAttributes: 0x20
581e6c.1fe0: Size: 0x11360
591e6c.1fe0: NT Headers: 0xd0
601e6c.1fe0: Timestamp: 0x52160049
611e6c.1fe0: Machine: 0x8664 - amd64
621e6c.1fe0: Timestamp: 0x52160049
631e6c.1fe0: Image Version: 6.3
641e6c.1fe0: SizeOfImage: 0x13000 (77824)
651e6c.1fe0: Resource Dir: 0x11000 LB 0x3f8
661e6c.1fe0: ProductName: Microsoft® Windows® Operating System
671e6c.1fe0: ProductVersion: 6.3.9600.16384
681e6c.1fe0: FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
691e6c.1fe0: FileDescription: ApiSet Schema DLL
701e6c.1fe0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
711e6c.1fe0: supR3HardenedWinFindAdversaries: 0x0
721e6c.1fe0: Calling main()
731e6c.1fe0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
741e6c.1fe0: SUPR3HardenedMain: Respawn #1
751e6c.1fe0: System32: \Device\HarddiskVolume4\Windows\System32
761e6c.1fe0: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
771e6c.1fe0: KnownDllPath: C:\WINDOWS\system32
781e6c.1fe0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
791e6c.1fe0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
801e6c.1fe0: supR3HardNtEnableThreadCreation:
811e6c.1fe0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9defab200 pvNtTerminateThread=00007ff9df02b230
821e6c.1fe0: supR3HardenedWinDoReSpawn(1): New child 1254.1500 [kernel32].
831e6c.1fe0: supR3HardNtChildGatherData: PebBaseAddress=00007ff71f3d5000 cbPeb=0x388
841e6c.1fe0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9def90000 uNtDllChildAddr=00007ff9def90000
851e6c.1fe0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9defab200
861e6c.1fe0: supR3HardenedWinSetupChildInit: Start child.
871e6c.1fe0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
881e6c.1fe0: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 31 sleeps
891e6c.1fe0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
901e6c.1fe0: *0000000000000000-ffffffffffe6ffff 0x0001/0x0000 0x0000000
911e6c.1fe0: *0000000000190000-000000000016ffff 0x0004/0x0004 0x0020000
921e6c.1fe0: *00000000001b0000-00000000001a0fff 0x0002/0x0002 0x0040000
931e6c.1fe0: 00000000001bf000-00000000001bdfff 0x0001/0x0000 0x0000000
941e6c.1fe0: *00000000001c0000-00000000000c3fff 0x0000/0x0004 0x0020000
951e6c.1fe0: 00000000002bc000-00000000002b8fff 0x0104/0x0004 0x0020000
961e6c.1fe0: 00000000002bf000-00000000002bdfff 0x0004/0x0004 0x0020000
971e6c.1fe0: *00000000002c0000-00000000002bbfff 0x0002/0x0002 0x0040000
981e6c.1fe0: 00000000002c4000-00000000002b7fff 0x0001/0x0000 0x0000000
991e6c.1fe0: *00000000002d0000-00000000002cdfff 0x0004/0x0004 0x0020000
1001e6c.1fe0: 00000000002d2000-ffffffff805c3fff 0x0001/0x0000 0x0000000
1011e6c.1fe0: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
1021e6c.1fe0: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
1031e6c.1fe0: 000000007fff0000-ffff8009e0c2ffff 0x0001/0x0000 0x0000000
1041e6c.1fe0: *00007ff71f3b0000-00007ff71f38cfff 0x0002/0x0002 0x0040000
1051e6c.1fe0: 00007ff71f3d3000-00007ff71f3d0fff 0x0001/0x0000 0x0000000
1061e6c.1fe0: *00007ff71f3d5000-00007ff71f3d3fff 0x0004/0x0004 0x0020000
1071e6c.1fe0: 00007ff71f3d6000-00007ff71f3cdfff 0x0001/0x0000 0x0000000
1081e6c.1fe0: *00007ff71f3de000-00007ff71f3dbfff 0x0004/0x0004 0x0020000
1091e6c.1fe0: 00007ff71f3e0000-00007ff71e53ffff 0x0001/0x0000 0x0000000
1101e6c.1fe0: *00007ff720280000-00007ff72027efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1111e6c.1fe0: 00007ff720281000-00007ff7201fcfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1121e6c.1fe0: 00007ff720305000-00007ff720303fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1131e6c.1fe0: 00007ff720306000-00007ff7202c8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1141e6c.1fe0: 00007ff720343000-00007ff720341fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1151e6c.1fe0: 00007ff720344000-00007ff720342fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1161e6c.1fe0: 00007ff720345000-00007ff720342fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1171e6c.1fe0: 00007ff720347000-00007ff720345fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1181e6c.1fe0: 00007ff720348000-00007ff720346fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1191e6c.1fe0: 00007ff720349000-00007ff720344fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1201e6c.1fe0: 00007ff72034d000-00007ff720313fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1211e6c.1fe0: 00007ff720386000-00007ff46177bfff 0x0001/0x0000 0x0000000
1221e6c.1fe0: *00007ff9def90000-00007ff9def8efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1231e6c.1fe0: 00007ff9def91000-00007ff9dee67fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1241e6c.1fe0: 00007ff9df0ba000-00007ff9df0b0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1251e6c.1fe0: 00007ff9df0c3000-00007ff9df0b5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1261e6c.1fe0: 00007ff9df0d0000-00007ff9df0cefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1271e6c.1fe0: 00007ff9df0d1000-00007ff9df0cffff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1281e6c.1fe0: 00007ff9df0d2000-00007ff9df069fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1291e6c.1fe0: 00007ff9df13a000-00007ff3be293fff 0x0001/0x0000 0x0000000
1301e6c.1fe0: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
1311e6c.1fe0: VirtualBox.exe: timestamp 0x54661ae5 (rc=VINF_SUCCESS)
1321e6c.1fe0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1331e6c.1fe0: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
1341e6c.1fe0: supR3HardNtChildPurify: Done after 330 ms and 0 fixes (loop #0).
1351254.1500: Log file opened: 4.3.19r96923 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x63258000
1361254.1500: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9def90000
1371254.1500: ntdll.dll: timestamp 0x53649e73 (rc=VINF_SUCCESS)
1381254.1500: New simple heap: #1 00000000003e0000 LB 0x400000 (for 1744896 allocation)
1391e6c.1fe0: supR3HardNtEnableThreadCreation:
1401254.1500: System32: \Device\HarddiskVolume4\Windows\System32
1411254.1500: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
1421254.1500: KnownDllPath: C:\WINDOWS\system32
1431254.1500: supR3HardenedVmProcessInit: Opening vboxdrv stub...
1441254.1500: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
1451254.1500: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
1461254.1500: Registered Dll notification callback with NTDLL.
1471254.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
1481254.1500: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1491254.1500: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
1501254.1500: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1511254.1500: supR3HardenedDllNotificationCallback: load 00007ff9dc420000 LB 0x0010f000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
1521254.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
1531254.1500: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1541254.1500: supR3HardenedDllNotificationCallback: load 00007ff9de340000 LB 0x0013a000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
1551254.1500: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1561254.1500: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de340000 'C:\WINDOWS\system32\KERNEL32.DLL'
1571254.1500: supR3HardenedDllNotificationCallback: load 00007ff720280000 LB 0x00106000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
1581254.1500: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1591254.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1601254.1500: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1611254.1500: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9defab200 pvNtTerminateThread=00007ff9df02b230
1621e6c.1fe0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 61 ms.
1631254.1500: \SystemRoot\System32\ntdll.dll:
1641254.1500: CreationTime: 2014-10-06T07:40:57.842515900Z
1651254.1500: LastWriteTime: 2014-05-03T11:29:49.253495800Z
1661254.1500: ChangeTime: 2014-11-11T08:36:21.811121200Z
1671254.1500: FileAttributes: 0x20
1681254.1500: Size: 0x1a5710
1691254.1500: NT Headers: 0xe8
1701254.1500: Timestamp: 0x53649e73
1711254.1500: Machine: 0x8664 - amd64
1721254.1500: Timestamp: 0x53649e73
1731254.1500: Image Version: 6.3
1741254.1500: SizeOfImage: 0x1aa000 (1744896)
1751254.1500: Resource Dir: 0x145000 LB 0x62450
1761254.1500: ProductName: Microsoft® Windows® Operating System
1771254.1500: ProductVersion: 6.3.9600.17114
1781254.1500: FileVersion: 6.3.9600.17114 (winblue_gdr.140502-1623)
1791254.1500: FileDescription: NT Layer DLL
1801254.1500: \SystemRoot\System32\kernel32.dll:
1811254.1500: CreationTime: 2014-10-06T07:56:07.012848600Z
1821254.1500: LastWriteTime: 2014-03-20T04:19:59.915412000Z
1831254.1500: ChangeTime: 2014-11-11T08:36:18.139203500Z
1841254.1500: FileAttributes: 0x20
1851254.1500: Size: 0x13b3c0
1861254.1500: NT Headers: 0xe8
1871254.1500: Timestamp: 0x532a419c
1881254.1500: Machine: 0x8664 - amd64
1891254.1500: Timestamp: 0x532a419c
1901254.1500: Image Version: 6.3
1911254.1500: SizeOfImage: 0x13a000 (1286144)
1921254.1500: Resource Dir: 0x12a000 LB 0x520
1931254.1500: ProductName: Microsoft® Windows® Operating System
1941254.1500: ProductVersion: 6.3.9600.17056
1951254.1500: FileVersion: 6.3.9600.17056 (winblue_gdr.140319-1520)
1961254.1500: FileDescription: Windows NT BASE API Client DLL
1971254.1500: \SystemRoot\System32\KernelBase.dll:
1981254.1500: CreationTime: 2014-10-06T07:56:06.934727900Z
1991254.1500: LastWriteTime: 2014-03-20T03:40:33.319954500Z
2001254.1500: ChangeTime: 2014-11-11T08:36:21.279866200Z
2011254.1500: FileAttributes: 0x20
2021254.1500: Size: 0x10f9d8
2031254.1500: NT Headers: 0xf0
2041254.1500: Timestamp: 0x532954fb
2051254.1500: Machine: 0x8664 - amd64
2061254.1500: Timestamp: 0x532954fb
2071254.1500: Image Version: 6.3
2081254.1500: SizeOfImage: 0x10f000 (1110016)
2091254.1500: Resource Dir: 0x10a000 LB 0x3530
2101254.1500: ProductName: Microsoft® Windows® Operating System
2111254.1500: ProductVersion: 6.3.9600.17055
2121254.1500: FileVersion: 6.3.9600.17055 (winblue_gdr.140318-1651)
2131254.1500: FileDescription: Windows NT BASE API Client DLL
2141254.1500: \SystemRoot\System32\apisetschema.dll:
2151254.1500: CreationTime: 2013-08-22T12:13:09.745625900Z
2161254.1500: LastWriteTime: 2013-08-22T12:35:12.091034400Z
2171254.1500: ChangeTime: 2014-09-08T14:06:07.182112100Z
2181254.1500: FileAttributes: 0x20
2191254.1500: Size: 0x11360
2201254.1500: NT Headers: 0xd0
2211254.1500: Timestamp: 0x52160049
2221254.1500: Machine: 0x8664 - amd64
2231254.1500: Timestamp: 0x52160049
2241254.1500: Image Version: 6.3
2251254.1500: SizeOfImage: 0x13000 (77824)
2261254.1500: Resource Dir: 0x11000 LB 0x3f8
2271254.1500: ProductName: Microsoft® Windows® Operating System
2281254.1500: ProductVersion: 6.3.9600.16384
2291254.1500: FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
2301254.1500: FileDescription: ApiSet Schema DLL
2311254.1500: NtOpenDirectoryObject failed on \Driver: 0xc0000022
2321254.1500: supR3HardenedWinFindAdversaries: 0x0
2331254.1500: Calling main()
2341254.1500: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2351254.1500: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2361254.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2371254.1500: SUPR3HardenedMain: Respawn #2
2381254.1500: supR3HardNtEnableThreadCreation:
2391254.1500: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9defab200 pvNtTerminateThread=00007ff9df02b230
2401254.1500: supR3HardenedWinDoReSpawn(2): New child 1ce8.1ef0 [kernel32].
2411254.1500: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
2421254.1500: supR3HardNtChildGatherData: PebBaseAddress=00007ff71f469000 cbPeb=0x388
2431254.1500: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9def90000 uNtDllChildAddr=00007ff9def90000
2441254.1500: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9defab200
2451254.1500: supR3HardenedWinSetupChildInit: Start child.
2461254.1500: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
2471254.1500: supR3HardNtChildPurify: Startup delay kludge #1/0: 258 ms, 30 sleeps
2481254.1500: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2491254.1500: *0000000000000000-ffffffffff1bffff 0x0001/0x0000 0x0000000
2501254.1500: *0000000000e40000-0000000000e1ffff 0x0004/0x0004 0x0020000
2511254.1500: *0000000000e60000-0000000000e50fff 0x0002/0x0002 0x0040000
2521254.1500: 0000000000e6f000-0000000000e6dfff 0x0001/0x0000 0x0000000
2531254.1500: *0000000000e70000-0000000000d73fff 0x0000/0x0004 0x0020000
2541254.1500: 0000000000f6c000-0000000000f68fff 0x0104/0x0004 0x0020000
2551254.1500: 0000000000f6f000-0000000000f6dfff 0x0004/0x0004 0x0020000
2561254.1500: *0000000000f70000-0000000000f6bfff 0x0002/0x0002 0x0040000
2571254.1500: 0000000000f74000-0000000000f67fff 0x0001/0x0000 0x0000000
2581254.1500: *0000000000f80000-0000000000f7dfff 0x0004/0x0004 0x0020000
2591254.1500: 0000000000f82000-ffffffff81f23fff 0x0001/0x0000 0x0000000
2601254.1500: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
2611254.1500: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
2621254.1500: 000000007fff0000-ffff8009e0b9ffff 0x0001/0x0000 0x0000000
2631254.1500: *00007ff71f440000-00007ff71f41cfff 0x0002/0x0002 0x0040000
2641254.1500: 00007ff71f463000-00007ff71f45cfff 0x0001/0x0000 0x0000000
2651254.1500: *00007ff71f469000-00007ff71f467fff 0x0004/0x0004 0x0020000
2661254.1500: 00007ff71f46a000-00007ff71f465fff 0x0001/0x0000 0x0000000
2671254.1500: *00007ff71f46e000-00007ff71f46bfff 0x0004/0x0004 0x0020000
2681254.1500: 00007ff71f470000-00007ff71e65ffff 0x0001/0x0000 0x0000000
2691254.1500: *00007ff720280000-00007ff72027efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2701254.1500: 00007ff720281000-00007ff7201fcfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2711254.1500: 00007ff720305000-00007ff720303fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2721254.1500: 00007ff720306000-00007ff7202c8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2731254.1500: 00007ff720343000-00007ff720341fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2741254.1500: 00007ff720344000-00007ff720342fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2751254.1500: 00007ff720345000-00007ff720342fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2761254.1500: 00007ff720347000-00007ff720345fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2771254.1500: 00007ff720348000-00007ff720346fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2781254.1500: 00007ff720349000-00007ff720344fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2791254.1500: 00007ff72034d000-00007ff720313fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2801254.1500: 00007ff720386000-00007ff46177bfff 0x0001/0x0000 0x0000000
2811254.1500: *00007ff9def90000-00007ff9def8efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2821254.1500: 00007ff9def91000-00007ff9dee67fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2831254.1500: 00007ff9df0ba000-00007ff9df0b0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2841254.1500: 00007ff9df0c3000-00007ff9df0b5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2851254.1500: 00007ff9df0d0000-00007ff9df0cefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2861254.1500: 00007ff9df0d1000-00007ff9df0cffff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2871254.1500: 00007ff9df0d2000-00007ff9df069fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2881254.1500: 00007ff9df13a000-00007ff3be293fff 0x0001/0x0000 0x0000000
2891254.1500: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
2901254.1500: VirtualBox.exe: timestamp 0x54661ae5 (rc=VINF_SUCCESS)
2911254.1500: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2921254.1500: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
2931254.1500: supR3HardNtChildPurify: Done after 321 ms and 0 fixes (loop #0).
2941ce8.1ef0: Log file opened: 4.3.19r96923 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x63258000
2951ce8.1ef0: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9def90000
2961ce8.1ef0: ntdll.dll: timestamp 0x53649e73 (rc=VINF_SUCCESS)
2971ce8.1ef0: New simple heap: #1 0000000001090000 LB 0x400000 (for 1744896 allocation)
2981254.1500: supR3HardenedEarlyCompact: Removed heap 1 (0x000000003e0000 LB 0x400000)
2991254.1500: supR3HardNtEnableThreadCreation:
3001ce8.1ef0: System32: \Device\HarddiskVolume4\Windows\System32
3011ce8.1ef0: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
3021ce8.1ef0: KnownDllPath: C:\WINDOWS\system32
3031ce8.1ef0: supR3HardenedVmProcessInit: Opening vboxdrv...
3041ce8.1ef0: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3051ce8.1ef0: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3061ce8.1ef0: Registered Dll notification callback with NTDLL.
3071ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
3081ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
3091ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
3101ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3111ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc420000 LB 0x0010f000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
3121ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
3131ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
3141ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de340000 LB 0x0013a000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
3151ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3161ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de340000 'C:\WINDOWS\system32\KERNEL32.DLL'
3171ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff720280000 LB 0x00106000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
3181ce8.1ef0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3191ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3201ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
3211ce8.1ef0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9defab200 pvNtTerminateThread=00007ff9df02b230
3221254.1500: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 68 ms.
3231ce8.1ef0: \SystemRoot\System32\ntdll.dll:
3241ce8.1ef0: CreationTime: 2014-10-06T07:40:57.842515900Z
3251ce8.1ef0: LastWriteTime: 2014-05-03T11:29:49.253495800Z
3261ce8.1ef0: ChangeTime: 2014-11-11T08:36:21.811121200Z
3271ce8.1ef0: FileAttributes: 0x20
3281ce8.1ef0: Size: 0x1a5710
3291ce8.1ef0: NT Headers: 0xe8
3301ce8.1ef0: Timestamp: 0x53649e73
3311ce8.1ef0: Machine: 0x8664 - amd64
3321ce8.1ef0: Timestamp: 0x53649e73
3331ce8.1ef0: Image Version: 6.3
3341ce8.1ef0: SizeOfImage: 0x1aa000 (1744896)
3351ce8.1ef0: Resource Dir: 0x145000 LB 0x62450
3361ce8.1ef0: ProductName: Microsoft® Windows® Operating System
3371ce8.1ef0: ProductVersion: 6.3.9600.17114
3381ce8.1ef0: FileVersion: 6.3.9600.17114 (winblue_gdr.140502-1623)
3391ce8.1ef0: FileDescription: NT Layer DLL
3401ce8.1ef0: \SystemRoot\System32\kernel32.dll:
3411ce8.1ef0: CreationTime: 2014-10-06T07:56:07.012848600Z
3421ce8.1ef0: LastWriteTime: 2014-03-20T04:19:59.915412000Z
3431ce8.1ef0: ChangeTime: 2014-11-11T08:36:18.139203500Z
3441ce8.1ef0: FileAttributes: 0x20
3451ce8.1ef0: Size: 0x13b3c0
3461ce8.1ef0: NT Headers: 0xe8
3471ce8.1ef0: Timestamp: 0x532a419c
3481ce8.1ef0: Machine: 0x8664 - amd64
3491ce8.1ef0: Timestamp: 0x532a419c
3501ce8.1ef0: Image Version: 6.3
3511ce8.1ef0: SizeOfImage: 0x13a000 (1286144)
3521ce8.1ef0: Resource Dir: 0x12a000 LB 0x520
3531ce8.1ef0: ProductName: Microsoft® Windows® Operating System
3541ce8.1ef0: ProductVersion: 6.3.9600.17056
3551ce8.1ef0: FileVersion: 6.3.9600.17056 (winblue_gdr.140319-1520)
3561ce8.1ef0: FileDescription: Windows NT BASE API Client DLL
3571ce8.1ef0: \SystemRoot\System32\KernelBase.dll:
3581ce8.1ef0: CreationTime: 2014-10-06T07:56:06.934727900Z
3591ce8.1ef0: LastWriteTime: 2014-03-20T03:40:33.319954500Z
3601ce8.1ef0: ChangeTime: 2014-11-11T08:36:21.279866200Z
3611ce8.1ef0: FileAttributes: 0x20
3621ce8.1ef0: Size: 0x10f9d8
3631ce8.1ef0: NT Headers: 0xf0
3641ce8.1ef0: Timestamp: 0x532954fb
3651ce8.1ef0: Machine: 0x8664 - amd64
3661ce8.1ef0: Timestamp: 0x532954fb
3671ce8.1ef0: Image Version: 6.3
3681ce8.1ef0: SizeOfImage: 0x10f000 (1110016)
3691ce8.1ef0: Resource Dir: 0x10a000 LB 0x3530
3701ce8.1ef0: ProductName: Microsoft® Windows® Operating System
3711ce8.1ef0: ProductVersion: 6.3.9600.17055
3721ce8.1ef0: FileVersion: 6.3.9600.17055 (winblue_gdr.140318-1651)
3731ce8.1ef0: FileDescription: Windows NT BASE API Client DLL
3741ce8.1ef0: \SystemRoot\System32\apisetschema.dll:
3751ce8.1ef0: CreationTime: 2013-08-22T12:13:09.745625900Z
3761ce8.1ef0: LastWriteTime: 2013-08-22T12:35:12.091034400Z
3771ce8.1ef0: ChangeTime: 2014-09-08T14:06:07.182112100Z
3781ce8.1ef0: FileAttributes: 0x20
3791ce8.1ef0: Size: 0x11360
3801ce8.1ef0: NT Headers: 0xd0
3811ce8.1ef0: Timestamp: 0x52160049
3821ce8.1ef0: Machine: 0x8664 - amd64
3831ce8.1ef0: Timestamp: 0x52160049
3841ce8.1ef0: Image Version: 6.3
3851ce8.1ef0: SizeOfImage: 0x13000 (77824)
3861ce8.1ef0: Resource Dir: 0x11000 LB 0x3f8
3871ce8.1ef0: ProductName: Microsoft® Windows® Operating System
3881ce8.1ef0: ProductVersion: 6.3.9600.16384
3891ce8.1ef0: FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
3901ce8.1ef0: FileDescription: ApiSet Schema DLL
3911ce8.1ef0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3921ce8.1ef0: supR3HardenedWinFindAdversaries: 0x0
3931ce8.1ef0: Calling main()
3941ce8.1ef0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
3951ce8.1ef0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3961ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3971ce8.1ef0: SUPR3HardenedMain: Final process, opening VBoxDrv...
3981ce8.1ef0: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001090000 LB 0x400000)
3991ce8.1ef0: supR3HardNtEnableThreadCreation:
4001ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4011ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4021ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4031ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4041ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9da130000 LB 0x00004000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4051ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4061ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4071ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4081ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9da130000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4091ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4101ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4111ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9da130000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4121ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9da130000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4131ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4141ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'crypt32.dll'.
4151ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'msasn1.dll'.
4161ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
4171ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wintrust.dll)
4181ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wintrust.dll
4191ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4201ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4211ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
4221ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
4231ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4241ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4251ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msasn1.dll)
4261ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msasn1.dll
4271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4281ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4291ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4301ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'msasn1.dll'.
4311ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\crypt32.dll)
4321ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\crypt32.dll
4331ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4341ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4351ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
4361ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
4371ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4381ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4391ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4401ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4411ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4421ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4431ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4441ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4451ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de4b0000 LB 0x000a7000 C:\WINDOWS\system32\msvcrt.dll [fFlags=0x0]
4461ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4471ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc3b0000 LB 0x00012000 C:\WINDOWS\system32\MSASN1.dll [fFlags=0x0]
4481ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4491ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc530000 LB 0x001d7000 C:\WINDOWS\system32\CRYPT32.dll [fFlags=0x0]
4501ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
4511ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc810000 LB 0x00137000 C:\WINDOWS\system32\RPCRT4.dll [fFlags=0x0]
4521ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4531ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc7c0000 LB 0x0004c000 C:\WINDOWS\system32\Wintrust.dll [fFlags=0x0]
4541ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4551ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\WINDOWS\system32\Wintrust.dll'
4561ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4571ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4591ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4611ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4621ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4631ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4641ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4651ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4661ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4671ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4681ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4691ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4701ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4711ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4721ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4731ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4741ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4751ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
4761ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptsp.dll)
4771ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptsp.dll
4781ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dbc10000 LB 0x0001e000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
4791ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
4801ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcrypt.dll'.
4811ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rsaenh.dll)
4821ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
4831ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
4841ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
4851ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
4861ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
4871ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4881ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
4891ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
4901ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dbe40000 LB 0x00026000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
4911ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
4921ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9db850000 LB 0x00035000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
4931ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
4941ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
4951ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
4961ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
4971ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
4981ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
4991ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
5001ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc170000 LB 0x00060000 C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll [fFlags=0x0]
5011ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5021ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc1d0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
5031ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5041ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
5051ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5061ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
5071ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5081ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5091ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de340000 'C:\WINDOWS\system32\kernel32.dll'
5101ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5111ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
5121ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5131ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5141ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\CRYPT32.dll'
5151ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de480000 LB 0x00015000 C:\WINDOWS\system32\imagehlp.dll [fFlags=0x0]
5161ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5171ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imagehlp.dll)
5181ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imagehlp.dll
5191ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5201ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5211ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5221ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5231ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5241ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
5251ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'bcrypt.dll'.
5261ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ntasn1.dll'.
5271ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ncrypt.dll)
5281ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ncrypt.dll
5291ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntasn1.dll)
5301ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntasn1.dll
5311ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dbdd0000 LB 0x0003a000 C:\WINDOWS\SYSTEM32\NTASN1.dll [fFlags=0x0]
5321ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntasn1.dll [lacks WinVerifyTrust]
5331ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dbe10000 LB 0x00024000 C:\WINDOWS\SYSTEM32\ncrypt.dll [fFlags=0x0]
5341ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
5351ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5361ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntasn1.dll'...
5371ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\ntasn1.dll' [rcNtRedir=0xc0150008]
5381ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntasn1.dll [lacks WinVerifyTrust]
5391ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5401ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
5411ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5421ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5431ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc170000 'C:\WINDOWS\system32\bcryptprimitives.dll'
5441ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
5451ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
5461ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
5471ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9ddd70000 LB 0x00057000 C:\WINDOWS\SYSTEM32\sechost.dll [fFlags=0x0]
5481ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
5491ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5501ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
5511ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gpapi.dll)
5521ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gpapi.dll
5531ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9db4f0000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
5541ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
5551ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
5561ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
5571ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc300000 LB 0x00014000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0]
5581ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
5591ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5601ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'crypt32.dll'.
5611ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'wldap32.dll'.
5621ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\cryptnet.dll)
5631ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptnet.dll
5641ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
5651ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume4\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
5661ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5671ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\Wldap32.dll)
5681ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\Wldap32.dll
5691ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5701ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5711ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5721ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5731ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5741ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5751ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5761ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5771ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5781ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5791ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5801ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5811ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5821ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5831ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5841ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5851ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5861ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5871ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5881ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5891ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9ddfd0000 LB 0x0005a000 C:\WINDOWS\system32\WLDAP32.dll [fFlags=0x0]
5901ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
5911ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9c96b0000 LB 0x00034000 C:\WINDOWS\system32\cryptnet.dll [fFlags=0x0]
5921ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5931ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5941ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5951ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
5961ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5971ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5981ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
5991ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6001ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6011ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6021ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6031ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6041ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6051ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6061ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6071ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6081ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6091ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6101ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6111ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6121ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6131ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6141ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6151ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6161ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6171ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6181ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6191ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6201ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6211ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\WINDOWS\system32\cryptnet.dll'
6221ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6231ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c96b0000 'C:\Windows\System32\cryptnet.dll'
6241ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6251ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
6261ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'rpcrt4.dll'.
6271ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
6281ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
6291ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de290000 LB 0x000a5000 C:\WINDOWS\SYSTEM32\advapi32.dll [fFlags=0x0]
6301ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
6311ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6321ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6331ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6341ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6351ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
6361ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
6371ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
6381ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6391ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6401ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6411ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6421ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
6431ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6441ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6451ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
6461ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
6471ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000015f91e0
6481ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
6491ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=10356BE7D7C3A274FE873FB1DF34704A77A3D737
6501ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6511ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6521ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc810000 'C:\WINDOWS\system32\rpcrt4.dll'
6531ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6541ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6551ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6561ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6571ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6591ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6611ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6621ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6631ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6641ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6651ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6661ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6671ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\Windows\System32\WINTRUST.DLL'
6681ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6691ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6701ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
6711ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6721ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6731ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
6741ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_128_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\SystemRoot\System32\ntdll.dll'
6751ce8.1ef0: g_pfnWinVerifyTrust=00007ff9dc7c1040
6761ce8.1ef0: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
6771ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6781ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6791ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
6801ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6811ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
6831ce8.1ef0: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\crypt32.dll'
6841ce8.1ef0: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
6851ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6861ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6871ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
6881ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
6891ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6901ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
6911ce8.1ef0: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\wintrust.dll'
6921ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6931ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6941ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
6951ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
6961ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\advapi32.dll'
6971ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000378 pwszName=\Device\HarddiskVolume4\Windows\System32\Wldap32.dll
6981ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
6991ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
7001ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=69524339B1646CCE03C83E941C787D6C1E6B6703
7011ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7021ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7031ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7041ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-DS-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\Wldap32.dll'
7051ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7061ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\Wldap32.dll'
7071ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000374 pwszName=\Device\HarddiskVolume4\Windows\System32\cryptnet.dll
7081ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
7091ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
7101ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0315578F0B76A9760FEA2715053C51E46A277B04
7111ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7121ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7131ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7141ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-DS-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\cryptnet.dll'
7151ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7161ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptnet.dll'
7171ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7181ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7191ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7201ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\profapi.dll'
7211ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7221ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7231ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7241ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gpapi.dll'
7251ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7261ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7271ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7281ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\sechost.dll'
7291ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7301ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7311ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7321ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\ntasn1.dll'
7331ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7341ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7351ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
7361ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7371ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7381ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\ncrypt.dll'
7391ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7401ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7411ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7421ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7431ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\imagehlp.dll'
7441ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7451ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7461ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7471ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll'
7481ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7491ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7501ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7511ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptbase.dll'
7521ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7531ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7541ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7551ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll'
7561ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7571ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7591ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rsaenh.dll'
7601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7611ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7621ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptsp.dll'
7631ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7641ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7651ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll'
7661ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7671ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7681ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msasn1.dll'
7691ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7701ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7711ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll'
7721ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7731ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
7741ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7751ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe'
7761ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7771ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7781ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\KernelBase.dll'
7791ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
7801ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7811ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\kernel32.dll'
7821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
7831ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
7841ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
7851ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
7861ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
7871ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
7881ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
7891ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
7901ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
7911ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
7921ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
7931ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
7941ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
7951ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
7961ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
7971ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
7981ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
7991ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
8001ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8011ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
8021ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
8031ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8041ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x6e2ba21058eedf00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC
8051ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8061ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
8071ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xf8491584e4cdb300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 2 CA 2007
8081ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
8091ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
8101ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
8111ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
8121ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x5015ae59fdeb7015 C=de, L=Frankfurt (Oder), O=Systemhaus Scheuschner GmbH, CN=Systemhaus Scheuschner GmbH WebAdmin CA, Email=gkulisch@scheuschner.de
8131ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x1114b808f6fab791 C=de, L=Frankfurt (Oder), O=Systemhaus Scheuschner GmbH, CN=Systemhaus Scheuschner GmbH VPN CA, Email=gkulisch@scheuschner.de
8141ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x37a73b71a9bfe300 DC=local, DC=scheuschner, CN=SHSGmbH
8151ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x2f26af583e109d00 DC=local, DC=scheuschner, CN=scheuschner-HERMES-CA
8161ce8.1ef0: supR3HardenedWinIsDesiredRootCA: Adding 0x7c33eec7c0f3c000 DC=local, DC=scheuschner, CN=SHS GmbH CA
8171ce8.1ef0: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=34
8181ce8.1ef0: SUPR3HardenedMain: Load Runtime...
8191ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
8201ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8211ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
8221ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
8231ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
8241ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll)WinVerifyTrust
8251ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8261ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8281ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
8291ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8301ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8311ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
8321ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
8331ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'nsi.dll'.
8341ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
8351ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll)WinVerifyTrust
8361ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
8371ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8381ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8391ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8401ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8411ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
8421ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
8431ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
8441ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\nsi.dll'.
8451ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\nsi.dll)
8461ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\nsi.dll
8471ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
8481ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8491ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll)WinVerifyTrust
8501ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
8511ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8521ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8531ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
8541ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8551ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8561ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8571ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)
8581ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
8591ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
8611ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)WinVerifyTrust
8621ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
8631ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8641ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8651ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
8661ce8.1ef0: supR3HardenedDllNotificationCallback: load 0000000064d40000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
8671ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8681ce8.1ef0: supR3HardenedDllNotificationCallback: load 0000000064ca0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
8691ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
8701ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dea70000 LB 0x00009000 C:\WINDOWS\system32\NSI.dll [fFlags=0x0]
8711ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll [avoiding WinVerifyTrust]
8721ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9def30000 LB 0x00058000 C:\WINDOWS\system32\WS2_32.dll [fFlags=0x0]
8731ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
8741ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9bcd50000 LB 0x00531000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
8751ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8761ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
8771ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
8781ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
8791ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
8801ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\nsi.dll'
8811ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8831ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8841ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8851ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8861ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8871ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8881ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8891ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8901ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8911ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8921ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8931ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8941ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8951ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8961ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
8971ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8981ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8991ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9001ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9011ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9021ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9031ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9041ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9051ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9061ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
9071ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9081ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9091ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9101ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9111ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9121ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9131ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9141ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9151ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9161ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9171ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9181ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9191ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9201ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9211ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9221ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9231ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9241ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
9251ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9261ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9271ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9281ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9291ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bcd50000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9301ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc7c0000 'C:\WINDOWS\system32\Wintrust.dll'
9311ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
9321ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
9331ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
9341ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
9351ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9361ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
9371ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
9381ce8.1ef0: SUPR3HardenedMain: Load TrustedMain...
9391ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
9401ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
9411ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
9421ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
9431ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
9441ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
9451ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtguivbox4.dll'.
9461ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtnetworkvbox4.dll'.
9471ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtopenglvbox4.dll'.
9481ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'user32.dll'.
9491ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'gdi32.dll'.
9501ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
9511ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
9521ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
9531ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
9541ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'comdlg32.dll'.
9551ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'winmm.dll'.
9561ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll)WinVerifyTrust
9571ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
9581ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
9591ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
9601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
9611ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
9621ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
9631ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
9641ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'user32.dll'.
9651ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll)WinVerifyTrust
9661ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
9671ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
9681ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
9691ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000470 pwszName=\Device\HarddiskVolume4\Windows\System32\comdlg32.dll
9701ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
9711ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
9721ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D07100D567670EB6C18EAD4F8F1561AE4F40E0A5
9731ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9741ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9751ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
9761ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'gdi32.dll'.
9771ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
9781ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
9791ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9801ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9811ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
9821ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9831ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9841ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
9851ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
9861ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'devobj.dll'.
9871ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
9881ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
9891ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
9901ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
9911ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\devobj.dll'.
9921ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9931ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'cfgmgr32.dll'.
9941ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll)
9951ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
9961ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9971ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9981ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9991ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10001ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
10011ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'user32.dll'.
10021ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
10031ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
10041ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10051ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10061ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
10071ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
10081ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
10091ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
10101ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll)
10111ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
10121ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10131ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10141ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
10151ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
10161ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_546_for_KB2975719~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume4\Windows\System32\comdlg32.dll'
10171ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
10181ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10191ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
10201ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
10211ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
10221ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
10231ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
10241ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\comdlg32.dll)WinVerifyTrust
10251ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
10261ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
10271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
10281ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10291ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10301ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
10311ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10321ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'user32.dll'.
10331ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'shlwapi.dll'.
10341ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #59 'gdi32.dll'.
10351ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll)
10361ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
10371ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
10381ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
10391ce8.1ef0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\comctl32.dll'.
10401ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
10411ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
10421ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
10431ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\comctl32.dll)
10441ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comctl32.dll
10451ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10461ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10471ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10481ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10491ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10501ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
10511ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
10521ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
10531ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
10541ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
10551ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
10561ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
10571ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
10581ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
10591ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10601ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10611ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10621ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10631ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10641ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10651ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10661ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
10671ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10681ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10691ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10701ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10711ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
10721ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10731ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10741ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10751ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10761ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10771ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
10781ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10791ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10801ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10811ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
10821ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
10831ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
10841ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10851ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10861ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
10871ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10881ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10891ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
10901ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
10911ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10921ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
10931ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
10941ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll)WinVerifyTrust
10951ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
10961ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
10971ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
10981ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10991ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
11001ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
11011ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
11021ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
11031ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
11041ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11051ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
11061ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll)
11071ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll
11081ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11091ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11101ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
11111ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
11121ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11131ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11141ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
11151ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
11161ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
11171ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
11181ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'gdi32.dll'.
11191ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
11201ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
11211ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll)WinVerifyTrust
11221ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
11231ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11241ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11251ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [redoing WinVerifyTrust]
11261ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
11271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
11281ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
11291ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11301ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11311ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
11321ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11331ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11341ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11351ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
11361ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
11371ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11381ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11391ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
11401ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
11411ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
11421ce8.1ef0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll'
11431ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11441ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11451ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
11461ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11471ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11481ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
11491ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
11501ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
11511ce8.1ef0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'
11521ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11531ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11541ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [redoing WinVerifyTrust]
11551ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
11561ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
11571ce8.1ef0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\user32.dll'
11581ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
11591ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' [rcNtRedir=0xc0150008]
11601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
11611ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11621ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
11631ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
11641ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
11651ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
11661ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
11671ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)WinVerifyTrust
11681ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
11691ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
11701ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' [rcNtRedir=0xc0150008]
11711ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11721ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11731ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
11741ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
11751ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
11761ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll'.
11771ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11781ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
11791ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
11801ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
11811ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11821ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11831ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)
11841ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
11851ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
11861ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
11871ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll'.
11881ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
11891ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
11901ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
11911ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
11921ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
11931ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
11941ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
11951ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
11961ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
11971ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
11981ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
11991ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
12001ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
12011ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)
12021ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
12031ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12041ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12051ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll
12061ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12071ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12081ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll
12091ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12101ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12111ce8.1ef0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\opengl32.dll'.
12121ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12131ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
12141ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
12151ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
12161ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
12171ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
12181ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
12191ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
12201ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12211ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12221ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
12231ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume4\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
12241ce8.1ef0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\ddraw.dll'.
12251ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12261ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'user32.dll'.
12271ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'gdi32.dll'.
12281ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'dciman32.dll'.
12291ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\ddraw.dll)
12301ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ddraw.dll
12311ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
12321ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
12331ce8.1ef0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
12341ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12351ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
12361ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
12371ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll)
12381ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
12391ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12401ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12411ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll
12421ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12431ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12441ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
12451ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12461ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12471ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12481ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12491ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
12501ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12511ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12521ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
12531ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
12541ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
12551ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
12561ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12571ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12581ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
12591ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12601ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12611ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
12621ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12631ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12641ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12651ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12661ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
12671ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
12681ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume4\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
12691ce8.1ef0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\winspool.drv'.
12701ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12711ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\winspool.drv)
12721ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winspool.drv
12731ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
12741ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
12751ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
12761ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
12771ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
12781ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\imm32.dll'.
12791ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
12801ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'msctf.dll'.
12811ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
12821ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
12831ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12841ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12851ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
12861ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
12871ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
12881ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
12891ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12901ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12911ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12921ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12931ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
12941ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12951ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12961ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
12971ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
12981ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
12991ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
13001ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13011ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13021ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
13031ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13041ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13051ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
13061ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13071ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13081ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
13091ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume4\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
13101ce8.1ef0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msctf.dll'.
13111ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13121ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
13131ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
13141ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'imm32.dll'.
13151ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
13161ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
13171ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13181ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13191ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13201ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13211ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13221ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13231ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13241ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13251ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
13261ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13281ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
13291ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume4\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
13301ce8.1ef0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\dciman32.dll'.
13311ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13321ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
13331ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
13341ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\dciman32.dll)
13351ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dciman32.dll
13361ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13371ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13381ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13391ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13401ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13411ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13421ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13431ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13441ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13451ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13461ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13471ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13481ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
13491ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
13501ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
13511ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13521ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13531ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13541ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13551ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll
13561ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13571ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
13591ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
13601ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
13611ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
13621ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)WinVerifyTrust
13631ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
13641ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
13651ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
13661ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [redoing WinVerifyTrust]
13671ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13681ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13691ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
13701ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
13711ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
13721ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
13731ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
13741ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
13751ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
13761ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
13771ce8.1ef0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll'
13781ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
13791ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
13801ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [redoing WinVerifyTrust]
13811ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
13821ce8.1ef0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll'
13831ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13841ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13851ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
13861ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13871ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13881ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
13891ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13901ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13911ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13921ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13931ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
13941ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000054c pwszName=\Device\HarddiskVolume4\Windows\System32\opengl32.dll
13951ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
13961ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
13971ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E7B21317A30D467EC23A2D5AE5A00919E81ECF45
13981ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
13991ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
14001ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\opengl32.dll'
14011ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
14021ce8.1ef0: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\opengl32.dll'
14031ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
14041ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
14051ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
14061ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
14071ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
14081ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
14091ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
14101ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
14111ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
14121ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
14131ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
14141ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [avoiding WinVerifyTrust]
14151ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
14161ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
14171ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
14181ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll)
14191ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll
14201ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14211ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
14221ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
14231ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [avoiding WinVerifyTrust]
14241ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14251ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'combase.dll'.
14261ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll)
14271ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll
14281ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dea80000 LB 0x00171000 C:\WINDOWS\system32\USER32.dll [fFlags=0x0]
14291ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dede0000 LB 0x00144000 C:\WINDOWS\system32\GDI32.dll [fFlags=0x0]
14301ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d6b00000 LB 0x00009000 C:\WINDOWS\SYSTEM32\DCIMAN32.dll [fFlags=0x0]
14311ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
14321ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9c6250000 LB 0x000f4000 C:\WINDOWS\SYSTEM32\DDRAW.dll [fFlags=0x0]
14331ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
14341ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9c9170000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
14351ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
14361ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9c1100000 LB 0x00121000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
14371ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
14381ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dec00000 LB 0x001d6000 C:\WINDOWS\SYSTEM32\combase.dll [fFlags=0x0]
14391ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [avoiding WinVerifyTrust]
14401ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de110000 LB 0x00178000 C:\WINDOWS\system32\ole32.dll [fFlags=0x0]
14411ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
14421ce8.1ef0: supR3HardenedDllNotificationCallback: load 0000000064510000 LB 0x002de000 C:\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [fFlags=0x0]
14431ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
14441ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de780000 LB 0x00051000 C:\WINDOWS\system32\SHLWAPI.dll [fFlags=0x0]
14451ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [avoiding WinVerifyTrust]
14461ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc710000 LB 0x000a1000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\COMCTL32.dll [fFlags=0x0]
14471ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll [avoiding WinVerifyTrust]
14481ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc950000 LB 0x0140f000 C:\WINDOWS\system32\SHELL32.dll [fFlags=0x0]
14491ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
14501ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dac80000 LB 0x0009f000 C:\WINDOWS\SYSTEM32\SHCORE.DLL [fFlags=0x0]
14511ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [avoiding WinVerifyTrust]
14521ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de070000 LB 0x0009e000 C:\WINDOWS\system32\COMDLG32.dll [fFlags=0x0]
14531ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
14541ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de570000 LB 0x000c1000 C:\WINDOWS\system32\OLEAUT32.dll [fFlags=0x0]
14551ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
14561ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de640000 LB 0x00139000 C:\WINDOWS\system32\MSCTF.dll [fFlags=0x0]
14571ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msctf.dll [avoiding WinVerifyTrust]
14581ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de030000 LB 0x00034000 C:\WINDOWS\system32\IMM32.dll [fFlags=0x0]
14591ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
14601ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc3d0000 LB 0x0004a000 C:\WINDOWS\SYSTEM32\cfgmgr32.dll [fFlags=0x0]
14611ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
14621ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9db180000 LB 0x00026000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
14631ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [avoiding WinVerifyTrust]
14641ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d5a20000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
14651ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14661ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d5a50000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
14671ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
14681ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d5a70000 LB 0x0007b000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
14691ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
14701ce8.1ef0: supR3HardenedDllNotificationCallback: load 0000000063ba0000 LB 0x00969000 C:\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [fFlags=0x0]
14711ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
14721ce8.1ef0: supR3HardenedDllNotificationCallback: load 0000000064b90000 LB 0x00105000 C:\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll [fFlags=0x0]
14731ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
14741ce8.1ef0: supR3HardenedDllNotificationCallback: load 0000000063ac0000 LB 0x000dc000 C:\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll [fFlags=0x0]
14751ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
14761ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9bc4d0000 LB 0x00873000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
14771ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
14781ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14791ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14801ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
14811ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14821ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14831ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14841ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14851ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14861ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14871ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14881ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14891ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
14901ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
14911ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
14921ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'
14931ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000430 pwszName=\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll
14941ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
14951ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
14961ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0B6F85C85728A0522988F3BA15B32993C5E6F65A
14971ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
14981ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
14991ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll'
15001ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15011ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll'
15021ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004f0 pwszName=\Device\HarddiskVolume4\Windows\System32\dciman32.dll
15031ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
15041ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
15051ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F7054D7E2435C8185055FC10D72A003A1DA9E42A
15061ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15071ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15081ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\dciman32.dll'
15091ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15101ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\dciman32.dll'
15111ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15121ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15131ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msctf.dll'
15141ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15151ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15161ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\imm32.dll'
15171ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000538 pwszName=\Device\HarddiskVolume4\Windows\System32\winspool.drv
15181ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
15191ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
15201ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=301C08682DA17C67E9303CDB8A53D6714879AAB6
15211ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15221ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15231ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_458_for_KB2975719~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume4\Windows\System32\winspool.drv'
15241ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15251ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\winspool.drv'
15261ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000550 pwszName=\Device\HarddiskVolume4\Windows\System32\glu32.dll
15271ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
15281ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
15291ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3E2A9E0BA990B5B324512157B6832A46A7F5FC7E
15301ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15311ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15321ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\glu32.dll'
15331ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15341ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll'
15351ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004e4 pwszName=\Device\HarddiskVolume4\Windows\System32\ddraw.dll
15361ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
15371ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
15381ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=31DF65C62254C7AE52D40C6878D7F8B35E0367A8
15391ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15401ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15411ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\ddraw.dll'
15421ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15431ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\ddraw.dll'
15441ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15451ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15461ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\combase.dll'
15471ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15481ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15491ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'
15501ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003c0 pwszName=\Device\HarddiskVolume4\Windows\System32\comctl32.dll
15511ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
15521ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
15531ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0B6F85C85728A0522988F3BA15B32993C5E6F65A
15541ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15551ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15561ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\comctl32.dll'
15571ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15581ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\comctl32.dll'
15591ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15611ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'
15621ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15631ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15641ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\devobj.dll'
15651ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15661ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15671ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'
15681ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll
15691ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15701ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de030000 'C:\WINDOWS\system32\imm32.dll'
15711ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bc4d0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
15721ce8.1ef0: SUPR3HardenedMain: Calling TrustedMain (00007ff9bc4d1ca0)...
15731ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
15741ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15751ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
15761ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000520 pwszName=\Device\HarddiskVolume4\Windows\System32\uxtheme.dll
15771ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
15781ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
15791ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4235D21C52BC6FC9D5B6A7B3CE61ED85F804B2B7
15801ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
15811ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
15831ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
15841ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2550_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume4\Windows\System32\uxtheme.dll'
15851ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15861ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15871ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
15881ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'gdi32.dll'.
15891ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll)WinVerifyTrust
15901ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
15911ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15921ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15931ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15941ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15951ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15961ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15971ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
15981ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
15991ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9daff0000 LB 0x00121000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
16001ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16011ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16021ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16031ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16041ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16051ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16061ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16071ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16081ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16091ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16101ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16111ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16121ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'user32.dll'.
16131ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'gdi32.dll'.
16141ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dwmapi.dll)
16151ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
16161ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9daab0000 LB 0x00020000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
16171ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll [avoiding WinVerifyTrust]
16181ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
16191ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
16201ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll)
16211ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll
16221ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9db170000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
16231ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll [avoiding WinVerifyTrust]
16241ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16251ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16261ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16281ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16291ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16301ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll
16311ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16321ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16331ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16341ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16351ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
16361ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
16371ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'
16381ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
16391ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
16401ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\dwmapi.dll'
16411ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
16421ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16431ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc950000 'C:\WINDOWS\system32\shell32.dll'
16441ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll
16451ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16461ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de340000 'C:\WINDOWS\system32\kernel32.dll'
16471ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16481ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16491ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16501ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16511ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16521ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16531ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll)
16541ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16551ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\WINDOWS\system32\wintab32.dll'
16561ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dea80000 'C:\WINDOWS\system32\user32.dll'
16571ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
16581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16591ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9daff0000 'C:\WINDOWS\system32\uxtheme.dll'
16601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dea80000 'C:\WINDOWS\system32\user32.dll'
16611ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
16621ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16631ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de290000 'C:\WINDOWS\system32\advapi32.dll'
16641ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
16651ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
16661ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16671ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
16681ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'profapi.dll'.
16691ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\userenv.dll)WinVerifyTrust
16701ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\userenv.dll
16711ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
16721ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
16731ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll
16741ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16751ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16761ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16771ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16781ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16791ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll
16801ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9db960000 LB 0x0001e000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
16811ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll
16821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db960000 'C:\WINDOWS\system32\userenv.dll'
16831ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll
16841ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16851ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de340000 'C:\WINDOWS\system32\kernel32.dll'
16861ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16871ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
16881ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll)
16891ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll
16901ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9de9c0000 LB 0x000a4000 C:\WINDOWS\SYSTEM32\clbcatq.dll [fFlags=0x0]
16911ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\clbcatq.dll [avoiding WinVerifyTrust]
16921ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16931ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16941ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16951ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16961ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
16971ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
16981ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\clbcatq.dll'
16991ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17001ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
17011ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
17021ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de570000 'C:\Windows\System32\oleaut32.dll'
17031ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\sxs.dll)
17041ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sxs.dll
17051ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9dc1e0000 LB 0x00097000 C:\WINDOWS\SYSTEM32\sxs.dll [fFlags=0x0]
17061ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\sxs.dll [avoiding WinVerifyTrust]
17071ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000005f4 pwszName=\Device\HarddiskVolume4\Windows\System32\sxs.dll
17081ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
17091ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
17101ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=687F47861CE02066FB64E8228B3C4D091FA20854
17111ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17121ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
17131ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat'; file='\Device\HarddiskVolume4\Windows\System32\sxs.dll'
17141ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17151ce8.1ef0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\sxs.dll'
17161ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
17171ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLEAUT32.dll (Input=OLEAUT32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17181ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de570000 'C:\WINDOWS\system32\OLEAUT32.dll'
17191ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll)
17201ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17211ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\WINDOWS\system32\wintab32.dll'
17221ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dede0000 'C:\WINDOWS\system32\gdi32.dll'
17231ce8.11dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17241ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
17251ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
17261ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
17271ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
17281ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
17291ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
17301ce8.11dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
17311ce8.11dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxC.dll)WinVerifyTrust
17321ce8.11dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxC.dll
17331ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
17341ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
17351ce8.11dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
17361ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
17371ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
17381ce8.11dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
17391ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
17401ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
17411ce8.11dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
17421ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
17431ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
17441ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
17451ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
17461ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
17471ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
17481ce8.11dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
17491ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
17501ce8.11dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
17511ce8.11dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
17521ce8.11dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
17531ce8.11dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxC.dll
17541ce8.11dc: supR3HardenedDllNotificationCallback: load 00007ff9bbfd0000 LB 0x004f6000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
17551ce8.11dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxC.dll
17561ce8.11dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bbfd0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
17571ce8.c38: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17581ce8.c38: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17591ce8.c38: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17601ce8.c38: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
17611ce8.c38: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
17621ce8.c38: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll)WinVerifyTrust
17631ce8.c38: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll
17641ce8.c38: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
17651ce8.c38: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
17661ce8.c38: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
17671ce8.c38: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
17681ce8.c38: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxPuelMain.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17691ce8.c38: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll
17701ce8.c38: supR3HardenedDllNotificationCallback: load 00007ff9d83b0000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.DLL [fFlags=0x0]
17711ce8.c38: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll
17721ce8.c38: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d83b0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxPuelMain.DLL'
17731ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dea80000 'C:\WINDOWS\system32\user32.dll'
17741ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
17751ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17761ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc950000 'C:\WINDOWS\system32\shell32.dll'
17771ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
17781ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
17791ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de110000 'C:\WINDOWS\system32\ole32.dll'
17801ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
17811ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de110000 'C:\WINDOWS\system32\ole32.dll'
17831ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
17841ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17851ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de570000 'C:\WINDOWS\system32\OLEAUT32.dll'
17861ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a48 pwszName=\Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
17871ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
17881ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
17891ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7236FDED02E3449B6CA92FB6E4246EBF9068E8BF
17901ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
17911ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
17921ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_110_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll'
17931ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17941ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17951ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
17961ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
17971ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll)WinVerifyTrust
17981ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
17991ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
18001ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
18011ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a58 pwszName=\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
18021ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
18031ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
18041ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C8CF4605B4B026F3426876C8B971F3B65D680FCA
18051ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
18061ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
18071ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-admin~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll'
18081ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18091ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18101ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'ws2_32.dll'.
18111ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll)WinVerifyTrust
18121ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
18131ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
18141ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
18151ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
18161ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18171ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18181ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
18191ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
18201ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
18211ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18221ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18231ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18241ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
18251ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
18261ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d20c0000 LB 0x0007f000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
18271ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
18281ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d2140000 LB 0x0000f000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
18291ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
18301ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18311ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc420000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
18321ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d2140000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
18331ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ac0 pwszName=\Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
18341ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
18351ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
18361ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CAF9F72D1022230646E0EDB101D9050122FBB222
18371ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
18381ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
18391ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18401ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
18411ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_110_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll'
18421ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18431ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18441ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
18451ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll)WinVerifyTrust
18461ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
18471ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18481ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
18491ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18501ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18511ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18521ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
18531ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9cdd50000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
18541ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
18551ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cdd50000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
18561ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18571ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc420000 'api-ms-win-core-localization-l1-2-0.dll'
18581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18591ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc420000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
18601ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ad8 pwszName=\Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
18611ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
18621ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
18631ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3F29F8F4F858A7AFDF4CD047A78948C26E8333B6
18641ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
18651ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
18661ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-admin~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll'
18671ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18681ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18691ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
18701ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll)WinVerifyTrust
18711ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
18721ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
18731ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
18741ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
18751ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18761ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18771ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
18781ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18791ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
18801ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9cdd70000 LB 0x000e4000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
18811ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
18821ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cdd70000 'C:\WINDOWS\system32\wbem\fastprox.dll'
18831ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
18841ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18851ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de570000 'C:\WINDOWS\system32\OLEAUT32.dll'
18861ce8.230: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
18871ce8.230: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
18881ce8.230: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
18891ce8.230: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
18901ce8.230: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll)WinVerifyTrust
18911ce8.230: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
18921ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18931ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18941ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
18951ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
18961ce8.230: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
18971ce8.230: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
18981ce8.230: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
18991ce8.230: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
19001ce8.230: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxREM.dll)WinVerifyTrust
19011ce8.230: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxREM.dll
19021ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19031ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19041ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19051ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19061ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
19071ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
19081ce8.230: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
19091ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19101ce8.230: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19111ce8.230: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19121ce8.230: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
19131ce8.230: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxREM.dll
19141ce8.230: supR3HardenedDllNotificationCallback: load 0000000063700000 LB 0x00109000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
19151ce8.230: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxREM.dll
19161ce8.230: supR3HardenedDllNotificationCallback: load 00007ff9c6430000 LB 0x00260000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
19171ce8.230: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
19181ce8.230: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c6430000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
19191ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
19201ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
19211ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
19221ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19231ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
19241ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'nsi.dll'.
19251ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\netcfgx.dll)WinVerifyTrust
19261ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\netcfgx.dll
19271ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
19281ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
19291ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll
19301ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19311ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19321ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
19331ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19341ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19351ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\netcfgx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
19361ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\netcfgx.dll
19371ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9cda80000 LB 0x00079000 C:\Windows\System32\netcfgx.dll [fFlags=0x0]
19381ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\netcfgx.dll
19391ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cda80000 'C:\Windows\System32\netcfgx.dll'
19401ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9de7e0000 LB 0x001d4000 C:\WINDOWS\system32\SETUPAPI.dll [fFlags=0x0]
19411ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'cfgmgr32.dll'.
19421ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
19431ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
19441ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\setupapi.dll)
19451ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\setupapi.dll
19461ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19471ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
19481ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19491ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19501ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
19511ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
19521ce8.1da0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
19531ce8.1da0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
19541ce8.1da0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
19551ce8.1da0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\setupapi.dll'
19561ce8.1da0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
19571ce8.1da0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19581ce8.1da0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
19591ce8.1da0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
19601ce8.1da0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
19611ce8.1da0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll)WinVerifyTrust
19621ce8.1da0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
19631ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
19641ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
19651ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19661ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19671ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
19681ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
19691ce8.1da0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
19701ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19711ce8.1da0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19721ce8.1da0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19731ce8.1da0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
19741ce8.1da0: supR3HardenedDllNotificationCallback: load 00007ff9d81a0000 LB 0x00009000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
19751ce8.1da0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
19761ce8.1da0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d81a0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
19771ce8.ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
19781ce8.ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19791ce8.ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
19801ce8.ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll)WinVerifyTrust
19811ce8.ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
19821ce8.ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19831ce8.ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19841ce8.ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19851ce8.ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19861ce8.ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19871ce8.ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
19881ce8.ef0: supR3HardenedDllNotificationCallback: load 00007ff9d8060000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
19891ce8.ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
19901ce8.ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d8060000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
19911ce8.19d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
19921ce8.19d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19931ce8.19d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
19941ce8.19d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
19951ce8.19d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll)WinVerifyTrust
19961ce8.19d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
19971ce8.19d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19981ce8.19d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19991ce8.19d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
20001ce8.19d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
20011ce8.19d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
20021ce8.19d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20031ce8.19d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20041ce8.19d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20051ce8.19d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
20061ce8.19d0: supR3HardenedDllNotificationCallback: load 00007ff9d7fa0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
20071ce8.19d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
20081ce8.19d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7fa0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
20091ce8.19dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
20101ce8.19dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
20111ce8.19dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
20121ce8.19dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
20131ce8.19dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll)WinVerifyTrust
20141ce8.19dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
20151ce8.19dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
20161ce8.19dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
20171ce8.19dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
20181ce8.19dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
20191ce8.19dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
20201ce8.19dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20211ce8.19dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20221ce8.19dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20231ce8.19dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
20241ce8.19dc: supR3HardenedDllNotificationCallback: load 00007ff9d7f90000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
20251ce8.19dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
20261ce8.19dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7f90000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
20271ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
20281ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20291ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c6430000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
20301ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
20311ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
20321ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
20331ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
20341ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
20351ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
20361ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll)WinVerifyTrust
20371ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
20381ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
20391ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
20401ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20411ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
20421ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
20431ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20441ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20451ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
20461ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
20471ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20481ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20491ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20501ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
20511ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c9500000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
20521ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
20531ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9500000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL'
20541ce8.c4: supR3HardenedDllNotificationCallback: Unload 00007ff9c9500000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
20551ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
20561ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
20571ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
20581ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
20591ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'd3d9.dll'.
20601ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
20611ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
20621ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxddu.dll'.
20631ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'vboxdd2.dll'.
20641ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
20651ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'setupapi.dll'.
20661ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ws2_32.dll'.
20671ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'ole32.dll'.
20681ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'iphlpapi.dll'.
20691ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD.dll)WinVerifyTrust
20701ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD.dll
20711ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
20721ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
20731ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
20741ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
20751ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
20761ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winnsi.dll'.
20771ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL)WinVerifyTrust
20781ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
20791ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20801ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
20811ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
20821ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
20831ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
20841ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
20851ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
20861ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
20871ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\setupapi.dll
20881ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20891ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20901ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
20911ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
20921ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
20931ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
20941ce8.c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winnsi.dll'.
20951ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
20961ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
20971ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winnsi.dll)
20981ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winnsi.dll
20991ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
21001ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
21011ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll
21021ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
21031ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
21041ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll
21051ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21061ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21071ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
21081ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
21091ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21101ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
21111ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
21121ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD2.dll)WinVerifyTrust
21131ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD2.dll
21141ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
21151ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
21161ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21171ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21181ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
21191ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
21201ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
21211ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21221ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
21231ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
21241ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
21251ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21261ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
21271ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
21281ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
21291ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'newdev.dll'.
21301ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
21311ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDDU.dll)WinVerifyTrust
21321ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDDU.dll
21331ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21341ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21351ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
21361ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
21371ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
21381ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d9.dll'...
21391ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d9.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d9.dll' [rcNtRedir=0xc0150008]
21401ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
21411ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
21421ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'newdev.dll'...
21431ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'newdev.dll' -> '\Device\HarddiskVolume4\Windows\System32\newdev.dll' [rcNtRedir=0xc0150008]
21441ce8.c4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\newdev.dll'.
21451ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21461ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
21471ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
21481ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
21491ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'uxtheme.dll'.
21501ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'cfgmgr32.dll'.
21511ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'setupapi.dll'.
21521ce8.c4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\newdev.dll)
21531ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\newdev.dll
21541ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
21551ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
21561ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\setupapi.dll
21571ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
21581ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
21591ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21601ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21611ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21621ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
21631ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
21641ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
21651ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\setupapi.dll
21661ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
21671ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
21681ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
21691ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uxtheme.dll'...
21701ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'uxtheme.dll' -> '\Device\HarddiskVolume4\Windows\System32\uxtheme.dll' [rcNtRedir=0xc0150008]
21711ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
21721ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
21731ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
21741ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
21751ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
21761ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
21771ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21781ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21791ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
21801ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
21811ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21821ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
21831ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'version.dll'.
21841ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'gdi32.dll'.
21851ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'dwmapi.dll'.
21861ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d9.dll)WinVerifyTrust
21871ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d9.dll
21881ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21891ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
21901ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
21911ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
21921ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
21931ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
21941ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
21951ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
21961ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume4\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
21971ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
21981ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
21991ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
22001ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\version.dll)WinVerifyTrust
22011ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\version.dll
22021ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22031ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22041ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22051ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22061ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22071ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22081ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22091ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD.dll
22101ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d9.dll
22111ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDDU.dll
22121ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD2.dll
22131ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
22141ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll
22151ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\newdev.dll [avoiding WinVerifyTrust]
22161ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
22171ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22181ce8.c4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\devrtl.dll)
22191ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devrtl.dll
22201ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9da6a0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\VERSION.dll [fFlags=0x0]
22211ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll
22221ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9cc420000 LB 0x00208000 C:\WINDOWS\SYSTEM32\d3d9.dll [fFlags=0x0]
22231ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d9.dll
22241ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9cd580000 LB 0x00014000 C:\WINDOWS\SYSTEM32\devrtl.DLL [fFlags=0x0]
22251ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\devrtl.dll [avoiding WinVerifyTrust]
22261ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c9880000 LB 0x00054000 C:\WINDOWS\SYSTEM32\newdev.dll [fFlags=0x0]
22271ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\newdev.dll [avoiding WinVerifyTrust]
22281ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c7750000 LB 0x0005f000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
22291ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDDU.dll
22301ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c9500000 LB 0x00034000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
22311ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD2.dll
22321ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d9ea0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
22331ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
22341ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9da230000 LB 0x00029000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
22351ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
22361ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9bb700000 LB 0x008ca000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
22371ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD.dll
22381ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bb700000 'C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL'
22391ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000d14 pwszName=\Device\HarddiskVolume4\Windows\System32\devrtl.dll
22401ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
22411ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
22421ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6059B260D211680DF083154CCCE38DE8412914CF
22431ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22441ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22451ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22461ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
22471ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-Base-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\devrtl.dll'
22481ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22491ce8.c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\devrtl.dll'
22501ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cfc pwszName=\Device\HarddiskVolume4\Windows\System32\newdev.dll
22511ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
22521ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
22531ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EAD431E57FCC787ED701559E9AF2ACC33D2DCED0
22541ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22551ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
22561ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1722_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume4\Windows\System32\newdev.dll'
22571ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22581ce8.c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\newdev.dll'
22591ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22601ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
22611ce8.c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\winnsi.dll'
22621ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22631ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
22641ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22651ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
22661ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c94c0000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
22671ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
22681ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c94c0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL'
22691ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22701ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxC.dll
22711ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22721ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9bbfd0000 'C:\Program Files\Oracle\VirtualBox/VBoxC.DLL'
22731ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22741ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxDD2.dll
22751ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22761ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9500000 'C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL'
22771ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22781ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22791ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22801ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22811ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll)WinVerifyTrust
22821ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
22831ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22841ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22851ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22861ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22871ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22881ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
22891ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d7f70000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
22901ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
22911ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7f70000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxEhciR3.DLL'
22921ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22931ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
22941ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22951ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22961ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll)WinVerifyTrust
22971ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
22981ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22991ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23001ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23011ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23021ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23031ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
23041ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d2dc0000 LB 0x00016000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
23051ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
23061ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d2dc0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbCardReaderR3.DLL'
23071ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23081ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23091ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23101ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23111ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll)WinVerifyTrust
23121ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
23131ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23141ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23151ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23161ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23171ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23181ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
23191ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9cd690000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
23201ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
23211ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cd690000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbWebcamR3.DLL'
23221ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23231ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23241ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23251ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23261ce8.488: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23271ce8.488: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23281ce8.488: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23291ce8.488: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23301ce8.488: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll)WinVerifyTrust
23311ce8.488: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
23321ce8.488: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23331ce8.488: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23341ce8.488: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
23351ce8.488: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
23361ce8.488: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23371ce8.488: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23381ce8.488: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23391ce8.488: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23401ce8.488: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
23411ce8.488: supR3HardenedDllNotificationCallback: load 00007ff9d7ed0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
23421ce8.488: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
23431ce8.488: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7ed0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
23441ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23451ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23461ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23471ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23481ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll)WinVerifyTrust
23491ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
23501ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23511ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23521ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23531ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23541ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23551ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
23561ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d83a0000 LB 0x00008000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
23571ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
23581ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d83a0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VDPluginCrypt.DLL'
23591ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e38 pwszName=\Device\HarddiskVolume4\Windows\System32\dsound.dll
23601ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
23611ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
23621ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=ADB542ACB56917DACFC9792CAC57CDEED29A58E5
23631ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23641ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
23651ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-avcore~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\dsound.dll'
23661ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
23671ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23681ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
23691ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
23701ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
23711ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winmm.dll'.
23721ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'powrprof.dll'.
23731ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dsound.dll)WinVerifyTrust
23741ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dsound.dll
23751ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'powrprof.dll'...
23761ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'powrprof.dll' -> '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rcNtRedir=0xc0150008]
23771ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
23781ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
23791ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23801ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
23811ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll)WinVerifyTrust
23821ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll
23831ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
23841ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
23851ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
23861ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23871ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23881ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23891ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23901ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23911ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23921ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23931ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23941ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23951ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23961ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23971ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23981ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
23991ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
24001ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\powrprof.dll
24011ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9dc2a0000 LB 0x00045000 C:\WINDOWS\System32\POWRPROF.dll [fFlags=0x0]
24021ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\powrprof.dll
24031ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c6160000 LB 0x00087000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
24041ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
24051ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
24061ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24071ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c6160000 'C:\WINDOWS\System32\dsound.dll'
24081ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c6160000 'C:\WINDOWS\System32\dsound.dll'
24091ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
24101ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
24111ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24121ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'rpcrt4.dll'.
24131ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'devobj.dll'.
24141ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll)WinVerifyTrust
24151ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
24161ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
24171ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
24181ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll
24191ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24201ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24211ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24221ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24231ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
24241ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
24251ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9da3f0000 LB 0x00062000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
24261ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
24271ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9da3f0000 'C:\WINDOWS\System32\MMDevApi.dll'
24281ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
24291ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24301ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9da3f0000 'C:\WINDOWS\system32\MMDEVAPI.DLL'
24311ce8.e64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
24321ce8.e64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
24331ce8.e64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24341ce8.e64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
24351ce8.e64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
24361ce8.e64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'mmdevapi.dll'.
24371ce8.e64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
24381ce8.e64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll)WinVerifyTrust
24391ce8.e64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
24401ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
24411ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
24421ce8.e64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll
24431ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
24441ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
24451ce8.e64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
24461ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24471ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24481ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24491ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24501ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24511ce8.e64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24521ce8.e64: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24531ce8.e64: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
24541ce8.e64: supR3HardenedDllNotificationCallback: load 00007ff9cd850000 LB 0x0007e000 C:\WINDOWS\system32\AUDIOSES.DLL [fFlags=0x0]
24551ce8.e64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
24561ce8.e64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cd850000 'C:\WINDOWS\system32\AUDIOSES.DLL'
24571ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
24581ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24591ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
24601ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e90 pwszName=\Device\HarddiskVolume4\Windows\System32\wdmaud.drv
24611ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
24621ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
24631ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A1CBABB000F9496EAA31F2C938BD998B09CAF0CC
24641ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
24651ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
24661ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-avcore~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\wdmaud.drv'
24671ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24681ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24691ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'mmdevapi.dll'.
24701ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'user32.dll'.
24711ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'winmm.dll'.
24721ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ksuser.dll'.
24731ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'avrt.dll'.
24741ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv)WinVerifyTrust
24751ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
24761ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
24771ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
24781ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
24791ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
24801ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll)WinVerifyTrust
24811ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll
24821ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
24831ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
24841ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
24851ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
24861ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24871ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll)WinVerifyTrust
24881ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll
24891ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
24901ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
24911ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
24921ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24931ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24941ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
24951ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
24961ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
24971ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24981ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24991ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25001ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25011ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25021ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25031ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll
25041ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll
25051ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d7350000 LB 0x00008000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
25061ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll
25071ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d9e80000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
25081ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll
25091ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9c9480000 LB 0x0003c000 C:\WINDOWS\system32\wdmaud.drv [fFlags=0x0]
25101ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25111ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25121ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25131ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25141ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25151ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25161ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25171ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25181ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25191ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25201ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25211ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25221ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25231ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25241ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25251ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25261ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25271ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
25281ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25291ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25301ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25311ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9480000 'C:\WINDOWS\system32\wdmaud.drv'
25321ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f04 pwszName=\Device\HarddiskVolume4\Windows\System32\msacm32.drv
25331ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
25341ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
25351ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D0FA85EFCB35F052852A205B01E87BA502D7D932
25361ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
25371ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
25381ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-avcore~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\msacm32.drv'
25391ce8.c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25401ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25411ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
25421ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
25431ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msacm32.dll'.
25441ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'mmdevapi.dll'.
25451ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv)WinVerifyTrust
25461ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25471ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
25481ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
25491ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
25501ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
25511ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
25521ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
25531ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
25541ce8.c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25551ce8.c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll)WinVerifyTrust
25561ce8.c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll
25571ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
25581ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
25591ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
25601ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25611ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25621ce8.c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll
25631ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25641ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25651ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25661ce8.c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25671ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25681ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25691ce8.c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll
25701ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9cacd0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
25711ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll
25721ce8.c4: supR3HardenedDllNotificationCallback: load 00007ff9d7d70000 LB 0x0000b000 C:\WINDOWS\system32\msacm32.drv [fFlags=0x0]
25731ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25741ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25751ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25761ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25771ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25781ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25791ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25801ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25811ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25821ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25831ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25841ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25851ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25861ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25871ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25881ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25891ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25901ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
25911ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25921ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25931ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25941ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25951ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d7d70000 'C:\WINDOWS\system32\msacm32.drv'
25961ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
25971ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
25981ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
25991ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
26001ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
26011ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
26021ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
26031ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
26041ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26051ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5a50000 'C:\WINDOWS\system32\winmm.dll'
26061ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c6430000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
26071ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
26081ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
26091ce8.c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll
26101ce8.c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32/kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26111ce8.c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9de340000 'C:\WINDOWS\system32/kernel32.dll'
26121ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ac8 pwszName=\Device\HarddiskVolume4\Windows\System32\mscms.dll
26131ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
26141ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
26151ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=603F84ABA4E8DD75D802CF57F5ABB2D0968221E0
26161ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
26171ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
26181ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\mscms.dll'
26191ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26201ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26211ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'userenv.dll'.
26221ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mscms.dll)WinVerifyTrust
26231ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mscms.dll
26241ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
26251ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume4\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
26261ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll
26271ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26281ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26291ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mscms.dll (Input=mscms.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26301ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mscms.dll
26311ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9d2e90000 LB 0x0008d000 C:\WINDOWS\system32\mscms.dll [fFlags=0x0]
26321ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mscms.dll
26331ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d2e90000 'C:\WINDOWS\system32\mscms.dll'
26341ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000774 pwszName=\Device\HarddiskVolume4\Windows\System32\icm32.dll
26351ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000015f91e0
26361ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000015f91e0
26371ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=87FD7D3BB298BC790CD5163953E8A559775122F0
26381ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
26391ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26401ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9db850000 'C:\WINDOWS\system32\rsaenh.dll'
26411ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc530000 'C:\WINDOWS\system32\crypt32.dll'
26421ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume4\Windows\System32\icm32.dll'
26431ce8.1ef0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26441ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26451ce8.1ef0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mscms.dll'.
26461ce8.1ef0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\icm32.dll)WinVerifyTrust
26471ce8.1ef0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\icm32.dll
26481ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mscms.dll'...
26491ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'mscms.dll' -> '\Device\HarddiskVolume4\Windows\System32\mscms.dll' [rcNtRedir=0xc0150008]
26501ce8.1ef0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mscms.dll
26511ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26521ce8.1ef0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26531ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\icm32.dll (Input=icm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
26541ce8.1ef0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\icm32.dll
26551ce8.1ef0: supR3HardenedDllNotificationCallback: load 00007ff9c9430000 LB 0x00041000 C:\WINDOWS\system32\icm32.dll [fFlags=0x0]
26561ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\icm32.dll
26571ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9430000 'C:\WINDOWS\system32\icm32.dll'
26581ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: 'C:\WINDOWS\system32\comctl32.dll' -> 'C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll' [redir]
26591ce8.1ef0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll
26601ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll (Input=C:\WINDOWS\system32\comctl32.dll, rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26611ce8.1ef0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc710000 'C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll'
26621ce8.1748: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll
26631ce8.1748: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\avrt.dll (Input=avrt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26641ce8.1748: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d9e80000 'C:\WINDOWS\system32\avrt.dll'
26651ce8.dcc: supR3HardenedDllNotificationCallback: Unload 00007ff9cda80000 LB 0x00079000 C:\Windows\System32\netcfgx.dll [flags=0x0]

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy