VirtualBox

Ticket #13453: VBoxStartup.log

File VBoxStartup.log, 449.5 KB (added by dennis dennis, 10 years ago)
Line 
119d0.19d8: Log file opened: 4.3.16r95972 g_hStartupLog=0000000000000010 g_uNtVerCombined=0x63258000
219d0.19d8: Calling main()
319d0.19d8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
419d0.19d8: SUPR3HardenedMain: Respawn #1
519d0.19d8: System32: \Device\HarddiskVolume3\Windows\System32
619d0.19d8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
719d0.19d8: ProgDir: \Device\HarddiskVolume3\Program Files
819d0.19d8: ComDir: \Device\HarddiskVolume3\Program Files\Common Files
919d0.19d8: ProgDir32: \Device\HarddiskVolume3\Program Files (x86)
1019d0.19d8: ComDir32: \Device\HarddiskVolume3\Program Files (x86)\Common Files
1119d0.19d8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1219d0.19d8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1319d0.19d8: supR3HardNtEnableThreadCreation:
1419d0.19d8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff90d919c5c pvNtTerminateThread=00007ff90d941ba0
1519d0.19d8: supR3HardenedWinDoReSpawn(1): New child 1bb0.1900 [kernel32].
1619d0.19d8: supR3HardenedWinPurifyChild: PebBaseAddress=00007ff6a12ab000 cbPeb=0x388
1719d0.19d8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff90d8b0000 uNtDllChildAddr=00007ff90d8b0000
1819d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: uLdrInitThunk=00007ff90d919c5c uNtTerminateThread=00007ff90d941ba0
1919d0.19d8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff90d919c5c pvNtTerminateThread=00007ff90d941ba0
2019d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: mapping view of ntdll.dll[2nd]
2119d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: ntdll.dll[2nd] mapped at 0000000000690000 LB 0x1a6000
2219d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: mapping view of kernel32.dll
2319d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: kernel32.dll mapped at 00007ff90d750000 LB 0x13a000
2419d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: mapping view of KernelBase.dll
2519d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: KernelBase.dll mapped at 00007ff90ad00000 LB 0x10f000
2619d0.19d8: supR3HardNtPuChTriggerInitialImageEvents: Startup delay kludge #1: 16 ms
2719d0.19d8: supR3HardNtEnableThreadCreation:
2819d0.19d8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2919d0.19d8: *0000000000000000-ffffffffffabffff 0x0001/0x0000 0x0000000
3019d0.19d8: *0000000000540000-000000000051ffff 0x0004/0x0004 0x0020000
3119d0.19d8: *0000000000560000-0000000000550fff 0x0002/0x0002 0x0040000
3219d0.19d8: 000000000056f000-000000000056dfff 0x0001/0x0000 0x0000000
3319d0.19d8: *0000000000570000-0000000000473fff 0x0000/0x0004 0x0020000
3419d0.19d8: 000000000066c000-0000000000668fff 0x0104/0x0004 0x0020000
3519d0.19d8: 000000000066f000-000000000066dfff 0x0004/0x0004 0x0020000
3619d0.19d8: *0000000000670000-000000000066bfff 0x0002/0x0002 0x0040000
3719d0.19d8: 0000000000674000-0000000000667fff 0x0001/0x0000 0x0000000
3819d0.19d8: *0000000000680000-000000000067dfff 0x0004/0x0004 0x0020000
3919d0.19d8: 0000000000682000-ffffffff80d23fff 0x0001/0x0000 0x0000000
4019d0.19d8: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
4119d0.19d8: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
4219d0.19d8: 000000007fff0000-ffff800a5ed6ffff 0x0001/0x0000 0x0000000
4319d0.19d8: *00007ff6a1270000-00007ff6a123cfff 0x0002/0x0002 0x0040000
4419d0.19d8: 00007ff6a12a3000-00007ff6a129afff 0x0001/0x0000 0x0000000
4519d0.19d8: *00007ff6a12ab000-00007ff6a12a9fff 0x0004/0x0004 0x0020000
4619d0.19d8: 00007ff6a12ac000-00007ff6a12a9fff 0x0001/0x0000 0x0000000
4719d0.19d8: *00007ff6a12ae000-00007ff6a12abfff 0x0004/0x0004 0x0020000
4819d0.19d8: 00007ff6a12b0000-00007ff6a06effff 0x0001/0x0000 0x0000000
4919d0.19d8: *00007ff6a1e70000-00007ff6a1e6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
5019d0.19d8: 00007ff6a1e71000-00007ff6a1df1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
5119d0.19d8: 00007ff6a1ef0000-00007ff6a1eeefff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
5219d0.19d8: 00007ff6a1ef1000-00007ff6a1eb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
5319d0.19d8: 00007ff6a1f28000-00007ff6a1f1efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
5419d0.19d8: 00007ff6a1f31000-00007ff6a1ef7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
5519d0.19d8: 00007ff6a1f6a000-00007ff436623fff 0x0001/0x0000 0x0000000
5619d0.19d8: *00007ff90d8b0000-00007ff90d8aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
5719d0.19d8: 00007ff90d8b1000-00007ff90d78bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
5819d0.19d8: 00007ff90d9d6000-00007ff90d9ccfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
5919d0.19d8: 00007ff90d9df000-00007ff90d9d1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
6019d0.19d8: 00007ff90d9ec000-00007ff90d9eafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
6119d0.19d8: 00007ff90d9ed000-00007ff90d9ebfff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
6219d0.19d8: 00007ff90d9ee000-00007ff90d985fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
6319d0.19d8: 00007ff90da56000-00007ff21b4cbfff 0x0001/0x0000 0x0000000
6419d0.19d8: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
6519d0.19d8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
6619d0.19d8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
671bb0.1900: Log file opened: 4.3.16r95972 g_hStartupLog=0000000000000010 g_uNtVerCombined=0x63258000
681bb0.1900: Calling main()
691bb0.1900: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
701bb0.1900: System32: \Device\HarddiskVolume3\Windows\System32
711bb0.1900: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
721bb0.1900: ProgDir: \Device\HarddiskVolume3\Program Files
731bb0.1900: ComDir: \Device\HarddiskVolume3\Program Files\Common Files
741bb0.1900: ProgDir32: \Device\HarddiskVolume3\Program Files (x86)
751bb0.1900: ComDir32: \Device\HarddiskVolume3\Program Files (x86)\Common Files
761bb0.1900: supR3HardenedWinInit: Startup delay kludge #2/0: 94 ms, 11 sleeps
771bb0.1900: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
781bb0.1900: *0000000000000000-ffffffffffabffff 0x0001/0x0000 0x0000000
791bb0.1900: *0000000000540000-000000000052ffff 0x0004/0x0004 0x0040000
801bb0.1900: 0000000000550000-000000000053ffff 0x0001/0x0000 0x0000000
811bb0.1900: *0000000000560000-0000000000550fff 0x0002/0x0002 0x0040000
821bb0.1900: 000000000056f000-000000000056dfff 0x0001/0x0000 0x0000000
831bb0.1900: *0000000000570000-0000000000475fff 0x0000/0x0004 0x0020000
841bb0.1900: 000000000066a000-0000000000666fff 0x0104/0x0004 0x0020000
851bb0.1900: 000000000066d000-0000000000669fff 0x0004/0x0004 0x0020000
861bb0.1900: *0000000000670000-000000000066bfff 0x0002/0x0002 0x0040000
871bb0.1900: 0000000000674000-0000000000667fff 0x0001/0x0000 0x0000000
881bb0.1900: *0000000000680000-000000000067dfff 0x0004/0x0004 0x0020000
891bb0.1900: 0000000000682000-0000000000673fff 0x0001/0x0000 0x0000000
901bb0.1900: *0000000000690000-0000000000611fff 0x0002/0x0002 0x0040000
911bb0.1900: 000000000070e000-000000000070bfff 0x0001/0x0000 0x0000000
921bb0.1900: *0000000000710000-000000000070dfff 0x0004/0x0004 0x0020000
931bb0.1900: 0000000000712000-00000000006f9fff 0x0000/0x0004 0x0020000
941bb0.1900: 000000000072a000-00000000006a3fff 0x0001/0x0000 0x0000000
951bb0.1900: *00000000007b0000-0000000000781fff 0x0004/0x0004 0x0020000
961bb0.1900: 00000000007de000-000000000070bfff 0x0000/0x0004 0x0020000
971bb0.1900: *00000000008b0000-00000000008a3fff 0x0000/0x0004 0x0020000
981bb0.1900: 00000000008bc000-0000000000714fff 0x0004/0x0004 0x0020000
991bb0.1900: 0000000000a63000-0000000000a61fff 0x0000/0x0004 0x0020000
1001bb0.1900: 0000000000a64000-ffffffff814e7fff 0x0001/0x0000 0x0000000
1011bb0.1900: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
1021bb0.1900: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
1031bb0.1900: 000000007fff0000-ffff800a5ee6ffff 0x0001/0x0000 0x0000000
1041bb0.1900: *00007ff6a1170000-00007ff6a116afff 0x0002/0x0002 0x0040000
1051bb0.1900: 00007ff6a1175000-00007ff6a1079fff 0x0000/0x0002 0x0040000
1061bb0.1900: *00007ff6a1270000-00007ff6a123cfff 0x0002/0x0002 0x0040000
1071bb0.1900: 00007ff6a12a3000-00007ff6a129afff 0x0001/0x0000 0x0000000
1081bb0.1900: *00007ff6a12ab000-00007ff6a12a9fff 0x0004/0x0004 0x0020000
1091bb0.1900: 00007ff6a12ac000-00007ff6a12a9fff 0x0001/0x0000 0x0000000
1101bb0.1900: *00007ff6a12ae000-00007ff6a12abfff 0x0004/0x0004 0x0020000
1111bb0.1900: 00007ff6a12b0000-00007ff6a06effff 0x0001/0x0000 0x0000000
1121bb0.1900: *00007ff6a1e70000-00007ff6a1e6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1131bb0.1900: 00007ff6a1e71000-00007ff6a1df1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1141bb0.1900: 00007ff6a1ef0000-00007ff6a1eeefff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1151bb0.1900: 00007ff6a1ef1000-00007ff6a1eb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1161bb0.1900: 00007ff6a1f28000-00007ff6a1f1efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1171bb0.1900: 00007ff6a1f31000-00007ff6a1ef7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1181bb0.1900: 00007ff6a1f6a000-00007ff4391d3fff 0x0001/0x0000 0x0000000
1191bb0.1900: *00007ff90ad00000-00007ff90acfefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1201bb0.1900: 00007ff90ad01000-00007ff90ac13fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1211bb0.1900: 00007ff90adee000-00007ff90adeafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1221bb0.1900: 00007ff90adf1000-00007ff90adeffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1231bb0.1900: 00007ff90adf2000-00007ff90add4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1241bb0.1900: 00007ff90ae0f000-00007ff9084cdfff 0x0001/0x0000 0x0000000
1251bb0.1900: *00007ff90d750000-00007ff90d74efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1261bb0.1900: 00007ff90d751000-00007ff90d63dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1271bb0.1900: 00007ff90d864000-00007ff90d862fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1281bb0.1900: 00007ff90d865000-00007ff90d863fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1291bb0.1900: 00007ff90d866000-00007ff90d841fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1301bb0.1900: 00007ff90d88a000-00007ff90d863fff 0x0001/0x0000 0x0000000
1311bb0.1900: *00007ff90d8b0000-00007ff90d8aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1321bb0.1900: 00007ff90d8b1000-00007ff90d78bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1331bb0.1900: 00007ff90d9d6000-00007ff90d9ccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1341bb0.1900: 00007ff90d9df000-00007ff90d9d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1351bb0.1900: 00007ff90d9ed000-00007ff90d9ebfff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1361bb0.1900: 00007ff90d9ee000-00007ff90d985fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1371bb0.1900: 00007ff90da56000-00007ff21b4cbfff 0x0001/0x0000 0x0000000
1381bb0.1900: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
1391bb0.1900: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1401bb0.1900: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1411bb0.1900: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1421bb0.1900: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1431bb0.1900: supHardNtVpScanVirtualMemory: enmKind=VERIFY_ONLY
1441bb0.1900: *0000000000000000-ffffffffffabffff 0x0001/0x0000 0x0000000
1451bb0.1900: *0000000000540000-000000000052ffff 0x0004/0x0004 0x0040000
1461bb0.1900: 0000000000550000-000000000053ffff 0x0001/0x0000 0x0000000
1471bb0.1900: *0000000000560000-0000000000550fff 0x0002/0x0002 0x0040000
1481bb0.1900: 000000000056f000-000000000056dfff 0x0001/0x0000 0x0000000
1491bb0.1900: *0000000000570000-0000000000476fff 0x0000/0x0004 0x0020000
1501bb0.1900: 0000000000669000-0000000000665fff 0x0104/0x0004 0x0020000
1511bb0.1900: 000000000066c000-0000000000667fff 0x0004/0x0004 0x0020000
1521bb0.1900: *0000000000670000-000000000066bfff 0x0002/0x0002 0x0040000
1531bb0.1900: 0000000000674000-0000000000667fff 0x0001/0x0000 0x0000000
1541bb0.1900: *0000000000680000-000000000067dfff 0x0004/0x0004 0x0020000
1551bb0.1900: 0000000000682000-0000000000673fff 0x0001/0x0000 0x0000000
1561bb0.1900: *0000000000690000-0000000000611fff 0x0002/0x0002 0x0040000
1571bb0.1900: 000000000070e000-000000000070bfff 0x0001/0x0000 0x0000000
1581bb0.1900: *0000000000710000-000000000070dfff 0x0004/0x0004 0x0020000
1591bb0.1900: 0000000000712000-00000000006f9fff 0x0000/0x0004 0x0020000
1601bb0.1900: 000000000072a000-00000000006a3fff 0x0001/0x0000 0x0000000
1611bb0.1900: *00000000007b0000-0000000000774fff 0x0004/0x0004 0x0020000
1621bb0.1900: 00000000007eb000-00000000007e9fff 0x0000/0x0004 0x0020000
1631bb0.1900: 00000000007ec000-00000000007e3fff 0x0004/0x0004 0x0020000
1641bb0.1900: 00000000007f4000-00000000007e3fff 0x0000/0x0004 0x0020000
1651bb0.1900: 0000000000804000-00000000007f0fff 0x0004/0x0004 0x0020000
1661bb0.1900: 0000000000817000-000000000077dfff 0x0000/0x0004 0x0020000
1671bb0.1900: *00000000008b0000-00000000008a3fff 0x0000/0x0004 0x0020000
1681bb0.1900: 00000000008bc000-0000000000714fff 0x0004/0x0004 0x0020000
1691bb0.1900: 0000000000a63000-0000000000a61fff 0x0000/0x0004 0x0020000
1701bb0.1900: 0000000000a64000-0000000000a57fff 0x0001/0x0000 0x0000000
1711bb0.1900: *0000000000a70000-0000000000970fff 0x0004/0x0004 0x0020000
1721bb0.1900: 0000000000b6f000-0000000000b6dfff 0x0000/0x0004 0x0020000
1731bb0.1900: *0000000000b70000-0000000000b64fff 0x0000/0x0004 0x0020000
1741bb0.1900: 0000000000b7b000-0000000000a3ffff 0x0004/0x0004 0x0020000
1751bb0.1900: 0000000000cb6000-0000000000cb4fff 0x0000/0x0004 0x0020000
1761bb0.1900: 0000000000cb7000-0000000000cadfff 0x0001/0x0000 0x0000000
1771bb0.1900: *0000000000cc0000-0000000000cb6fff 0x0000/0x0004 0x0020000
1781bb0.1900: 0000000000cc9000-0000000000bb8fff 0x0004/0x0004 0x0020000
1791bb0.1900: 0000000000dd9000-0000000000dd7fff 0x0000/0x0004 0x0020000
1801bb0.1900: 0000000000dda000-0000000000dd3fff 0x0001/0x0000 0x0000000
1811bb0.1900: *0000000000de0000-0000000000dd9fff 0x0000/0x0004 0x0020000
1821bb0.1900: 0000000000de6000-0000000000cd5fff 0x0004/0x0004 0x0020000
1831bb0.1900: 0000000000ef6000-0000000000ef4fff 0x0000/0x0004 0x0020000
1841bb0.1900: 0000000000ef7000-ffffffff81e0dfff 0x0001/0x0000 0x0000000
1851bb0.1900: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
1861bb0.1900: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
1871bb0.1900: 000000007fff0000-ffff800a5ee6ffff 0x0001/0x0000 0x0000000
1881bb0.1900: *00007ff6a1170000-00007ff6a116afff 0x0002/0x0002 0x0040000
1891bb0.1900: 00007ff6a1175000-00007ff6a1079fff 0x0000/0x0002 0x0040000
1901bb0.1900: *00007ff6a1270000-00007ff6a123cfff 0x0002/0x0002 0x0040000
1911bb0.1900: 00007ff6a12a3000-00007ff6a129afff 0x0001/0x0000 0x0000000
1921bb0.1900: *00007ff6a12ab000-00007ff6a12a9fff 0x0004/0x0004 0x0020000
1931bb0.1900: 00007ff6a12ac000-00007ff6a12a9fff 0x0001/0x0000 0x0000000
1941bb0.1900: *00007ff6a12ae000-00007ff6a12abfff 0x0004/0x0004 0x0020000
1951bb0.1900: 00007ff6a12b0000-00007ff6a06effff 0x0001/0x0000 0x0000000
1961bb0.1900: *00007ff6a1e70000-00007ff6a1e6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1971bb0.1900: 00007ff6a1e71000-00007ff6a1df0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1981bb0.1900: 00007ff6a1ef1000-00007ff6a1eb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1991bb0.1900: 00007ff6a1f28000-00007ff6a1f1efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2001bb0.1900: 00007ff6a1f31000-00007ff6a1ef7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2011bb0.1900: 00007ff6a1f6a000-00007ff4391d3fff 0x0001/0x0000 0x0000000
2021bb0.1900: *00007ff90ad00000-00007ff90acfefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2031bb0.1900: 00007ff90ad01000-00007ff90ac13fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2041bb0.1900: 00007ff90adee000-00007ff90adeafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2051bb0.1900: 00007ff90adf1000-00007ff90adeffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2061bb0.1900: 00007ff90adf2000-00007ff90add4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2071bb0.1900: 00007ff90ae0f000-00007ff9084cdfff 0x0001/0x0000 0x0000000
2081bb0.1900: *00007ff90d750000-00007ff90d74efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2091bb0.1900: 00007ff90d751000-00007ff90d63dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2101bb0.1900: 00007ff90d864000-00007ff90d862fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2111bb0.1900: 00007ff90d865000-00007ff90d863fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2121bb0.1900: 00007ff90d866000-00007ff90d841fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2131bb0.1900: 00007ff90d88a000-00007ff90d873fff 0x0001/0x0000 0x0000000
2141bb0.1900: *00007ff90d8a0000-00007ff90d89efff 0x0004/0x0004 0x0020000
2151bb0.1900: 00007ff90d8a1000-00007ff90d891fff 0x0001/0x0000 0x0000000
2161bb0.1900: *00007ff90d8b0000-00007ff90d8aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2171bb0.1900: 00007ff90d8b1000-00007ff90d78bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2181bb0.1900: 00007ff90d9d6000-00007ff90d9ccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2191bb0.1900: 00007ff90d9df000-00007ff90d9d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2201bb0.1900: 00007ff90d9ed000-00007ff90d9ebfff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2211bb0.1900: 00007ff90d9ee000-00007ff90d985fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2221bb0.1900: 00007ff90da56000-00007ff21b4cbfff 0x0001/0x0000 0x0000000
2231bb0.1900: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
2241bb0.1900: SUPR3HardenedMain: Respawn #2
2251bb0.1900: supR3HardNtEnableThreadCreation:
2261bb0.1900: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff90d919c5c pvNtTerminateThread=00007ff90d941ba0
2271bb0.1900: supR3HardenedWinDoReSpawn(2): New child 1a18.fa0 [kernel32].
2281bb0.1900: supR3HardenedWinPurifyChild: PebBaseAddress=00007ff6a1397000 cbPeb=0x388
2291bb0.1900: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff90d8b0000 uNtDllChildAddr=00007ff90d8b0000
2301bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: uLdrInitThunk=00007ff90d919c5c uNtTerminateThread=00007ff90d941ba0
2311bb0.1900: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff90d919c5c pvNtTerminateThread=00007ff90d941ba0
2321bb0.1900: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
2331bb0.1900: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
2341bb0.1900: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2351bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: mapping view of ntdll.dll[2nd]
2361bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: ntdll.dll[2nd] mapped at 0000000000a40000 LB 0x1a6000
2371bb0.1900: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
2381bb0.1900: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2391bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: mapping view of kernel32.dll
2401bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: kernel32.dll mapped at 00007ff90d750000 LB 0x13a000
2411bb0.1900: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
2421bb0.1900: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2431bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: mapping view of KernelBase.dll
2441bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: KernelBase.dll mapped at 00007ff90ad00000 LB 0x10f000
2451bb0.1900: supR3HardNtPuChTriggerInitialImageEvents: Startup delay kludge #1: 16 ms
2461bb0.1900: supR3HardNtEnableThreadCreation:
2471bb0.1900: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2481bb0.1900: *0000000000000000-ffffffffff70ffff 0x0001/0x0000 0x0000000
2491bb0.1900: *00000000008f0000-00000000008cffff 0x0004/0x0004 0x0020000
2501bb0.1900: *0000000000910000-0000000000900fff 0x0002/0x0002 0x0040000
2511bb0.1900: 000000000091f000-000000000091dfff 0x0001/0x0000 0x0000000
2521bb0.1900: *0000000000920000-0000000000823fff 0x0000/0x0004 0x0020000
2531bb0.1900: 0000000000a1c000-0000000000a18fff 0x0104/0x0004 0x0020000
2541bb0.1900: 0000000000a1f000-0000000000a1dfff 0x0004/0x0004 0x0020000
2551bb0.1900: *0000000000a20000-0000000000a1bfff 0x0002/0x0002 0x0040000
2561bb0.1900: 0000000000a24000-0000000000a17fff 0x0001/0x0000 0x0000000
2571bb0.1900: *0000000000a30000-0000000000a2dfff 0x0004/0x0004 0x0020000
2581bb0.1900: 0000000000a32000-ffffffff81483fff 0x0001/0x0000 0x0000000
2591bb0.1900: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
2601bb0.1900: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
2611bb0.1900: 000000007fff0000-ffff800a5ec7ffff 0x0001/0x0000 0x0000000
2621bb0.1900: *00007ff6a1360000-00007ff6a132cfff 0x0002/0x0002 0x0040000
2631bb0.1900: 00007ff6a1393000-00007ff6a138efff 0x0001/0x0000 0x0000000
2641bb0.1900: *00007ff6a1397000-00007ff6a1395fff 0x0004/0x0004 0x0020000
2651bb0.1900: 00007ff6a1398000-00007ff6a1391fff 0x0001/0x0000 0x0000000
2661bb0.1900: *00007ff6a139e000-00007ff6a139bfff 0x0004/0x0004 0x0020000
2671bb0.1900: 00007ff6a13a0000-00007ff6a08cffff 0x0001/0x0000 0x0000000
2681bb0.1900: *00007ff6a1e70000-00007ff6a1e6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2691bb0.1900: 00007ff6a1e71000-00007ff6a1df1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2701bb0.1900: 00007ff6a1ef0000-00007ff6a1eeefff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2711bb0.1900: 00007ff6a1ef1000-00007ff6a1eb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2721bb0.1900: 00007ff6a1f28000-00007ff6a1f1efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2731bb0.1900: 00007ff6a1f31000-00007ff6a1ef7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2741bb0.1900: 00007ff6a1f6a000-00007ff436623fff 0x0001/0x0000 0x0000000
2751bb0.1900: *00007ff90d8b0000-00007ff90d8aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2761bb0.1900: 00007ff90d8b1000-00007ff90d78bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2771bb0.1900: 00007ff90d9d6000-00007ff90d9ccfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2781bb0.1900: 00007ff90d9df000-00007ff90d9d1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2791bb0.1900: 00007ff90d9ec000-00007ff90d9eafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2801bb0.1900: 00007ff90d9ed000-00007ff90d9ebfff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2811bb0.1900: 00007ff90d9ee000-00007ff90d985fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2821bb0.1900: 00007ff90da56000-00007ff21b4cbfff 0x0001/0x0000 0x0000000
2831bb0.1900: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
2841a18.fa0: Log file opened: 4.3.16r95972 g_hStartupLog=0000000000000010 g_uNtVerCombined=0x63258000
2851a18.fa0: Calling main()
2861a18.fa0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2871a18.fa0: System32: \Device\HarddiskVolume3\Windows\System32
2881a18.fa0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
2891a18.fa0: ProgDir: \Device\HarddiskVolume3\Program Files
2901a18.fa0: ComDir: \Device\HarddiskVolume3\Program Files\Common Files
2911a18.fa0: ProgDir32: \Device\HarddiskVolume3\Program Files (x86)
2921a18.fa0: ComDir32: \Device\HarddiskVolume3\Program Files (x86)\Common Files
2931a18.fa0: supR3HardenedWinInit: Startup delay kludge #2/0: 94 ms, 12 sleeps
2941a18.fa0: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
2951a18.fa0: *0000000000000000-ffffffffff70ffff 0x0001/0x0000 0x0000000
2961a18.fa0: *00000000008f0000-00000000008dffff 0x0004/0x0004 0x0040000
2971a18.fa0: 0000000000900000-00000000008effff 0x0001/0x0000 0x0000000
2981a18.fa0: *0000000000910000-0000000000900fff 0x0002/0x0002 0x0040000
2991a18.fa0: 000000000091f000-000000000091dfff 0x0001/0x0000 0x0000000
3001a18.fa0: *0000000000920000-0000000000824fff 0x0000/0x0004 0x0020000
3011a18.fa0: 0000000000a1b000-0000000000a17fff 0x0104/0x0004 0x0020000
3021a18.fa0: 0000000000a1e000-0000000000a1bfff 0x0004/0x0004 0x0020000
3031a18.fa0: *0000000000a20000-0000000000a1bfff 0x0002/0x0002 0x0040000
3041a18.fa0: 0000000000a24000-0000000000a17fff 0x0001/0x0000 0x0000000
3051a18.fa0: *0000000000a30000-0000000000a2dfff 0x0004/0x0004 0x0020000
3061a18.fa0: 0000000000a32000-0000000000a23fff 0x0001/0x0000 0x0000000
3071a18.fa0: *0000000000a40000-00000000009c1fff 0x0002/0x0002 0x0040000
3081a18.fa0: 0000000000abe000-0000000000abbfff 0x0001/0x0000 0x0000000
3091a18.fa0: *0000000000ac0000-0000000000abdfff 0x0004/0x0004 0x0020000
3101a18.fa0: 0000000000ac2000-0000000000aa9fff 0x0000/0x0004 0x0020000
3111a18.fa0: 0000000000ada000-00000000009a3fff 0x0001/0x0000 0x0000000
3121a18.fa0: *0000000000c10000-0000000000be1fff 0x0004/0x0004 0x0020000
3131a18.fa0: 0000000000c3e000-0000000000b6bfff 0x0000/0x0004 0x0020000
3141a18.fa0: *0000000000d10000-0000000000d0bfff 0x0000/0x0004 0x0020000
3151a18.fa0: 0000000000d14000-0000000000b6cfff 0x0004/0x0004 0x0020000
3161a18.fa0: 0000000000ebb000-0000000000eb9fff 0x0000/0x0004 0x0020000
3171a18.fa0: 0000000000ebc000-ffffffff81d97fff 0x0001/0x0000 0x0000000
3181a18.fa0: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
3191a18.fa0: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
3201a18.fa0: 000000007fff0000-ffff800a5ed7ffff 0x0001/0x0000 0x0000000
3211a18.fa0: *00007ff6a1260000-00007ff6a125afff 0x0002/0x0002 0x0040000
3221a18.fa0: 00007ff6a1265000-00007ff6a1169fff 0x0000/0x0002 0x0040000
3231a18.fa0: *00007ff6a1360000-00007ff6a132cfff 0x0002/0x0002 0x0040000
3241a18.fa0: 00007ff6a1393000-00007ff6a138efff 0x0001/0x0000 0x0000000
3251a18.fa0: *00007ff6a1397000-00007ff6a1395fff 0x0004/0x0004 0x0020000
3261a18.fa0: 00007ff6a1398000-00007ff6a1391fff 0x0001/0x0000 0x0000000
3271a18.fa0: *00007ff6a139e000-00007ff6a139bfff 0x0004/0x0004 0x0020000
3281a18.fa0: 00007ff6a13a0000-00007ff6a08cffff 0x0001/0x0000 0x0000000
3291a18.fa0: *00007ff6a1e70000-00007ff6a1e6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3301a18.fa0: 00007ff6a1e71000-00007ff6a1df1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3311a18.fa0: 00007ff6a1ef0000-00007ff6a1eeefff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3321a18.fa0: 00007ff6a1ef1000-00007ff6a1eb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3331a18.fa0: 00007ff6a1f28000-00007ff6a1f1efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3341a18.fa0: 00007ff6a1f31000-00007ff6a1ef7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3351a18.fa0: 00007ff6a1f6a000-00007ff4391d3fff 0x0001/0x0000 0x0000000
3361a18.fa0: *00007ff90ad00000-00007ff90acfefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
3371a18.fa0: 00007ff90ad01000-00007ff90ac13fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
3381a18.fa0: 00007ff90adee000-00007ff90adeafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
3391a18.fa0: 00007ff90adf1000-00007ff90adeffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
3401a18.fa0: 00007ff90adf2000-00007ff90add4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
3411a18.fa0: 00007ff90ae0f000-00007ff9084cdfff 0x0001/0x0000 0x0000000
3421a18.fa0: *00007ff90d750000-00007ff90d74efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3431a18.fa0: 00007ff90d751000-00007ff90d63dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3441a18.fa0: 00007ff90d864000-00007ff90d862fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3451a18.fa0: 00007ff90d865000-00007ff90d863fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3461a18.fa0: 00007ff90d866000-00007ff90d841fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3471a18.fa0: 00007ff90d88a000-00007ff90d863fff 0x0001/0x0000 0x0000000
3481a18.fa0: *00007ff90d8b0000-00007ff90d8aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3491a18.fa0: 00007ff90d8b1000-00007ff90d78bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3501a18.fa0: 00007ff90d9d6000-00007ff90d9ccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3511a18.fa0: 00007ff90d9df000-00007ff90d9d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3521a18.fa0: 00007ff90d9ed000-00007ff90d9ebfff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3531a18.fa0: 00007ff90d9ee000-00007ff90d985fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3541a18.fa0: 00007ff90da56000-00007ff21b4cbfff 0x0001/0x0000 0x0000000
3551a18.fa0: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
3561a18.fa0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3571a18.fa0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
3581a18.fa0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3591a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3601a18.fa0: supHardNtVpScanVirtualMemory: enmKind=VERIFY_ONLY
3611a18.fa0: *0000000000000000-ffffffffff70ffff 0x0001/0x0000 0x0000000
3621a18.fa0: *00000000008f0000-00000000008dffff 0x0004/0x0004 0x0040000
3631a18.fa0: 0000000000900000-00000000008effff 0x0001/0x0000 0x0000000
3641a18.fa0: *0000000000910000-0000000000900fff 0x0002/0x0002 0x0040000
3651a18.fa0: 000000000091f000-000000000091dfff 0x0001/0x0000 0x0000000
3661a18.fa0: *0000000000920000-0000000000826fff 0x0000/0x0004 0x0020000
3671a18.fa0: 0000000000a19000-0000000000a15fff 0x0104/0x0004 0x0020000
3681a18.fa0: 0000000000a1c000-0000000000a17fff 0x0004/0x0004 0x0020000
3691a18.fa0: *0000000000a20000-0000000000a1bfff 0x0002/0x0002 0x0040000
3701a18.fa0: 0000000000a24000-0000000000a17fff 0x0001/0x0000 0x0000000
3711a18.fa0: *0000000000a30000-0000000000a2dfff 0x0004/0x0004 0x0020000
3721a18.fa0: 0000000000a32000-0000000000a23fff 0x0001/0x0000 0x0000000
3731a18.fa0: *0000000000a40000-00000000009c1fff 0x0002/0x0002 0x0040000
3741a18.fa0: 0000000000abe000-0000000000abbfff 0x0001/0x0000 0x0000000
3751a18.fa0: *0000000000ac0000-0000000000abdfff 0x0004/0x0004 0x0020000
3761a18.fa0: 0000000000ac2000-0000000000aa9fff 0x0000/0x0004 0x0020000
3771a18.fa0: 0000000000ada000-0000000000ad3fff 0x0001/0x0000 0x0000000
3781a18.fa0: *0000000000ae0000-00000000009e0fff 0x0004/0x0004 0x0020000
3791a18.fa0: 0000000000bdf000-0000000000bddfff 0x0000/0x0004 0x0020000
3801a18.fa0: 0000000000be0000-0000000000baffff 0x0001/0x0000 0x0000000
3811a18.fa0: *0000000000c10000-0000000000bd4fff 0x0004/0x0004 0x0020000
3821a18.fa0: 0000000000c4b000-0000000000c49fff 0x0000/0x0004 0x0020000
3831a18.fa0: 0000000000c4c000-0000000000c43fff 0x0004/0x0004 0x0020000
3841a18.fa0: 0000000000c54000-0000000000c43fff 0x0000/0x0004 0x0020000
3851a18.fa0: 0000000000c64000-0000000000c50fff 0x0004/0x0004 0x0020000
3861a18.fa0: 0000000000c77000-0000000000bddfff 0x0000/0x0004 0x0020000
3871a18.fa0: *0000000000d10000-0000000000d0bfff 0x0000/0x0004 0x0020000
3881a18.fa0: 0000000000d14000-0000000000b6cfff 0x0004/0x0004 0x0020000
3891a18.fa0: 0000000000ebb000-0000000000eb9fff 0x0000/0x0004 0x0020000
3901a18.fa0: 0000000000ebc000-0000000000eb7fff 0x0001/0x0000 0x0000000
3911a18.fa0: *0000000000ec0000-0000000000eb9fff 0x0000/0x0004 0x0020000
3921a18.fa0: 0000000000ec6000-0000000000d8afff 0x0004/0x0004 0x0020000
3931a18.fa0: 0000000001001000-0000000000ffffff 0x0000/0x0004 0x0020000
3941a18.fa0: 0000000001002000-0000000000ff3fff 0x0001/0x0000 0x0000000
3951a18.fa0: *0000000001010000-0000000001009fff 0x0000/0x0004 0x0020000
3961a18.fa0: 0000000001016000-0000000000f05fff 0x0004/0x0004 0x0020000
3971a18.fa0: 0000000001126000-0000000001124fff 0x0000/0x0004 0x0020000
3981a18.fa0: 0000000001127000-000000000111dfff 0x0001/0x0000 0x0000000
3991a18.fa0: *0000000001130000-0000000001122fff 0x0000/0x0004 0x0020000
4001a18.fa0: 000000000113d000-000000000102cfff 0x0004/0x0004 0x0020000
4011a18.fa0: 000000000124d000-000000000124bfff 0x0000/0x0004 0x0020000
4021a18.fa0: 000000000124e000-ffffffff824bbfff 0x0001/0x0000 0x0000000
4031a18.fa0: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
4041a18.fa0: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
4051a18.fa0: 000000007fff0000-ffff800a5ed7ffff 0x0001/0x0000 0x0000000
4061a18.fa0: *00007ff6a1260000-00007ff6a125afff 0x0002/0x0002 0x0040000
4071a18.fa0: 00007ff6a1265000-00007ff6a1169fff 0x0000/0x0002 0x0040000
4081a18.fa0: *00007ff6a1360000-00007ff6a132cfff 0x0002/0x0002 0x0040000
4091a18.fa0: 00007ff6a1393000-00007ff6a138efff 0x0001/0x0000 0x0000000
4101a18.fa0: *00007ff6a1397000-00007ff6a1395fff 0x0004/0x0004 0x0020000
4111a18.fa0: 00007ff6a1398000-00007ff6a1391fff 0x0001/0x0000 0x0000000
4121a18.fa0: *00007ff6a139e000-00007ff6a139bfff 0x0004/0x0004 0x0020000
4131a18.fa0: 00007ff6a13a0000-00007ff6a08cffff 0x0001/0x0000 0x0000000
4141a18.fa0: *00007ff6a1e70000-00007ff6a1e6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
4151a18.fa0: 00007ff6a1e71000-00007ff6a1df0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
4161a18.fa0: 00007ff6a1ef1000-00007ff6a1eb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
4171a18.fa0: 00007ff6a1f28000-00007ff6a1f1efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
4181a18.fa0: 00007ff6a1f31000-00007ff6a1ef7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
4191a18.fa0: 00007ff6a1f6a000-00007ff4391d3fff 0x0001/0x0000 0x0000000
4201a18.fa0: *00007ff90ad00000-00007ff90acfefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4211a18.fa0: 00007ff90ad01000-00007ff90ac13fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4221a18.fa0: 00007ff90adee000-00007ff90adeafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4231a18.fa0: 00007ff90adf1000-00007ff90adeffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4241a18.fa0: 00007ff90adf2000-00007ff90add4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4251a18.fa0: 00007ff90ae0f000-00007ff9084cdfff 0x0001/0x0000 0x0000000
4261a18.fa0: *00007ff90d750000-00007ff90d74efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4271a18.fa0: 00007ff90d751000-00007ff90d63dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4281a18.fa0: 00007ff90d864000-00007ff90d862fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4291a18.fa0: 00007ff90d865000-00007ff90d863fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4301a18.fa0: 00007ff90d866000-00007ff90d841fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4311a18.fa0: 00007ff90d88a000-00007ff90d873fff 0x0001/0x0000 0x0000000
4321a18.fa0: *00007ff90d8a0000-00007ff90d89efff 0x0004/0x0004 0x0020000
4331a18.fa0: 00007ff90d8a1000-00007ff90d891fff 0x0001/0x0000 0x0000000
4341a18.fa0: *00007ff90d8b0000-00007ff90d8aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4351a18.fa0: 00007ff90d8b1000-00007ff90d78bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4361a18.fa0: 00007ff90d9d6000-00007ff90d9ccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4371a18.fa0: 00007ff90d9df000-00007ff90d9d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4381a18.fa0: 00007ff90d9ed000-00007ff90d9ebfff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4391a18.fa0: 00007ff90d9ee000-00007ff90d985fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4401a18.fa0: 00007ff90da56000-00007ff21b4cbfff 0x0001/0x0000 0x0000000
4411a18.fa0: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
4421a18.fa0: SUPR3HardenedMain: Final process, opening VBoxDrv...
4431a18.fa0: supR3HardNtEnableThreadCreation:
4441a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags>
4451a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4461a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4471a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4481a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
4491a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4501a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fea10000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4511a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
4521a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4531a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fea10000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4541a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fea10000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4551a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags>
4561a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4571a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'crypt32.dll'.
4581a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'msasn1.dll'.
4591a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
4601a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
4611a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
4621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4631a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
4641a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
4651a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
4661a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4671a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
4681a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
4691a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
4701a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4711a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
4721a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4731a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'msasn1.dll'.
4741a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
4751a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
4761a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4771a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
4781a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
4791a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
4801a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
4821a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4831a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4841a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
4851a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4861a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4871a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\system32\Wintrust.dll'
4881a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
4891a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4901a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
4911a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
4921a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4931a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
4941a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
4951a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4961a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
4971a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
4981a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4991a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
5001a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5011a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5021a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
5031a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5041a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5051a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
5061a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
5091a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
5101a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
5111a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5121a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcrypt.dll'.
5131a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
5141a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
5151a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5161a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
5171a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
5181a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
5191a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5201a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5211a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
5221a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
5231a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
5241a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
5251a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
5261a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
5271a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=kernel32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5281a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'kernel32.dll' -> 'C:\Windows\system32\kernel32.dll' [rcNt=0xc0150008]
5291a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
5301a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
5311a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5321a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
5331a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5341a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d750000 'C:\Windows\system32\kernel32.dll'
5351a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5361a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5371a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
5381a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
5391a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5401a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\CRYPT32.dll'
5411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5421a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5431a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
5441a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'bcrypt.dll'.
5451a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ntasn1.dll'.
5461a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ncrypt.dll)
5471a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ncrypt.dll
5481a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntasn1.dll)
5491a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntasn1.dll
5501a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5511a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5521a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntasn1.dll'...
5531a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\ntasn1.dll'
5541a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntasn1.dll [lacks WinVerifyTrust]
5551a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5561a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
5571a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5581a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ab10000 'C:\Windows\system32\bcryptprimitives.dll'
5591a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
5601a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
5611a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
5621a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5631a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
5641a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
5651a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
5661a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
5671a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
5681a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=cryptnet.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
5691a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'cryptnet.dll' -> 'C:\Windows\system32\cryptnet.dll' [rcNt=0xc0150008]
5701a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5711a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'crypt32.dll'.
5721a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'wldap32.dll'.
5731a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
5741a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
5751a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
5761a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume3\Windows\System32\wldap32.dll'
5771a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5781a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\Wldap32.dll)
5791a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\Wldap32.dll
5801a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
5821a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5831a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5841a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
5851a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5861a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5871a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
5881a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5891a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5901a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
5911a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5921a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5931a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
5941a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5951a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5961a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
5971a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5981a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5991a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6001a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6011a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6021a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6031a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6041a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6061a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6071a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6081a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6091a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6101a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6111a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6121a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6131a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6141a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6151a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6161a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6171a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6181a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6191a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6201a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6211a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6221a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6231a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6241a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6251a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6261a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6271a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6281a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6291a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
6301a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6311a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\system32\cryptnet.dll'
6331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6341a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6351a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\System32\cryptnet.dll'
6361a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6371a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
6381a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'rpcrt4.dll'.
6391a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
6401a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
6411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6421a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6431a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6441a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
6451a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6461a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
6471a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
6481a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
6491a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6501a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
6511a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6521a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
6531a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6541a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
6551a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6561a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
6571a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
6581a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000b9b990
6591a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
6601a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7F4DBD57735AA8D272712E3B59634C9F87BD4711
6611a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=rpcrt4.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6621a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'rpcrt4.dll' -> 'C:\Windows\system32\rpcrt4.dll' [rcNt=0xc0150008]
6631a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6641a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b7f0000 'C:\Windows\system32\rpcrt4.dll'
6651a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6661a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6671a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6681a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6691a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6701a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6711a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6741a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6751a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6761a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6771a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6781a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6791a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6801a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6811a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6821a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
6861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6871a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
6891a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6901a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
6911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
6931a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB2984006~31bf3856ad364e35~amd64~~6.3.1.4.cat'; file='\SystemRoot\System32\ntdll.dll'
6941a18.fa0: g_pfnWinVerifyTrust=00007ff90b041040
6951a18.fa0: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
6961a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
6971a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6981a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
6991a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7001a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7011a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7021a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7031a18.fa0: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
7041a18.fa0: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7061a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7071a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7081a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7091a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7101a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7111a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7121a18.fa0: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
7131a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7141a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7151a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7171a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7181a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7191a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7201a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
7211a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000370 pwszName=\Device\HarddiskVolume3\Windows\System32\Wldap32.dll
7221a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
7231a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
7241a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A08496AE026B14E832621417F248DDCAECD22079
7251a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7261a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7271a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7281a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7291a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7301a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7311a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7321a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_76_for_KB2984006~31bf3856ad364e35~amd64~~6.3.1.4.cat'; file='\Device\HarddiskVolume3\Windows\System32\Wldap32.dll'
7331a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7341a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\Wldap32.dll'
7351a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000036c pwszName=\Device\HarddiskVolume3\Windows\System32\cryptnet.dll
7361a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
7371a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
7381a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0315578F0B76A9760FEA2715053C51E46A277B04
7391a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7401a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7411a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7421a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7431a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7441a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7451a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7461a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-DS-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
7471a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7481a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
7491a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7501a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7511a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7521a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7531a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7541a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7551a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7561a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
7571a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7581a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7591a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7601a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7611a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7621a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7631a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7641a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
7651a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7661a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7671a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7681a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7691a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7701a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7711a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7721a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
7731a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7741a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7751a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7761a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7771a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7781a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7791a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7801a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ntasn1.dll'
7811a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7821a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7831a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7841a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7851a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7861a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7871a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7881a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ncrypt.dll'
7891a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7901a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7911a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
7921a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7931a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
7941a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7951a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
7961a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
7971a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
7981a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7991a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8001a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8011a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8021a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8031a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8041a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
8051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8061a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8071a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8081a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8091a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8101a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8111a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8121a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
8131a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8141a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8151a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8171a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8181a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8191a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8201a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
8211a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8221a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8231a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8241a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8251a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8261a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8271a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8281a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
8291a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8301a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8311a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8321a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8331a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8341a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8351a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8361a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
8371a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8381a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8391a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8401a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8411a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8421a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8431a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8441a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
8451a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8461a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8471a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8481a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8491a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8501a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8511a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8521a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
8531a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8541a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8551a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8561a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8571a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
8581a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8591a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8601a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
8611a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
8621a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8631a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
8641a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8651a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags>
8661a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8671a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
8681a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8691a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8701a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8711a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8721a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8731a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8741a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x6e1ee6086d95d900 CN=Dennis5
8751a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8761a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8771a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x75a2ccecb8259a00 C=TW, O=Government Root Certification Authority
8781a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x91e3728b8b40d000 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority
8791a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8801a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
8811a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
8821a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x266e9b638ffac00 C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1
8831a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8841a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8851a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
8861a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
8871a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
8881a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
8891a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
8901a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xff3891b54348328 C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
8911a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
8921a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
8931a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
8941a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
8951a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
8961a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
8971a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8981a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
8991a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9001a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x6e2ba21058eedf00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC
9011a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
9021a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9031a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9041a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9051a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
9061a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x30669a4e82fa800 C=US, O=America Online Inc., CN=America Online Root Certification Authority 1
9071a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
9081a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x9259c8abe5ca713a L=ValiCert Validation Network, O=ValiCert, Inc., OU=ValiCert Class 2 Policy Validation Authority, CN=http://www.valicert.com/, Email=info@valicert.com
9091a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9101a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
9111a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9121a18.fa0: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9131a18.fa0: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=45
9141a18.fa0: SUPR3HardenedMain: Load Runtime...
9151a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags>
9161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9171a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9181a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
9191a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9201a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9211a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
9221a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
9231a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)WinVerifyTrust
9241a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9251a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9261a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
9271a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9281a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9291a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
9301a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9311a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
9331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9341a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
9351a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
9361a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
9371a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'nsi.dll'.
9381a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
9391a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)WinVerifyTrust
9401a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9411a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9421a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
9431a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9441a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9451a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9461a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
9471a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9481a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
9491a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
9501a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\nsi.dll'.
9511a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
9521a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
9531a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
9541a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9551a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)WinVerifyTrust
9561a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9571a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9581a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
9591a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9601a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9611a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
9631a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9641a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
9651a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
9661a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
9671a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)WinVerifyTrust
9681a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9691a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9701a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9711a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
9741a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
9751a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9761a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9771a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
9781a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9791a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
9801a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
9811a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
9821a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
9831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9871a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9891a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9901a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9911a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9921a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9931a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9941a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9951a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9961a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9971a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9981a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
9991a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10001a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10011a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10021a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10031a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10041a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10051a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10061a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10071a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10081a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10091a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10101a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10111a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10121a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10131a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10141a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10151a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10171a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10181a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10191a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10201a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10211a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10221a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10231a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10241a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10251a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10261a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10271a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10281a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10291a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10301a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10311a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10321a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10331a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10341a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10351a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10361a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10371a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10381a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10391a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10401a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10411a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10421a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10431a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10441a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10451a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10461a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10471a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10481a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10491a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10501a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10511a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10521a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10531a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10541a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10551a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10561a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10571a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10581a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10591a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10601a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10611a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10621a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10631a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10641a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10651a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10661a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10671a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10691a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10701a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10711a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10721a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10731a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10741a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10751a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10761a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10771a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10781a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10791a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dfdb0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10801a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags>
10811a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
10821a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\system32\Wintrust.dll'
10831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
10851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
10861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10871a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
10881a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
10891a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
10901a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
10921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
10931a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
10941a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
10951a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
10961a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
10971a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags>
10981a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
10991a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
11001a18.fa0: SUPR3HardenedMain: Load TrustedMain...
11011a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags>
11021a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
11031a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11041a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
11051a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11061a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
11071a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
11081a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
11091a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
11101a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtguivbox4.dll'.
11111a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtnetworkvbox4.dll'.
11121a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtopenglvbox4.dll'.
11131a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'user32.dll'.
11141a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'gdi32.dll'.
11151a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
11161a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
11171a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
11181a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
11191a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'comdlg32.dll'.
11201a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'winmm.dll'.
11211a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)WinVerifyTrust
11221a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
11231a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11241a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll'
11251a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
11261a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11271a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
11281a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
11291a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
11301a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
11311a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
11321a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
11331a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
11341a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'user32.dll'.
11351a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)WinVerifyTrust
11361a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
11371a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
11381a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll'
11391a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000430 pwszName=\Device\HarddiskVolume3\Windows\System32\comdlg32.dll
11401a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
11411a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
11421a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D07100D567670EB6C18EAD4F8F1561AE4F40E0A5
11431a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
11441a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11451a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11461a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
11471a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
11481a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'gdi32.dll'.
11491a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
11501a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
11511a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11521a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
11531a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
11541a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
11551a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'
11561a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
11571a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
11581a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'devobj.dll'.
11591a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
11601a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
11611a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
11621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll'
11631a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\devobj.dll'.
11641a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11651a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'cfgmgr32.dll'.
11661a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
11671a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
11681a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11691a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
11701a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
11711a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11721a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
11731a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
11741a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'user32.dll'.
11751a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
11761a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
11771a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11781a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
11791a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
11801a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
11811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
11821a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
11831a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
11841a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
11851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11861a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
11871a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
11881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
11891a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
11901a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
11911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
11921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
11931a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_546_for_KB2975719~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume3\Windows\System32\comdlg32.dll'
11941a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
11951a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11961a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
11971a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11981a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
11991a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
12001a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
12011a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)WinVerifyTrust
12021a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
12031a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12041a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
12051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
12061a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
12071a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12081a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
12091a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
12101a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12111a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'user32.dll'.
12121a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'shlwapi.dll'.
12131a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #59 'gdi32.dll'.
12141a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
12151a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
12161a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
12171a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll'
12181a18.fa0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\comctl32.dll'.
12191a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
12201a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
12211a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
12221a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
12231a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
12241a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12251a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
12261a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12271a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12281a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
12291a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12301a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
12311a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
12321a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
12331a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
12341a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
12351a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
12361a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
12371a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
12381a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12391a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
12401a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12411a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12421a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
12431a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12441a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12451a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
12461a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12471a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12481a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
12491a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12501a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12511a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
12521a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12531a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12541a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
12551a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12561a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12571a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
12581a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
12591a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12601a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
12611a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
12631a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
12641a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
12651a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12661a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
12671a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12681a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12691a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
12701a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12711a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
12721a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
12731a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
12741a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
12751a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
12761a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12771a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
12781a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
12791a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)WinVerifyTrust
12801a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
12811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
12831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
12841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
12851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12861a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
12871a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
12881a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12891a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
12901a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
12911a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12921a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
12931a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
12941a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
12951a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12961a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
12971a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12981a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12991a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
13001a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
13011a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13021a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
13031a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
13041a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
13051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13061a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
13071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
13081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
13091a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
13101a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
13111a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'gdi32.dll'.
13121a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
13131a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
13141a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)WinVerifyTrust
13151a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
13161a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13171a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
13181a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [redoing WinVerifyTrust]
13191a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13201a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
13211a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
13221a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
13231a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
13241a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13251a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
13261a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13271a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13281a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
13291a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13301a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13311a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
13321a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
13331a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13341a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
13351a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
13361a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
13371a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13381a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
13391a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
13401a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
13411a18.fa0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
13421a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13431a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
13441a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
13451a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13461a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
13471a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
13481a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13491a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
13501a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
13511a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13521a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
13531a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
13541a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
13551a18.fa0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
13561a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13571a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
13581a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
13591a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13601a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
13611a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
13621a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13631a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
13641a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
13651a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
13661a18.fa0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
13671a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
13681a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll'
13691a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13701a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
13711a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
13721a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
13731a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
13741a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
13751a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
13761a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
13771a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
13781a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)WinVerifyTrust
13791a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
13801a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
13811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll'
13821a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
13831a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
13841a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
13861a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13871a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
13881a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll'
13891a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll'.
13901a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13911a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
13921a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
13931a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
13941a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13951a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13961a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)
13971a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
13981a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
13991a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtguivbox4.dll'
14001a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll'.
14011a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14021a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
14031a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
14041a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
14051a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
14061a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
14071a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
14081a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
14091a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
14101a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
14111a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
14121a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
14131a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
14141a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)
14151a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
14161a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14171a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
14181a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
14191a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14201a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
14211a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
14221a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14231a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
14241a18.fa0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
14251a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14261a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
14271a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
14281a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
14291a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
14301a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
14311a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
14321a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
14331a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14341a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
14351a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
14361a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
14371a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume3\Windows\System32\ddraw.dll'
14381a18.fa0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\ddraw.dll'.
14391a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14401a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'user32.dll'.
14411a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'gdi32.dll'.
14421a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'dciman32.dll'.
14431a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ddraw.dll)
14441a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ddraw.dll
14451a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14461a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll'
14471a18.fa0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
14481a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14491a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
14501a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
14511a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
14521a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
14531a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14541a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
14551a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
14561a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14571a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
14581a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14591a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14601a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
14611a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14631a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
14641a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14651a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14661a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
14671a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14681a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
14691a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll'
14701a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
14711a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14721a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
14731a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
14741a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14751a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
14761a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14771a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14781a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
14791a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
14801a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
14821a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14831a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
14841a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv'
14851a18.fa0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\winspool.drv'.
14861a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14871a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
14881a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
14891a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
14901a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll'
14911a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
14921a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
14931a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
14941a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
14951a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
14961a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'msctf.dll'.
14971a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
14981a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
14991a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15001a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
15011a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
15021a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
15031a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll'
15041a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
15051a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15061a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
15071a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
15081a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15091a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
15101a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
15111a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
15121a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
15131a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
15141a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
15151a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
15161a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
15171a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15181a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
15191a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
15201a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15211a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
15221a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
15231a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15241a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
15251a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
15261a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
15271a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
15281a18.fa0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msctf.dll'.
15291a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15301a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
15311a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
15321a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'imm32.dll'.
15331a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
15341a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
15351a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15361a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
15371a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
15381a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15391a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
15401a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
15411a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15421a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
15431a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
15441a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15451a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15461a18.fa0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
15471a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15481a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
15491a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
15501a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
15511a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume3\Windows\System32\dciman32.dll'
15521a18.fa0: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\dciman32.dll'.
15531a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15541a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
15551a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
15561a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dciman32.dll)
15571a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dciman32.dll
15581a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15591a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
15601a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
15611a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
15631a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
15641a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15651a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
15661a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
15671a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15681a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
15691a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
15701a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15711a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
15721a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
15731a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15741a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
15751a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
15761a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
15771a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
15781a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
15791a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15801a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
15811a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
15821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15831a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
15841a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
15851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15861a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
15871a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
15881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
15891a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
15901a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
15911a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
15921a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)WinVerifyTrust
15931a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
15941a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
15951a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtguivbox4.dll'
15961a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [redoing WinVerifyTrust]
15971a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
15981a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
15991a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
16001a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
16011a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
16021a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
16031a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll'
16041a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
16051a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
16061a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
16071a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
16081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
16091a18.fa0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll'
16101a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
16111a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll'
16121a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [redoing WinVerifyTrust]
16131a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16141a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
16151a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
16161a18.fa0: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll'
16171a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
16181a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
16191a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
16201a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
16211a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
16221a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
16231a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
16241a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
16251a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
16261a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
16271a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
16281a18.fa0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
16291a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004ac pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
16301a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
16311a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
16321a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E7B21317A30D467EC23A2D5AE5A00919E81ECF45
16331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16341a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
16351a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
16361a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16371a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
16381a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
16391a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
16401a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
16411a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
16421a18.fa0: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
16431a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
16441a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
16451a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
16461a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
16471a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
16481a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
16491a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
16501a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
16511a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
16521a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
16531a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
16541a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
16551a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
16561a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
16571a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll)
16581a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll
16591a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
16601a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
16611a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
16621a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [avoiding WinVerifyTrust]
16631a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16641a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'combase.dll'.
16651a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
16661a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
16671a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
16691a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
16701a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
16711a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
16721a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16731a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
16741a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
16751a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16761a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
16771a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
16781a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16791a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
16801a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
16811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
16821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
16831a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
16841a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
16851a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16861a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
16871a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
16881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
16891a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'
16901a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000510 pwszName=\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll
16911a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
16921a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
16931a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0B6F85C85728A0522988F3BA15B32993C5E6F65A
16941a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16951a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
16961a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
16971a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
16981a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
16991a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17001a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17011a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll'
17021a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17031a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\comctl32.dll'
17041a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004d0 pwszName=\Device\HarddiskVolume3\Windows\System32\dciman32.dll
17051a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
17061a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
17071a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F7054D7E2435C8185055FC10D72A003A1DA9E42A
17081a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17091a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17101a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17111a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17121a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17131a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17141a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17151a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\dciman32.dll'
17161a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17171a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dciman32.dll'
17181a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17191a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17201a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17211a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17221a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17231a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17241a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17251a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
17261a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17271a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17281a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17291a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17301a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17311a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17331a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
17341a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000504 pwszName=\Device\HarddiskVolume3\Windows\System32\winspool.drv
17351a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
17361a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
17371a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=301C08682DA17C67E9303CDB8A53D6714879AAB6
17381a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17391a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17401a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17421a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17431a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17441a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17451a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_458_for_KB2975719~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume3\Windows\System32\winspool.drv'
17461a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17471a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winspool.drv'
17481a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000534 pwszName=\Device\HarddiskVolume3\Windows\System32\glu32.dll
17491a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
17501a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
17511a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3E2A9E0BA990B5B324512157B6832A46A7F5FC7E
17521a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17531a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17541a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17551a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17561a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17571a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17581a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17591a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\glu32.dll'
17601a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17611a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll'
17621a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004c8 pwszName=\Device\HarddiskVolume3\Windows\System32\ddraw.dll
17631a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
17641a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
17651a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=31DF65C62254C7AE52D40C6878D7F8B35E0367A8
17661a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17671a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17681a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17691a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17701a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17711a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17721a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17731a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\ddraw.dll'
17741a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17751a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ddraw.dll'
17761a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17771a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17781a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17791a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17801a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17811a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17821a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17831a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\combase.dll'
17841a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17851a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17861a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17871a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17881a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
17891a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
17901a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
17911a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
17921a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004ec pwszName=\Device\HarddiskVolume3\Windows\System32\comctl32.dll
17931a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
17941a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
17951a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0B6F85C85728A0522988F3BA15B32993C5E6F65A
17961a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
17971a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
17981a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
17991a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18001a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
18011a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
18021a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
18031a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\comctl32.dll'
18041a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18051a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\comctl32.dll'
18061a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
18081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
18091a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18101a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
18111a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
18121a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
18131a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
18141a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18151a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
18161a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
18171a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18181a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
18191a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
18201a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
18211a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\devobj.dll'
18221a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18231a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
18241a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
18251a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18261a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
18271a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
18281a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
18291a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'
18301a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=imm32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18311a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'imm32.dll' -> 'C:\Windows\system32\imm32.dll' [rcNt=0xc0150008]
18321a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
18331a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b200000 'C:\Windows\system32\imm32.dll'
18341a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8df530000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
18351a18.fa0: SUPR3HardenedMain: Calling TrustedMain (00007ff8df531ca0)...
18361a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18371a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
18381a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909050000 'C:\Windows\system32\winmm.dll'
18391a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
18401a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000005bc pwszName=\Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18411a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
18421a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
18431a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4235D21C52BC6FC9D5B6A7B3CE61ED85F804B2B7
18441a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18451a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
18461a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
18471a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18481a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
18491a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
18501a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
18511a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2550_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
18521a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18531a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18541a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
18551a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'gdi32.dll'.
18561a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)WinVerifyTrust
18571a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18581a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
18591a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
18601a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
18611a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
18631a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
18641a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18651a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
18661a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
18671a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18681a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
18691a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
18701a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18711a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
18721a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
18731a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18741a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
18751a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
18761a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18771a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
18781a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18791a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'user32.dll'.
18801a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'gdi32.dll'.
18811a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
18821a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
18831a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
18841a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
18851a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
18861a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
18871a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
18881a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
18891a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18901a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
18911a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
18921a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18931a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
18941a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
18951a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
18961a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
18971a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
18981a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18991a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
19001a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
19011a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19021a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
19031a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
19041a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
19051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19061a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
19071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
19081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
19091a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'
19101a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19111a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
19121a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
19131a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19141a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
19151a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
19161a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
19171a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dwmapi.dll'
19181a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19191a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
19201a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
19211a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19221a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
19231a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d750000 'C:\Windows\system32\kernel32.dll'
19241a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19251a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
19261a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
19271a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19281a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
19291a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
19301a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19311a18.fa0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 2
19321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll'
19331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19341a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
19351a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b5a0000 'C:\Windows\system32\user32.dll'
19361a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19371a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
19381a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32\uxtheme.dll'
19391a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19401a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
19411a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b5a0000 'C:\Windows\system32\user32.dll'
19421a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\advapi32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19431a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
19441a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b430000 'C:\Windows\system32\advapi32.dll'
19451a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\userenv.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19461a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19471a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
19481a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
19491a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19501a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
19511a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
19521a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
19531a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19541a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
19551a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'profapi.dll'.
19561a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\userenv.dll)WinVerifyTrust
19571a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll
19581a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
19591a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
19601a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
19611a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
19631a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
19641a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19651a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
19661a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
19671a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
19681a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a2a0000 'C:\Windows\system32\userenv.dll'
19691a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19701a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
19711a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d750000 'C:\Windows\system32\kernel32.dll'
19721a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19731a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
19741a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
19751a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
19761a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19771a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
19781a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19791a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
19801a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
19811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
19831a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
19841a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
19851a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19861a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
19871a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
19881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
19891a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\clbcatq.dll'
19901a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
19911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
19921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
19931a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
19941a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
19951a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b4e0000 'C:\Windows\System32\oleaut32.dll'
19961a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\sxs.dll)
19971a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sxs.dll
19981a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000690 pwszName=\Device\HarddiskVolume3\Windows\System32\sxs.dll
19991a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
20001a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
20011a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=687F47861CE02066FB64E8228B3C4D091FA20854
20021a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20031a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
20041a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
20051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20061a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
20071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
20081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
20091a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat'; file='\Device\HarddiskVolume3\Windows\System32\sxs.dll'
20101a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20111a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sxs.dll'
20121a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=OLEAUT32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20131a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'OLEAUT32' -> 'C:\Windows\system32\OLEAUT32.dll' [rcNt=0xc0150008]
20141a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
20151a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b4e0000 'C:\Windows\system32\OLEAUT32.dll'
20161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20171a18.fa0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 2
20181a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll'
20191a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20201a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
20211a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d310000 'C:\Windows\system32\gdi32.dll'
20221a18.af8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
20231a18.af8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20241a18.af8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
20251a18.af8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
20261a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
20271a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
20281a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
20291a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
20301a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
20311a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
20321a18.af8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
20331a18.af8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll)WinVerifyTrust
20341a18.af8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
20351a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
20361a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
20371a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
20381a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20391a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
20401a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
20411a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
20421a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
20431a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
20441a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
20451a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
20461a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
20471a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
20481a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
20491a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
20501a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
20511a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
20521a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
20531a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20541a18.af8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
20551a18.af8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
20561a18.af8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
20571a18.af8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8df040000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
20581a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20591a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
20601a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b5a0000 'C:\Windows\system32\user32.dll'
20611a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20621a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
20631a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
20641a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
20651a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
20661a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b2b0000 'C:\Windows\system32\ole32.dll'
20671a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MSCTF.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
20681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
20691a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ba40000 'C:\Windows\system32\MSCTF.dll'
20701a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20711a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'ole32.dll' -> 'C:\Windows\system32\ole32.dll' [rcNt=0xc0150008]
20721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
20731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b2b0000 'C:\Windows\system32\ole32.dll'
20741a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=OLEAUT32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20751a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'OLEAUT32.dll' -> 'C:\Windows\system32\OLEAUT32.dll' [rcNt=0xc0150008]
20761a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
20771a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b4e0000 'C:\Windows\system32\OLEAUT32.dll'
20781a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemprox.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
20791a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a3c pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
20801a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
20811a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
20821a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7236FDED02E3449B6CA92FB6E4246EBF9068E8BF
20831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
20851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
20861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
20871a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
20881a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
20891a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
20901a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_110_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll'
20911a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20921a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20931a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
20941a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
20951a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll)WinVerifyTrust
20961a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
20971a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
20981a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
20991a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a58 pwszName=\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21001a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
21011a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
21021a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C8CF4605B4B026F3426876C8B971F3B65D680FCA
21031a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21041a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
21051a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
21061a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21071a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
21081a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
21091a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
21101a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-admin~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
21111a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21121a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21131a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'ws2_32.dll'.
21141a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll)WinVerifyTrust
21151a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21161a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21171a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
21181a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
21191a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21201a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
21211a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
21221a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21231a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
21241a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
21251a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21261a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
21271a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
21281a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
21291a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21301a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
21311a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ad00000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
21321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff905470000 'C:\Windows\system32\wbem\wbemprox.dll'
21331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemsvc.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
21341a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a5c pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21351a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
21361a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
21371a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CAF9F72D1022230646E0EDB101D9050122FBB222
21381a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21391a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
21401a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
21411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21421a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
21431a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
21441a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
21451a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_110_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll'
21461a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21471a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21481a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
21491a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll)WinVerifyTrust
21501a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21511a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21521a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
21531a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
21541a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21551a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
21561a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
21571a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21581a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff900c90000 'C:\Windows\system32\wbem\wbemsvc.dll'
21591a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
21601a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ad00000 'api-ms-win-core-localization-l1-2-0.dll'
21611a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
21621a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ad00000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
21631a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\fastprox.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
21641a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ab8 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
21651a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
21661a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
21671a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3F29F8F4F858A7AFDF4CD047A78948C26E8333B6
21681a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21691a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
21701a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
21711a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21721a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
21731a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
21741a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
21751a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-admin~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll'
21761a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21771a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21781a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
21791a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll)WinVerifyTrust
21801a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
21811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
21821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
21831a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21841a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
21861a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
21871a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
21881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff900cf0000 'C:\Windows\system32\wbem\fastprox.dll'
21891a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=OLEAUT32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21901a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'OLEAUT32.dll' -> 'C:\Windows\system32\OLEAUT32.dll' [rcNt=0xc0150008]
21911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
21921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b4e0000 'C:\Windows\system32\OLEAUT32.dll'
21931a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\comctl32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21941a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\comctl32.dll
21951a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b090000 'C:\Windows\system32\comctl32.dll'
21961a18.1b4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
21971a18.1b4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
21981a18.1b4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
21991a18.1b4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22001a18.1b4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22011a18.1b4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22021a18.1b4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22031a18.1b4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22041a18.1b4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
22051a18.1b4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22061a18.1b4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll)WinVerifyTrust
22071a18.1b4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22081a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22091a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
22101a18.1b4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
22111a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
22121a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrem.dll'
22131a18.1b4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22141a18.1b4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22151a18.1b4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22161a18.1b4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
22171a18.1b4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
22181a18.1b4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
22191a18.1b4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll)WinVerifyTrust
22201a18.1b4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
22211a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22221a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
22231a18.1b4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
22241a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22251a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
22261a18.1b4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
22271a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
22281a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll'
22291a18.1b4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22301a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22311a18.1b4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
22321a18.1b4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
22331a18.1b4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22341a18.1b4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
22351a18.1b4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8de830000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
22361a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22371a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22381a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22391a18.cc8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22401a18.cc8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22411a18.cc8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22421a18.cc8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22431a18.cc8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22441a18.cc8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22451a18.cc8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22461a18.cc8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22471a18.cc8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
22481a18.cc8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22491a18.cc8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
22501a18.cc8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll)WinVerifyTrust
22511a18.cc8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
22521a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22531a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
22541a18.cc8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
22551a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22561a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
22571a18.cc8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
22581a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
22591a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll'
22601a18.cc8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22611a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22621a18.cc8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
22631a18.cc8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
22641a18.cc8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
22651a18.cc8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909070000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
22661a18.1be8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22671a18.1be8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22681a18.1be8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22691a18.1be8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22701a18.1be8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22711a18.1be8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22721a18.1be8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22731a18.1be8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22741a18.1be8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22751a18.1be8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll)WinVerifyTrust
22761a18.1be8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
22771a18.1be8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22781a18.1be8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
22791a18.1be8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
22801a18.1be8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22811a18.1be8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
22821a18.1be8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
22831a18.1be8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
22841a18.1be8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8feb40000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
22851a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22861a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22871a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22881a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22891a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
22901a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22911a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
22921a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22931a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxoglhostcrutil.dll'.
22941a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22951a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxvmm.dll'.
22961a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxoglrenderspu.dll'.
22971a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
22981a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ole32.dll'.
22991a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleaut32.dll'.
23001a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll)WinVerifyTrust
23011a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll
23021a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23031a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
23041a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
23051a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23061a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
23071a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
23081a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23091a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
23101a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
23111a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglrenderspu.dll'...
23121a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglrenderspu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxoglrenderspu.dll'
23131a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
23141a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
23151a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
23161a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23171a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxoglhostcrutil.dll'.
23181a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23191a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
23201a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
23211a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
23221a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll)WinVerifyTrust
23231a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
23241a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
23251a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll'
23261a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23271a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23281a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
23291a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
23301a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglhostcrutil.dll'...
23311a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglhostcrutil.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxoglhostcrutil.dll'
23321a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
23331a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
23341a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23351a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
23361a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
23371a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23381a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
23391a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
23401a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23411a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
23421a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
23431a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23441a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
23451a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
23461a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglhostcrutil.dll'...
23471a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglhostcrutil.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxoglhostcrutil.dll'
23481a18.430: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll'.
23491a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23501a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23511a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
23521a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
23531a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
23541a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll)
23551a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll
23561a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23571a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
23581a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
23591a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23601a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
23611a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
23621a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
23631a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
23641a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
23651a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23661a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
23671a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
23681a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23691a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
23701a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
23711a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23721a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
23731a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
23741a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
23751a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23761a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23771a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
23781a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
23791a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
23801a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll)WinVerifyTrust
23811a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23821a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
23831a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
23841a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23851a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
23861a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
23871a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
23881a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
23891a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
23901a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23911a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
23921a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
23931a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23941a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
23951a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
23961a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23971a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
23981a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
23991a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll
24001a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll [avoiding WinVerifyTrust]
24011a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
24021a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8def10000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.DLL'
24031a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24041a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
24051a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
24061a18.430: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll'
24071a18.430: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-version-l1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24081a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ad00000 'api-ms-win-core-version-l1-1-0.dll'
24091a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\napinsp.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24101a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b4c pwszName=\Device\HarddiskVolume3\Windows\System32\NapiNSP.dll
24111a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
24121a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
24131a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AB8548279B14A30E4824262EB33D657E95344DC
24141a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24151a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
24161a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
24171a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24181a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
24191a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
24201a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
24211a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-net~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\NapiNSP.dll'
24221a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24231a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24241a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
24251a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\NapiNSP.dll)WinVerifyTrust
24261a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\NapiNSP.dll
24271a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24281a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
24291a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
24301a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24311a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
24321a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
24331a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\NapiNSP.dll
24341a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9011c0000 'C:\Windows\system32\napinsp.dll'
24351a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\pnrpnsp.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24361a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000bec pwszName=\Device\HarddiskVolume3\Windows\System32\pnrpnsp.dll
24371a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
24381a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
24391a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=941AFC268B172F15EE3A4722BA2DBB9E79DAFE82
24401a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24411a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
24421a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
24431a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24441a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
24451a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
24461a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
24471a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\pnrpnsp.dll'
24481a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24491a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24501a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\pnrpnsp.dll)WinVerifyTrust
24511a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\pnrpnsp.dll
24521a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24531a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
24541a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
24551a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\pnrpnsp.dll
24561a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9011e0000 'C:\Windows\system32\pnrpnsp.dll'
24571a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\pnrpnsp.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24581a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\pnrpnsp.dll
24591a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9011e0000 'C:\Windows\system32\pnrpnsp.dll'
24601a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\NLAapi.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24611a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c40 pwszName=\Device\HarddiskVolume3\Windows\System32\nlaapi.dll
24621a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
24631a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
24641a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9F21E64793E06E1BA9D416644C4FCD2C96CCA671
24651a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24661a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
24671a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
24681a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24691a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
24701a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
24711a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
24721a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-net~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\nlaapi.dll'
24731a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24741a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24751a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
24761a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nlaapi.dll)WinVerifyTrust
24771a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nlaapi.dll
24781a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24791a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
24801a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
24811a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24821a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
24831a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
24841a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nlaapi.dll
24851a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff906a70000 'C:\Windows\system32\NLAapi.dll'
24861a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\mswsock.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24871a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c58 pwszName=\Device\HarddiskVolume3\Windows\System32\mswsock.dll
24881a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
24891a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
24901a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C64ACDC3BD0BFFE24C87951473EBAE5CBEDAA02F
24911a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24921a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
24931a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
24941a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
24951a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
24961a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
24971a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
24981a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-Minio-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\mswsock.dll'
24991a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25001a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
25011a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
25021a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mswsock.dll)WinVerifyTrust
25031a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mswsock.dll
25041a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
25051a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
25061a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
25071a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25081a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
25091a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
25101a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
25111a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a4f0000 'C:\Windows\System32\mswsock.dll'
25121a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'ws2_32.dll'.
25131a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'nsi.dll'.
25141a18.430: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
25151a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
25161a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c48 pwszName=\Device\HarddiskVolume3\Windows\System32\dnsapi.dll
25171a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
25181a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
25191a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=91348AB3DF193F9E876E8AABB42B2044FE3BC4F5
25201a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25211a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
25221a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
25231a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
25241a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll
25251a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
25261a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
25271a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
25281a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
25291a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25301a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
25311a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
25321a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
25331a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_180_for_KB2934018~31bf3856ad364e35~amd64~~6.3.1.5.cat'; file='\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
25341a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25351a18.430: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
25361a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\winrnr.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25371a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c88 pwszName=\Device\HarddiskVolume3\Windows\System32\winrnr.dll
25381a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
25391a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
25401a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=302A56FC9F5DB19D5C8FFEFA3A432A33F3373816
25411a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25421a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
25431a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
25441a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25451a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
25461a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
25471a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
25481a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-ds~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\winrnr.dll'
25491a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25501a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25511a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winrnr.dll)WinVerifyTrust
25521a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winrnr.dll
25531a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25541a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
25551a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
25561a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winrnr.dll
25571a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff901230000 'C:\Windows\System32\winrnr.dll'
25581a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25591a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
25601a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f4750000 'C:\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll'
25611a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25621a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25631a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
25641a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
25651a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25661a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxoglhostcrutil.dll'.
25671a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll)WinVerifyTrust
25681a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll
25691a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglhostcrutil.dll'...
25701a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglhostcrutil.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxoglhostcrutil.dll'
25711a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll
25721a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25731a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
25741a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
25751a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll
25761a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f4730000 'C:\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll'
25771a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32/opengl32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25781a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
25791a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32/opengl32.dll'
25801a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25811a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
25821a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
25831a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
25841a18.430: supR3HardenedMonitor_LdrLoadDll: pName=gdi32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25851a18.430: supR3HardenedMonitor_LdrLoadDll: 'gdi32' -> 'C:\Windows\system32\gdi32.dll' [rcNt=0xc0150008]
25861a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
25871a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d310000 'C:\Windows\system32\gdi32.dll'
25881a18.430: supR3HardenedMonitor_LdrLoadDll: pName=ig75icd64.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25891a18.430: supR3HardenedMonitor_LdrLoadDll: 'ig75icd64.dll' -> 'C:\Windows\system32\ig75icd64.dll' [rcNt=0xc0150008]
25901a18.430: \Device\HarddiskVolume3\Windows\System32\ig75icd64.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
25911a18.430: \Device\HarddiskVolume3\Windows\System32\ig75icd64.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32).
25921a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cb0 pwszName=\Device\HarddiskVolume3\Windows\System32\ig75icd64.dll
25931a18.430: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
25941a18.430: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
25951a18.430: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1DD7E3D4C7A1EE338A9B5B74131C3F022996A68C
25961a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
25971a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
25981a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
25991a18.430: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem51.cat'; file='\Device\HarddiskVolume3\Windows\System32\ig75icd64.dll'
26001a18.430: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26011a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
26021a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'igdusc64.dll'.
26031a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
26041a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
26051a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
26061a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'dwmapi.dll'.
26071a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ig75icd64.dll)WinVerifyTrust
26081a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ig75icd64.dll
26091a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
26101a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dwmapi.dll'
26111a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
26121a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
26131a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
26141a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
26151a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
26161a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
26171a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
26181a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26191a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
26201a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
26211a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'igdusc64.dll'...
26221a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'igdusc64.dll' -> '\Device\HarddiskVolume3\Windows\System32\igdusc64.dll'
26231a18.430: \Device\HarddiskVolume3\Windows\System32\igdusc64.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
26241a18.430: \Device\HarddiskVolume3\Windows\System32\igdusc64.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32).
26251a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26261a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
26271a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
26281a18.430: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x800b010a (CERT_E_CHAINING) on '\Device\HarddiskVolume3\Windows\System32\igdusc64.dll'
26291a18.430: supHardenedWinVerifyImageByHandle: -> -22919 (\Device\HarddiskVolume3\Windows\System32\igdusc64.dll)WinVerifyTrust
26301a18.430: Error (rc=0):
26311a18.430: supR3HardenedScreenImage/Imports: rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Windows\System32\igdusc64.dll: WinVerifyTrust failed with hrc=CERT_E_CHAINING on '\Device\HarddiskVolume3\Windows\System32\igdusc64.dll'
26321a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
26331a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
26341a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26351a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ig75icd64.dll
26361a18.430: \Device\HarddiskVolume3\Windows\System32\igdusc64.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
26371a18.430: \Device\HarddiskVolume3\Windows\System32\igdusc64.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32).
26381a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\igdusc64.dll)
26391a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\igdusc64.dll
26401a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8dc0a0000 'C:\Windows\system32\ig75icd64.dll'
26411a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26421a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
26431a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
26441a18.430: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x800b010a (CERT_E_CHAINING) on '\Device\HarddiskVolume3\Windows\System32\igdusc64.dll'
26451a18.430: supR3HardenedWinVerifyCacheProcessWvtTodos: -22919 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\igdusc64.dll'
26461a18.430: supR3HardenedMonitor_LdrLoadDll: pName=gdi32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26471a18.430: supR3HardenedMonitor_LdrLoadDll: 'gdi32' -> 'C:\Windows\system32\gdi32.dll' [rcNt=0xc0150008]
26481a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
26491a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d310000 'C:\Windows\system32\gdi32.dll'
26501a18.430: supR3HardenedMonitor_LdrLoadDll: pName=gdi32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26511a18.430: supR3HardenedMonitor_LdrLoadDll: 'gdi32.dll' -> 'C:\Windows\system32\gdi32.dll' [rcNt=0xc0150008]
26521a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
26531a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d310000 'C:\Windows\system32\gdi32.dll'
26541a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26551a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26561a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26571a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26581a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26591a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26601a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26611a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26621a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26631a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26641a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26651a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26661a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26671a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26681a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26691a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26701a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26711a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26721a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26731a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26741a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26751a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26761a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26771a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26781a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26791a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
26801a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
26811a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
26821a18.430: supR3HardenedMonitor_LdrLoadDll: pName=version.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26831a18.430: supR3HardenedMonitor_LdrLoadDll: 'version.dll' -> 'C:\Windows\system32\version.dll' [rcNt=0xc0150008]
26841a18.430: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26851a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
26861a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
26871a18.430: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
26881a18.430: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
26891a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
26901a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
26911a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
26921a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)WinVerifyTrust
26931a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
26941a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26951a18.430: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
26961a18.430: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
26971a18.430: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll
26981a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904e80000 'C:\Windows\system32\version.dll'
26991a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27001a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
27011a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
27021a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
27031a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27041a18.430: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
27051a18.430: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
27061a18.430: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
27071a18.208: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27081a18.208: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27091a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27101a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
27111a18.208: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
27121a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27131a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
27141a18.208: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
27151a18.208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27161a18.208: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27171a18.208: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
27181a18.208: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
27191a18.208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
27201a18.208: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'
27211a18.208: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27221a18.208: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27231a18.208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27241a18.208: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27251a18.208: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27261a18.208: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27271a18.208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27281a18.208: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27291a18.208: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
27301a18.208: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
27311a18.208: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll)WinVerifyTrust
27321a18.208: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
27331a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27341a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
27351a18.208: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
27361a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
27371a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
27381a18.208: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
27391a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27401a18.208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
27411a18.208: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
27421a18.208: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
27431a18.208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fe130000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
27441a18.37c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27451a18.37c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27461a18.37c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27471a18.37c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27481a18.37c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27491a18.37c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27501a18.37c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27511a18.37c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27521a18.37c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
27531a18.37c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
27541a18.37c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll)WinVerifyTrust
27551a18.37c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
27561a18.37c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27571a18.37c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
27581a18.37c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
27591a18.37c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
27601a18.37c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll'
27611a18.37c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
27621a18.37c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27631a18.37c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
27641a18.37c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
27651a18.37c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
27661a18.37c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8310000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
27671a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27681a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27691a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27701a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27711a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27721a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27731a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27741a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27751a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
27761a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
27771a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
27781a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
27791a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
27801a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
27811a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
27821a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
27831a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
27841a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll)WinVerifyTrust
27851a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
27861a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
27871a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll'
27881a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27891a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
27901a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
27911a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
27921a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
27931a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
27941a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
27951a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
27961a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winnsi.dll'.
27971a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)WinVerifyTrust
27981a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
27991a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
28001a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
28011a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
28021a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
28031a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
28041a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
28051a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
28061a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll'
28071a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
28081a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
28091a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
28101a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
28111a18.1b9c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'.
28121a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
28131a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
28141a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winnsi.dll)
28151a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winnsi.dll
28161a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
28171a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
28181a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll
28191a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
28201a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
28211a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll
28221a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28231a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
28241a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
28251a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
28261a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
28271a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
28281a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
28291a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
28301a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'cfgmgr32.dll'.
28311a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
28321a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
28331a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\setupapi.dll)WinVerifyTrust
28341a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\setupapi.dll
28351a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
28361a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
28371a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
28381a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
28391a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxdd2.dll'
28401a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
28411a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
28421a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28431a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
28441a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
28451a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28461a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
28471a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
28481a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
28491a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
28501a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
28511a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
28521a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28531a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
28541a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
28551a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll)WinVerifyTrust
28561a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
28571a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
28581a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxddu.dll'
28591a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
28601a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
28611a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28621a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
28631a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
28641a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
28651a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll'
28661a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28671a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28681a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
28691a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
28701a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
28711a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28721a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
28731a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
28741a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
28751a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'newdev.dll'.
28761a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
28771a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll)WinVerifyTrust
28781a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
28791a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28801a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
28811a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
28821a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
28831a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll'
28841a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28851a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28861a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
28871a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
28881a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
28891a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
28901a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
28911a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'newdev.dll'...
28921a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'newdev.dll' -> '\Device\HarddiskVolume3\Windows\System32\newdev.dll'
28931a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e28 pwszName=\Device\HarddiskVolume3\Windows\System32\newdev.dll
28941a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
28951a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
28961a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EAD431E57FCC787ED701559E9AF2ACC33D2DCED0
28971a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
28981a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
28991a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
29001a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29011a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
29021a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
29031a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
29041a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1722_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume3\Windows\System32\newdev.dll'
29051a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29061a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29071a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
29081a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
29091a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
29101a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'uxtheme.dll'.
29111a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'cfgmgr32.dll'.
29121a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'setupapi.dll'.
29131a18.1b9c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\newdev.dll)WinVerifyTrust
29141a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\newdev.dll
29151a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
29161a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll'
29171a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29181a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29191a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
29201a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
29211a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29221a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
29231a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
29241a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29251a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
29261a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
29271a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
29281a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll'
29291a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29301a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
29311a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
29321a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
29331a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uxtheme.dll'...
29341a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'uxtheme.dll' -> '\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
29351a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
29361a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
29371a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
29381a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
29391a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29401a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
29411a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
29421a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
29431a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
29441a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
29451a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29461a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
29471a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
29481a18.1b9c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
29491a18.1b9c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29501a18.1b9c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29511a18.1b9c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29521a18.1b9c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\newdev.dll
29531a18.1b9c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
29541a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29551a18.1b9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\devrtl.dll)
29561a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devrtl.dll
29571a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8db7e0000 'C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL'
29581a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e10 pwszName=\Device\HarddiskVolume3\Windows\System32\devrtl.dll
29591a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
29601a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
29611a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6059B260D211680DF083154CCCE38DE8412914CF
29621a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29631a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
29641a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29651a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
29661a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
29671a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
29681a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29691a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
29701a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
29711a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
29721a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-Base-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\devrtl.dll'
29731a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29741a18.1b9c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\devrtl.dll'
29751a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29761a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
29771a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
29781a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29791a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
29801a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
29811a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
29821a18.1b9c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
29831a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29841a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
29851a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
29861a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxC.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29871a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
29881a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8df040000 'C:\Program Files\Oracle\VirtualBox/VBoxC.DLL'
29891a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29901a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
29911a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
29921a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29931a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29941a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f46f0000 'C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL'
29951a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29961a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
29971a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
29981a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
29991a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
30001a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
30011a18.121c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30021a18.121c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
30031a18.121c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
30041a18.121c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30051a18.121c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30061a18.121c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
30071a18.121c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
30081a18.121c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30091a18.121c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
30101a18.121c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30111a18.121c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll)WinVerifyTrust
30121a18.121c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30131a18.121c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30141a18.121c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll'
30151a18.121c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
30161a18.121c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
30171a18.121c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll'
30181a18.121c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30191a18.121c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30201a18.121c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
30211a18.121c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
30221a18.121c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30231a18.121c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8170000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
30241a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32/Iphlpapi.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30251a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
30261a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff906210000 'C:\Windows\system32/Iphlpapi.dll'
30271a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
30281a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
30291a18.1b9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll)
30301a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
30311a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30321a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
30331a18.1b9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
30341a18.1b9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll)
30351a18.1b9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
30361a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f40 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
30371a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
30381a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
30391a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B2E8A5C503120A11AEA21658FF24E56CA6FD0F29
30401a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30411a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
30421a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
30431a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
30441a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll
30451a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
30461a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
30471a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
30481a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30491a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
30501a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
30511a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
30521a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll'
30531a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
30541a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30551a18.1b9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
30561a18.1b9c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
30571a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
30581a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30591a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
30601a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
30611a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
30621a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_198_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
30631a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30641a18.1b9c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
30651a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e80 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
30661a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
30671a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
30681a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F1462D922EF889F4B0A9FD14B2DFE30CDCB183D5
30691a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30701a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
30711a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
30721a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30731a18.1b9c: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
30741a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
30751a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
30761a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_198_for_KB2962409~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
30771a18.1b9c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30781a18.1b9c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
30791a18.1b9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32/kernel32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30801a18.1b9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
30811a18.1b9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90d750000 'C:\Windows\system32/kernel32.dll'
30821a18.aa4: '\Device\HarddiskVolume3\Windows\System32\tzres.dll' has no imports
30831a18.aa4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\tzres.dll)
30841a18.aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\tzres.dll
30851a18.aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
30861a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000718 pwszName=\Device\HarddiskVolume3\Windows\System32\tzres.dll
30871a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
30881a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
30891a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2C2912B1AF73A6796732D1488D75007F742A3299
30901a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
30921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
30931a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
30941a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
30951a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
30961a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
30971a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-Base-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\tzres.dll'
30981a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30991a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\tzres.dll'
31001a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31011a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31021a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31031a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31041a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31051a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31061a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\SYSTEM32\WINMM.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
31081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909050000 'C:\Windows\SYSTEM32\WINMM.dll'
31091a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31101a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
31111a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b5a0000 'C:\Windows\system32\user32.dll'
31121a18.aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\mswsock.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31131a18.aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
31141a18.aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a4f0000 'C:\Windows\system32\mswsock.dll'
31151a18.aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-version-l1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31161a18.aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ad00000 'api-ms-win-core-version-l1-1-0.dll'
31171a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31181a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31191a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31201a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31211a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31221a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31231a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31241a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31251a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31261a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31271a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31281a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31291a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31301a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31311a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31321a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31331a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31341a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31351a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31361a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31371a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31381a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31391a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31401a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31421a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31431a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31441a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31451a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31461a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31471a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31481a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31491a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31501a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32/uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31511a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
31521a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff909940000 'C:\Windows\system32/uxtheme.dll'
31531a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31541a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31551a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31561a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31571a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31581a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31591a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31601a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31611a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31621a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31631a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31641a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31651a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31661a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31671a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31681a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31691a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31701a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31711a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31741a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31751a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
31761a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
31771a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\propsys.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
31781a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31791a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
31801a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
31811a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31821a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
31831a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b040000 'C:\Windows\System32\WINTRUST.DLL'
31841a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags>
31851a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
31861a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\CRYPT32.dll'
31871a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
31881a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
31891a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
31901a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
31911a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
31921a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
31931a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
31941a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'combase.dll'.
31951a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)WinVerifyTrust
31961a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
31971a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
31981a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
31991a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
32001a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
32011a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
32021a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
32031a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
32041a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
32051a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
32061a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
32071a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
32081a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
32091a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
32101a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9055c0000 'C:\Windows\system32\propsys.dll'
32111a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
32121a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
32131a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
32141a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=comctl32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32151a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'comctl32.dll' -> 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll' [rcNt=0x0]
32161a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001160 pwszName=\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll
32171a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
32181a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
32191a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5390073B6380AD5C6C8BDA60984E68C77A19C6FF
32201a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32211a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
32221a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
32231a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32241a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
32251a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
32261a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
32271a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2551_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll'
32281a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
32291a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
32301a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'gdi32.dll'.
32311a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
32321a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll)WinVerifyTrust
32331a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll
32341a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
32351a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
32361a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
32371a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
32381a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
32391a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
32401a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
32411a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
32421a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
32431a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll
32441a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9082b0000 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll'
32451a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=comctl32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32461a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'comctl32.dll' -> 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll' [rcNt=0x0]
32471a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll
32481a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9082b0000 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll'
32491a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
32501a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
32511a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'combase.dll'.
32521a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll)
32531a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll
32541a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32551a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
32561a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
32571a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
32581a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
32591a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
32601a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
32611a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
32621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
32631a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
32641a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
32651a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
32661a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32671a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
32681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
32691a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
32701a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll'
32711a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
32731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\System32\shell32.dll'
32741a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32751a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
32761a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\System32\shell32.dll'
32771a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll)
32781a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll
32791a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011a0 pwszName=\Device\HarddiskVolume3\Windows\System32\apphelp.dll
32801a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
32811a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
32821a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B4C95513642E818E61368D055E77885237B5EC1E
32831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
32851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
32861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
32871a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
32881a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
32891a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
32901a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1722_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume3\Windows\System32\apphelp.dll'
32911a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
32921a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\apphelp.dll'
32931a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
32941a18.fa0: \Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
32951a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL)
32961a18.fa0: Error (rc=0):
32971a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL'.
32981a18.fa0: Error (rc=0):
32991a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL': rcNt=0xc0000190
33001a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL'
33011a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33021a18.fa0: \Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
33031a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL)
33041a18.fa0: Error (rc=0):
33051a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL'.
33061a18.fa0: Error (rc=0):
33071a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL': rcNt=0xc0000190
33081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL'
33091a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33101a18.fa0: \Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
33111a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL)
33121a18.fa0: Error (rc=0):
33131a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL'.
33141a18.fa0: Error (rc=0):
33151a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL': rcNt=0xc0000190
33161a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL'
33171a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33181a18.fa0: \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: Owner is not trusted installer (01 05 00 00 00 00 00 05 15 00 00 00 ac 0c e3 60 a3 a2 97 e3 45 53 34 19 e9 03 00 00)
33191a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll)
33201a18.fa0: Error (rc=0):
33211a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'.
33221a18.fa0: Error (rc=0):
33231a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll': rcNt=0xc0000190
33241a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'
33251a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33261a18.fa0: \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: Owner is not trusted installer (01 05 00 00 00 00 00 05 15 00 00 00 ac 0c e3 60 a3 a2 97 e3 45 53 34 19 e9 03 00 00)
33271a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll)
33281a18.fa0: Error (rc=0):
33291a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'.
33301a18.fa0: Error (rc=0):
33311a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll': rcNt=0xc0000190
33321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'
33331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33341a18.fa0: \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: Owner is not trusted installer (01 05 00 00 00 00 00 05 15 00 00 00 ac 0c e3 60 a3 a2 97 e3 45 53 34 19 e9 03 00 00)
33351a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll)
33361a18.fa0: Error (rc=0):
33371a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'.
33381a18.fa0: Error (rc=0):
33391a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll': rcNt=0xc0000190
33401a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'
33411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33421a18.fa0: \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: Owner is not trusted installer (01 05 00 00 00 00 00 05 15 00 00 00 ac 0c e3 60 a3 a2 97 e3 45 53 34 19 e9 03 00 00)
33431a18.fa0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll)
33441a18.fa0: Error (rc=0):
33451a18.fa0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume3\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'.
33461a18.fa0: Error (rc=0):
33471a18.fa0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll': rcNt=0xc0000190
33481a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Users\hkden_000\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll'
33491a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\EhStorShell.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
33501a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011a8 pwszName=\Device\HarddiskVolume3\Windows\System32\EhStorShell.dll
33511a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
33521a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
33531a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C111F1DA8BF20C35EDD63783C5A20BD7DD10D4D1
33541a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
33551a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
33561a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
33571a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
33581a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
33591a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
33601a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
33611a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-drivers~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\EhStorShell.dll'
33621a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
33631a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
33641a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
33651a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
33661a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'.
33671a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
33681a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
33691a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'propsys.dll'.
33701a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'shlwapi.dll'.
33711a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'comctl32.dll'.
33721a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'setupapi.dll'.
33731a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\EhStorShell.dll)WinVerifyTrust
33741a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\EhStorShell.dll
33751a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
33761a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll'
33771a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
33781a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
33791a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll'
33801a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\comctl32.dll
33811a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
33821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
33831a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
33841a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
33851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll'
33861a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
33871a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
33881a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
33891a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
33901a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
33911a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
33921a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
33931a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
33941a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
33951a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
33961a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
33971a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
33981a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
33991a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
34001a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
34011a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
34021a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
34031a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
34041a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
34051a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\EhStorShell.dll
34061a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8feb50000 'C:\Windows\System32\EhStorShell.dll'
34071a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\EhStorShell.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34081a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\EhStorShell.dll
34091a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8feb50000 'C:\Windows\System32\EhStorShell.dll'
34101a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Google\Drive\googledrivesync64.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
34111a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34121a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
34131a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
34141a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34151a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
34161a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904a40000 'C:\Windows\System32\cryptnet.dll'
34171a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'shlwapi.dll'.
34181a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'psapi.dll'.
34191a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
34201a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
34211a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
34221a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcp90.dll'.
34231a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr90.dll'.
34241a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll)WinVerifyTrust
34251a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34261a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr90.dll'...
34271a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Failed to locate 'msvcr90.dll'
34281a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp90.dll'...
34291a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Failed to locate 'msvcp90.dll'
34301a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
34311a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll'
34321a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
34331a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
34341a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
34351a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
34361a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
34371a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
34381a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
34391a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'psapi.dll'...
34401a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'psapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\psapi.dll'
34411a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34421a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
34431a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
34441a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34451a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
34461a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
34471a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
34481a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\psapi.dll)WinVerifyTrust
34491a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\psapi.dll
34501a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
34511a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
34521a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
34531a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34541a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr90.dll'.
34551a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcp90.dll)
34561a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcp90.dll
34571a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcr90.dll)
34581a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcr90.dll
34591a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8b00000 'C:\Program Files (x86)\Google\Drive\googledrivesync64.dll'
34601a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34611a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
34621a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr90.dll'...
34631a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr90.dll' -> '\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcr90.dll'
34641a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcr90.dll [lacks WinVerifyTrust]
34651a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
34661a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcr90.dll'
34671a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
34691a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
34701a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcp90.dll'
34711a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Google\Drive\googledrivesync64.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8b00000 'C:\Program Files (x86)\Google\Drive\googledrivesync64.dll'
34741a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Google\Drive\googledrivesync64.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34751a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34761a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8b00000 'C:\Program Files (x86)\Google\Drive\googledrivesync64.dll'
34771a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Google\Drive\googledrivesync64.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34781a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34791a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8b00000 'C:\Program Files (x86)\Google\Drive\googledrivesync64.dll'
34801a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Google\Drive\googledrivesync64.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34811a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34821a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8b00000 'C:\Program Files (x86)\Google\Drive\googledrivesync64.dll'
34831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Google\Drive\googledrivesync64.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\Google\Drive\googledrivesync64.dll
34851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f8b00000 'C:\Program Files (x86)\Google\Drive\googledrivesync64.dll'
34861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cscui.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
34871a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011ec pwszName=\Device\HarddiskVolume3\Windows\System32\cscui.dll
34881a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
34891a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
34901a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5D2FC784920E1F6BF3C4923F486D515E2F9CCA3C
34911a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34921a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
34931a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
34941a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
34951a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
34961a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
34971a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
34981a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_191_for_KB2967917~31bf3856ad364e35~amd64~~6.3.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\cscui.dll'
34991a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
35001a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35011a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
35021a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
35031a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
35041a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'propsys.dll'.
35051a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
35061a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'shlwapi.dll'.
35071a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'cscdll.dll'.
35081a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cscui.dll)WinVerifyTrust
35091a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cscui.dll
35101a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cscdll.dll'...
35111a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'cscdll.dll' -> '\Device\HarddiskVolume3\Windows\System32\cscdll.dll'
35121a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011b4 pwszName=\Device\HarddiskVolume3\Windows\System32\cscdll.dll
35131a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
35141a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
35151a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C7C19FE4B9E02E438BDDAD0079F101A7B3C792A7
35161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
35171a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
35181a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
35191a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
35201a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
35211a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
35221a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
35231a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-base~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\cscdll.dll'
35241a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
35251a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35261a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cscdll.dll)WinVerifyTrust
35271a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cscdll.dll
35281a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
35291a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
35301a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
35311a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
35321a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
35331a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
35341a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
35351a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll'
35361a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
35371a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
35381a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
35391a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
35401a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
35411a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
35421a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
35431a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
35441a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
35451a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
35461a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35471a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
35481a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
35491a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35501a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
35511a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
35521a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cscui.dll
35531a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cscdll.dll
35541a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=comctl32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
35551a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'comctl32.dll' -> 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll' [rcNt=0x0]
35561a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll
35571a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9082b0000 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll'
35581a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd810000 'C:\Windows\System32\cscui.dll'
35591a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cscui.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
35601a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cscui.dll
35611a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd810000 'C:\Windows\System32\cscui.dll'
35621a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\mssprxy.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
35631a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001228 pwszName=\Device\HarddiskVolume3\Windows\System32\mssprxy.dll
35641a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
35651a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
35661a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=53EB47F5A8988B3B2527DFE62F7F802B3B634D23
35671a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
35681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
35691a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
35701a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
35711a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
35721a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
35731a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
35741a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5584_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume3\Windows\System32\mssprxy.dll'
35751a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
35761a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35771a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
35781a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
35791a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'combase.dll'.
35801a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mssprxy.dll)WinVerifyTrust
35811a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mssprxy.dll
35821a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
35831a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll'
35841a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
35851a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
35861a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
35871a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
35881a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
35891a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
35901a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
35911a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35921a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
35931a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
35941a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mssprxy.dll
35951a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f1540000 'C:\Windows\system32\mssprxy.dll'
35961a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
35971a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
35981a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\System32\shell32.dll'
35991a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\thumbcache.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
36001a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001240 pwszName=\Device\HarddiskVolume3\Windows\System32\thumbcache.dll
36011a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
36021a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
36031a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F8A71C810C28D08DA8231226ACEB9802D8F7DC0D
36041a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36051a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
36061a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
36071a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36081a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
36091a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
36101a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
36111a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2555_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14.cat'; file='\Device\HarddiskVolume3\Windows\System32\thumbcache.dll'
36121a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
36131a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36141a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
36151a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'shcore.dll'.
36161a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'user32.dll'.
36171a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'gdi32.dll'.
36181a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'shell32.dll'.
36191a18.fa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'propsys.dll'.
36201a18.fa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\thumbcache.dll)WinVerifyTrust
36211a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\thumbcache.dll
36221a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
36231a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll'
36241a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
36251a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
36261a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
36271a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36281a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
36291a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
36301a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
36311a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
36321a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll'
36331a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
36341a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
36351a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll'
36361a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
36371a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
36381a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll'
36391a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
36401a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36411a18.fa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
36421a18.fa0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
36431a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\thumbcache.dll
36441a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=comctl32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36451a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'comctl32.dll' -> 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll' [rcNt=0x0]
36461a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll
36471a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9082b0000 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1\comctl32.dll'
36481a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff906260000 'C:\Windows\System32\thumbcache.dll'
36491a18.fa0: '\Device\HarddiskVolume3\Windows\System32\imageres.dll' has no imports
36501a18.fa0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\imageres.dll)
36511a18.fa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imageres.dll
36521a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001258 pwszName=\Device\HarddiskVolume3\Windows\System32\imageres.dll
36531a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000b9b990
36541a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000b9b990
36551a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7467EB099B57A749CBEA853CF14DF9A93862B832
36561a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36571a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
36581a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90a190000 'C:\Windows\system32\rsaenh.dll'
36591a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=crypt32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36601a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'crypt32.dll' -> 'C:\Windows\system32\crypt32.dll' [rcNt=0xc0150008]
36611a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
36621a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ae10000 'C:\Windows\system32\crypt32.dll'
36631a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~6.3.9600.16384.cat'; file='\Device\HarddiskVolume3\Windows\System32\imageres.dll'
36641a18.fa0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
36651a18.fa0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imageres.dll'
36661a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\windowscodecs.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
36671a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll
36681a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff907330000 'C:\Windows\system32\windowscodecs.dll'
36691a18.fa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imageres.dll
36701a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36711a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36721a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
36731a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36741a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36751a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
36761a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36771a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36781a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
36791a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=OLEAUT32.DLL *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36801a18.fa0: supR3HardenedMonitor_LdrLoadDll: 'OLEAUT32.DLL' -> 'C:\Windows\system32\OLEAUT32.DLL' [rcNt=0xc0150008]
36811a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
36821a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90b4e0000 'C:\Windows\system32\OLEAUT32.DLL'
36831a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msctf.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
36841a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
36851a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ba40000 'C:\Windows\system32\msctf.dll'
36861a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msctf.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
36871a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
36881a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ba40000 'C:\Windows\system32\msctf.dll'
36891a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36901a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36911a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
36921a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36931a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36941a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
36951a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36961a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36971a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
36981a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
36991a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37001a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37011a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37021a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37031a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37041a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37051a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37061a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37071a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37081a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37091a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37101a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37111a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37121a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37131a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37141a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37151a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37161a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37171a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37181a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37191a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37201a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37211a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37221a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37231a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37241a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37251a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37261a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37271a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37281a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37291a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37301a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37311a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37321a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37331a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37341a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37351a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37361a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37371a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37381a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37391a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37401a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37411a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37421a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37431a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37441a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37451a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37461a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37471a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37481a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37491a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37501a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37511a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37521a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37531a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37541a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37551a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37561a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37571a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37581a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37591a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37601a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37611a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37621a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37631a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37641a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37651a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37661a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37671a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37681a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37691a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37701a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37711a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37721a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37731a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37741a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37751a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37761a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37771a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37781a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37791a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37801a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37811a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37821a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37831a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37841a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37851a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37861a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37871a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37881a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37891a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37901a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37911a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37921a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37931a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37941a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37951a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37961a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
37971a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
37981a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37991a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38001a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38011a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38021a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38031a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38041a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38051a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38061a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38071a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38081a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38091a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38101a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38111a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38121a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38131a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38141a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38151a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38161a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38171a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38181a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38191a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38201a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38211a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38221a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38231a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38241a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38251a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38261a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38271a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38281a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38291a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38301a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38311a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38321a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38331a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38341a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38351a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38361a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38371a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38381a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38391a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38401a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38411a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38421a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38431a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38441a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38451a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38461a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38471a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38481a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38491a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38501a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38511a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38521a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38531a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38541a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38551a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38561a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38571a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38581a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38591a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38601a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38611a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38621a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38631a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38641a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38651a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38661a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38671a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38681a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38691a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38701a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38711a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38721a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38731a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38741a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38751a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38761a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38771a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38781a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38791a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38801a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38811a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38821a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38831a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38841a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38851a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38861a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38871a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38881a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38891a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38901a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38911a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38921a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38931a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38941a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38951a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38961a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
38971a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
38981a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
38991a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39001a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39011a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39021a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39031a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39041a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39051a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39061a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39071a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39081a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39091a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39101a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39111a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39121a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39131a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39141a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39151a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39161a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39171a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39181a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39191a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39201a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39211a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39221a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39231a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39241a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39251a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39261a18.fa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39271a18.fa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
39281a18.fa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bf00000 'C:\Windows\system32\shell32.dll'
39291a18.430: supR3HardenedMonitor_LdrLoadDll: pName=OPENGL32 *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
39301a18.430: supR3HardenedMonitor_LdrLoadDll: 'OPENGL32' -> 'C:\Windows\system32\OPENGL32.dll' [rcNt=0xc0150008]
39311a18.430: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
39321a18.430: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fd9c0000 'C:\Windows\system32\OPENGL32.dll'
39331a18.fa0: Terminating the normal way: rcExit=0
39341bb0.1900: supR3HardenedWinDoReSpawn(2): Quitting: ExitCode=0x0 rcNt=0x0
393519d0.19d8: supR3HardenedWinDoReSpawn(1): Quitting: ExitCode=0x0 rcNt=0x0

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy