VirtualBox

Ticket #13782: VBoxStartup.log

File VBoxStartup.log, 498.8 KB (added by mrubioroy, 10 years ago)

VBoxStartup.log

Line 
11550.1554: Log file opened: 4.3.20r96997 g_hStartupLog=00000fe8 g_uNtVerCombined=0x510a2830
21550.1554: \SystemRoot\System32\ntdll.dll:
31550.1554: CreationTime: 2010-12-09T15:16:05.000000000Z
41550.1554: LastWriteTime: 2010-12-09T15:16:05.000000000Z
51550.1554: ChangeTime: 2012-11-12T10:28:56.906250000Z
61550.1554: FileAttributes: 0x20
71550.1554: Size: 0xb5800
81550.1554: NT Headers: 0xd0
91550.1554: Timestamp: 0x4d00f2b5
101550.1554: Machine: 0x14c - i386
111550.1554: Timestamp: 0x4d00f2b5
121550.1554: Image Version: 5.1
131550.1554: SizeOfImage: 0xb9000 (757760)
141550.1554: Resource Dir: 0x83000 LB 0x320d4
151550.1554: \SystemRoot\System32\kernel32.dll:
161550.1554: CreationTime: 2009-06-08T04:42:01.000000000Z
171550.1554: LastWriteTime: 2014-03-12T10:48:57.000000000Z
181550.1554: ChangeTime: 2014-04-25T01:04:20.343750000Z
191550.1554: FileAttributes: 0x20
201550.1554: Size: 0x102600
211550.1554: NT Headers: 0xf0
221550.1554: Timestamp: 0x53203b99
231550.1554: Machine: 0x14c - i386
241550.1554: Timestamp: 0x53203b99
251550.1554: Image Version: 5.1
261550.1554: SizeOfImage: 0x106000 (1073152)
271550.1554: Resource Dir: 0x8a000 LB 0x75c48
281550.1554: Found driver SymEvent (0x2)
291550.1554: Found driver SRTSPX (0x2)
301550.1554: supR3HardenedWinFindAdversaries: 0x2
311550.1554: Calling main()
321550.1554: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
331550.1554: SUPR3HardenedMain: Respawn #1
341550.1554: System32: \Device\HarddiskVolume1\WINDOWS\system32
351550.1554: WinSxS: \Device\HarddiskVolume1\WINDOWS\WinSxS
361550.1554: KnownDllPath: C:\WINDOWS\system32
371550.1554: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
381550.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe)
391550.1554: supR3HardNtEnableThreadCreation:
401550.1554: supR3HardNtDisableThreadCreation: pvLdrInitThunk=7c911166 pvNtTerminateThread=7c91de7e
411550.1554: supR3HardenedWinDoReSpawn(1): New child 1558.155c [kernel32].
421550.1554: supR3HardNtChildGatherData: PebBaseAddress=7ffd7000 cbPeb=0x20c
431550.1554: supR3HardNtPuChFindNtdll: uNtDllParentAddr=7c910000 uNtDllChildAddr=7c910000
441550.1554: supR3HardenedWinSetupChildInit: uLdrInitThunk=7c911166
451550.1554: supR3HardenedWinSetupChildInit: Start child.
461550.1554: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
471550.1554: supR3HardNtChildPurify: Startup delay kludge #1/0: 518 ms, 0 sleeps
481550.1554: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
491550.1554: *00000000-fffeffff 0x0001/0x0000 0x0000000
501550.1554: *00010000-0000efff 0x0004/0x0004 0x0020000
511550.1554: 00011000-00001fff 0x0001/0x0000 0x0000000
521550.1554: *00020000-0001efff 0x0004/0x0004 0x0020000
531550.1554: 00021000-00011fff 0x0001/0x0000 0x0000000
541550.1554: *00030000-fff31fff 0x0000/0x0004 0x0020000
551550.1554: 0012e000-0012cfff 0x0104/0x0004 0x0020000
561550.1554: 0012f000-0012dfff 0x0004/0x0004 0x0020000
571550.1554: *00130000-0012cfff 0x0002/0x0002 0x0040000
581550.1554: 00133000-ffe65fff 0x0001/0x0000 0x0000000
591550.1554: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
601550.1554: 00401000-0038cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
611550.1554: 00475000-00473fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
621550.1554: 00476000-00448fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
631550.1554: 004a3000-004a1fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
641550.1554: 004a4000-004a2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
651550.1554: 004a5000-004a3fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
661550.1554: 004a6000-004a4fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
671550.1554: 004a7000-004a4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
681550.1554: 004a9000-004a5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
691550.1554: 004ac000-00478fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
701550.1554: 004df000-840adfff 0x0001/0x0000 0x0000000
711550.1554: *7c910000-7c90efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
721550.1554: 7c911000-7c893fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
731550.1554: 7c98e000-7c988fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
741550.1554: 7c993000-7c95cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
751550.1554: 7c9c9000-793e1fff 0x0001/0x0000 0x0000000
761550.1554: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000
771550.1554: 7ffd4000-7ffd0fff 0x0001/0x0000 0x0000000
781550.1554: *7ffd7000-7ffd5fff 0x0004/0x0004 0x0020000
791550.1554: 7ffd8000-7ffd0fff 0x0001/0x0000 0x0000000
801550.1554: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
811550.1554: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
821550.1554: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
831550.1554: VirtualBox.exe: timestamp 0x5473137a (rc=VINF_SUCCESS)
841550.1554: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
851550.1554: '\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll' has no imports
861550.1554: ntdll.dll: Differences in section #3 (.rsrc) between file and memory:
871550.1554: 7c9c50d4 / 0x00b50d4: 00 != 50
881550.1554: 7c9c50d5 / 0x00b50d5: 00 != 41
891550.1554: 7c9c50d6 / 0x00b50d6: 00 != 44
901550.1554: 7c9c50d7 / 0x00b50d7: 00 != 44
911550.1554: 7c9c50d8 / 0x00b50d8: 00 != 49
921550.1554: 7c9c50d9 / 0x00b50d9: 00 != 4e
931550.1554: 7c9c50da / 0x00b50da: 00 != 47
941550.1554: 7c9c50db / 0x00b50db: 00 != 58
951550.1554: 7c9c50dc / 0x00b50dc: 00 != 58
961550.1554: 7c9c50dd / 0x00b50dd: 00 != 50
971550.1554: 7c9c50de / 0x00b50de: 00 != 41
981550.1554: 7c9c50df / 0x00b50df: 00 != 44
991550.1554: 7c9c50e0 / 0x00b50e0: 00 != 44
1001550.1554: 7c9c50e1 / 0x00b50e1: 00 != 49
1011550.1554: 7c9c50e2 / 0x00b50e2: 00 != 4e
1021550.1554: 7c9c50e3 / 0x00b50e3: 00 != 47
1031550.1554: 7c9c50e4 / 0x00b50e4: 00 != 50
1041550.1554: 7c9c50e5 / 0x00b50e5: 00 != 41
1051550.1554: 7c9c50e6 / 0x00b50e6: 00 != 44
1061550.1554: 7c9c50e7 / 0x00b50e7: 00 != 44
1071550.1554: 7c9c50e8 / 0x00b50e8: 00 != 49
1081550.1554: 7c9c50e9 / 0x00b50e9: 00 != 4e
1091550.1554: 7c9c50ea / 0x00b50ea: 00 != 47
1101550.1554: 7c9c50eb / 0x00b50eb: 00 != 58
1111550.1554: 7c9c50ec / 0x00b50ec: 00 != 58
1121550.1554: 7c9c50ed / 0x00b50ed: 00 != 50
1131550.1554: 7c9c50ee / 0x00b50ee: 00 != 41
1141550.1554: 7c9c50ef / 0x00b50ef: 00 != 44
1151550.1554: 7c9c50f0 / 0x00b50f0: 00 != 44
1161550.1554: 7c9c50f1 / 0x00b50f1: 00 != 49
1171550.1554: 7c9c50f2 / 0x00b50f2: 00 != 4e
1181550.1554: 7c9c50f3 / 0x00b50f3: 00 != 47
1191550.1554: 7c9c50f4 / 0x00b50f4: 00 != 50
1201550.1554: 7c9c50f5 / 0x00b50f5: 00 != 41
1211550.1554: 7c9c50f6 / 0x00b50f6: 00 != 44
1221550.1554: 7c9c50f7 / 0x00b50f7: 00 != 44
1231550.1554: 7c9c50f8 / 0x00b50f8: 00 != 49
1241550.1554: 7c9c50f9 / 0x00b50f9: 00 != 4e
1251550.1554: 7c9c50fa / 0x00b50fa: 00 != 47
1261550.1554: 7c9c50fb / 0x00b50fb: 00 != 58
1271550.1554: 7c9c50fc / 0x00b50fc: 00 != 58
1281550.1554: 7c9c50fd / 0x00b50fd: 00 != 50
1291550.1554: 7c9c50fe / 0x00b50fe: 00 != 41
1301550.1554: 7c9c50ff / 0x00b50ff: 00 != 44
1311550.1554: 7c9c5100 / 0x00b5100: 00 != 44
1321550.1554: 7c9c5101 / 0x00b5101: 00 != 49
1331550.1554: 7c9c5102 / 0x00b5102: 00 != 4e
1341550.1554: 7c9c5103 / 0x00b5103: 00 != 47
1351550.1554: 7c9c5104 / 0x00b5104: 00 != 50
1361550.1554: 7c9c5105 / 0x00b5105: 00 != 41
1371550.1554: 7c9c5106 / 0x00b5106: 00 != 44
1381550.1554: 7c9c5107 / 0x00b5107: 00 != 44
1391550.1554: 7c9c5108 / 0x00b5108: 00 != 49
1401550.1554: 7c9c5109 / 0x00b5109: 00 != 4e
1411550.1554: 7c9c510a / 0x00b510a: 00 != 47
1421550.1554: 7c9c510b / 0x00b510b: 00 != 58
1431550.1554: 7c9c510c / 0x00b510c: 00 != 58
1441550.1554: 7c9c510d / 0x00b510d: 00 != 50
1451550.1554: 7c9c510e / 0x00b510e: 00 != 41
1461550.1554: 7c9c510f / 0x00b510f: 00 != 44
1471550.1554: 7c9c5110 / 0x00b5110: 00 != 44
1481550.1554: 7c9c5111 / 0x00b5111: 00 != 49
1491550.1554: 7c9c5112 / 0x00b5112: 00 != 4e
1501550.1554: 7c9c5113 / 0x00b5113: 00 != 47
1511550.1554: 7c9c5114 / 0x00b5114: 00 != 50
1521550.1554: 7c9c5115 / 0x00b5115: 00 != 41
1531550.1554: 7c9c5116 / 0x00b5116: 00 != 44
1541550.1554: 7c9c5117 / 0x00b5117: 00 != 44
1551550.1554: 7c9c5118 / 0x00b5118: 00 != 49
1561550.1554: 7c9c5119 / 0x00b5119: 00 != 4e
1571550.1554: 7c9c511a / 0x00b511a: 00 != 47
1581550.1554: 7c9c511b / 0x00b511b: 00 != 58
1591550.1554: 7c9c511c / 0x00b511c: 00 != 58
1601550.1554: 7c9c511d / 0x00b511d: 00 != 50
1611550.1554: 7c9c511e / 0x00b511e: 00 != 41
1621550.1554: 7c9c511f / 0x00b511f: 00 != 44
1631550.1554: 7c9c5120 / 0x00b5120: 00 != 44
1641550.1554: 7c9c5121 / 0x00b5121: 00 != 49
1651550.1554: 7c9c5122 / 0x00b5122: 00 != 4e
1661550.1554: 7c9c5123 / 0x00b5123: 00 != 47
1671550.1554: 7c9c5124 / 0x00b5124: 00 != 50
1681550.1554: 7c9c5125 / 0x00b5125: 00 != 41
1691550.1554: 7c9c5126 / 0x00b5126: 00 != 44
1701550.1554: 7c9c5127 / 0x00b5127: 00 != 44
1711550.1554: 7c9c5128 / 0x00b5128: 00 != 49
1721550.1554: 7c9c5129 / 0x00b5129: 00 != 4e
1731550.1554: 7c9c512a / 0x00b512a: 00 != 47
1741550.1554: 7c9c512b / 0x00b512b: 00 != 58
1751550.1554: 7c9c512c / 0x00b512c: 00 != 58
1761550.1554: 7c9c512d / 0x00b512d: 00 != 50
1771550.1554: 7c9c512e / 0x00b512e: 00 != 41
1781550.1554: 7c9c512f / 0x00b512f: 00 != 44
1791550.1554: 7c9c5130 / 0x00b5130: 00 != 44
1801550.1554: 7c9c5131 / 0x00b5131: 00 != 49
1811550.1554: 7c9c5132 / 0x00b5132: 00 != 4e
1821550.1554: 7c9c5133 / 0x00b5133: 00 != 47
1831550.1554: 7c9c5134 / 0x00b5134: 00 != 50
1841550.1554: 7c9c5135 / 0x00b5135: 00 != 41
1851550.1554: 7c9c5136 / 0x00b5136: 00 != 44
1861550.1554: 7c9c5137 / 0x00b5137: 00 != 44
1871550.1554: 7c9c5138 / 0x00b5138: 00 != 49
1881550.1554: 7c9c5139 / 0x00b5139: 00 != 4e
1891550.1554: 7c9c513a / 0x00b513a: 00 != 47
1901550.1554: 7c9c513b / 0x00b513b: 00 != 58
1911550.1554: 7c9c513c / 0x00b513c: 00 != 58
1921550.1554: 7c9c513d / 0x00b513d: 00 != 50
1931550.1554: 7c9c513e / 0x00b513e: 00 != 41
1941550.1554: 7c9c513f / 0x00b513f: 00 != 44
1951550.1554: 7c9c5140 / 0x00b5140: 00 != 44
1961550.1554: 7c9c5141 / 0x00b5141: 00 != 49
1971550.1554: 7c9c5142 / 0x00b5142: 00 != 4e
1981550.1554: 7c9c5143 / 0x00b5143: 00 != 47
1991550.1554: 7c9c5144 / 0x00b5144: 00 != 50
2001550.1554: 7c9c5145 / 0x00b5145: 00 != 41
2011550.1554: 7c9c5146 / 0x00b5146: 00 != 44
2021550.1554: 7c9c5147 / 0x00b5147: 00 != 44
2031550.1554: 7c9c5148 / 0x00b5148: 00 != 49
2041550.1554: 7c9c5149 / 0x00b5149: 00 != 4e
2051550.1554: 7c9c514a / 0x00b514a: 00 != 47
2061550.1554: 7c9c514b / 0x00b514b: 00 != 58
2071550.1554: 7c9c514c / 0x00b514c: 00 != 58
2081550.1554: 7c9c514d / 0x00b514d: 00 != 50
2091550.1554: 7c9c514e / 0x00b514e: 00 != 41
2101550.1554: 7c9c514f / 0x00b514f: 00 != 44
2111550.1554: 7c9c5150 / 0x00b5150: 00 != 44
2121550.1554: 7c9c5151 / 0x00b5151: 00 != 49
2131550.1554: 7c9c5152 / 0x00b5152: 00 != 4e
2141550.1554: 7c9c5153 / 0x00b5153: 00 != 47
2151550.1554: 7c9c5154 / 0x00b5154: 00 != 50
2161550.1554: 7c9c5155 / 0x00b5155: 00 != 41
2171550.1554: 7c9c5156 / 0x00b5156: 00 != 44
2181550.1554: 7c9c5157 / 0x00b5157: 00 != 44
2191550.1554: 7c9c5158 / 0x00b5158: 00 != 49
2201550.1554: 7c9c5159 / 0x00b5159: 00 != 4e
2211550.1554: 7c9c515a / 0x00b515a: 00 != 47
2221550.1554: 7c9c515b / 0x00b515b: 00 != 58
2231550.1554: 7c9c515c / 0x00b515c: 00 != 58
2241550.1554: 7c9c515d / 0x00b515d: 00 != 50
2251550.1554: 7c9c515e / 0x00b515e: 00 != 41
2261550.1554: 7c9c515f / 0x00b515f: 00 != 44
2271550.1554: 7c9c5160 / 0x00b5160: 00 != 44
2281550.1554: 7c9c5161 / 0x00b5161: 00 != 49
2291550.1554: 7c9c5162 / 0x00b5162: 00 != 4e
2301550.1554: 7c9c5163 / 0x00b5163: 00 != 47
2311550.1554: 7c9c5164 / 0x00b5164: 00 != 50
2321550.1554: 7c9c5165 / 0x00b5165: 00 != 41
2331550.1554: 7c9c5166 / 0x00b5166: 00 != 44
2341550.1554: 7c9c5167 / 0x00b5167: 00 != 44
2351550.1554: 7c9c5168 / 0x00b5168: 00 != 49
2361550.1554: 7c9c5169 / 0x00b5169: 00 != 4e
2371550.1554: 7c9c516a / 0x00b516a: 00 != 47
2381550.1554: 7c9c516b / 0x00b516b: 00 != 58
2391550.1554: 7c9c516c / 0x00b516c: 00 != 58
2401550.1554: 7c9c516d / 0x00b516d: 00 != 50
2411550.1554: 7c9c516e / 0x00b516e: 00 != 41
2421550.1554: 7c9c516f / 0x00b516f: 00 != 44
2431550.1554: 7c9c5170 / 0x00b5170: 00 != 44
2441550.1554: 7c9c5171 / 0x00b5171: 00 != 49
2451550.1554: 7c9c5172 / 0x00b5172: 00 != 4e
2461550.1554: 7c9c5173 / 0x00b5173: 00 != 47
2471550.1554: 7c9c5174 / 0x00b5174: 00 != 50
2481550.1554: 7c9c5175 / 0x00b5175: 00 != 41
2491550.1554: 7c9c5176 / 0x00b5176: 00 != 44
2501550.1554: 7c9c5177 / 0x00b5177: 00 != 44
2511550.1554: 7c9c5178 / 0x00b5178: 00 != 49
2521550.1554: 7c9c5179 / 0x00b5179: 00 != 4e
2531550.1554: 7c9c517a / 0x00b517a: 00 != 47
2541550.1554: 7c9c517b / 0x00b517b: 00 != 58
2551550.1554: 7c9c517c / 0x00b517c: 00 != 58
2561550.1554: 7c9c517d / 0x00b517d: 00 != 50
2571550.1554: 7c9c517e / 0x00b517e: 00 != 41
2581550.1554: 7c9c517f / 0x00b517f: 00 != 44
2591550.1554: 7c9c5180 / 0x00b5180: 00 != 44
2601550.1554: 7c9c5181 / 0x00b5181: 00 != 49
2611550.1554: 7c9c5182 / 0x00b5182: 00 != 4e
2621550.1554: 7c9c5183 / 0x00b5183: 00 != 47
2631550.1554: 7c9c5184 / 0x00b5184: 00 != 50
2641550.1554: 7c9c5185 / 0x00b5185: 00 != 41
2651550.1554: 7c9c5186 / 0x00b5186: 00 != 44
2661550.1554: 7c9c5187 / 0x00b5187: 00 != 44
2671550.1554: 7c9c5188 / 0x00b5188: 00 != 49
2681550.1554: 7c9c5189 / 0x00b5189: 00 != 4e
2691550.1554: 7c9c518a / 0x00b518a: 00 != 47
2701550.1554: 7c9c518b / 0x00b518b: 00 != 58
2711550.1554: 7c9c518c / 0x00b518c: 00 != 58
2721550.1554: 7c9c518d / 0x00b518d: 00 != 50
2731550.1554: 7c9c518e / 0x00b518e: 00 != 41
2741550.1554: 7c9c518f / 0x00b518f: 00 != 44
2751550.1554: 7c9c5190 / 0x00b5190: 00 != 44
2761550.1554: 7c9c5191 / 0x00b5191: 00 != 49
2771550.1554: 7c9c5192 / 0x00b5192: 00 != 4e
2781550.1554: 7c9c5193 / 0x00b5193: 00 != 47
2791550.1554: 7c9c5194 / 0x00b5194: 00 != 50
2801550.1554: 7c9c5195 / 0x00b5195: 00 != 41
2811550.1554: 7c9c5196 / 0x00b5196: 00 != 44
2821550.1554: 7c9c5197 / 0x00b5197: 00 != 44
2831550.1554: 7c9c5198 / 0x00b5198: 00 != 49
2841550.1554: 7c9c5199 / 0x00b5199: 00 != 4e
2851550.1554: 7c9c519a / 0x00b519a: 00 != 47
2861550.1554: 7c9c519b / 0x00b519b: 00 != 58
2871550.1554: 7c9c519c / 0x00b519c: 00 != 58
2881550.1554: 7c9c519d / 0x00b519d: 00 != 50
2891550.1554: 7c9c519e / 0x00b519e: 00 != 41
2901550.1554: 7c9c519f / 0x00b519f: 00 != 44
2911550.1554: 7c9c51a0 / 0x00b51a0: 00 != 44
2921550.1554: 7c9c51a1 / 0x00b51a1: 00 != 49
2931550.1554: 7c9c51a2 / 0x00b51a2: 00 != 4e
2941550.1554: 7c9c51a3 / 0x00b51a3: 00 != 47
2951550.1554: 7c9c51a4 / 0x00b51a4: 00 != 50
2961550.1554: 7c9c51a5 / 0x00b51a5: 00 != 41
2971550.1554: 7c9c51a6 / 0x00b51a6: 00 != 44
2981550.1554: 7c9c51a7 / 0x00b51a7: 00 != 44
2991550.1554: 7c9c51a8 / 0x00b51a8: 00 != 49
3001550.1554: 7c9c51a9 / 0x00b51a9: 00 != 4e
3011550.1554: 7c9c51aa / 0x00b51aa: 00 != 47
3021550.1554: 7c9c51ab / 0x00b51ab: 00 != 58
3031550.1554: 7c9c51ac / 0x00b51ac: 00 != 58
3041550.1554: 7c9c51ad / 0x00b51ad: 00 != 50
3051550.1554: 7c9c51ae / 0x00b51ae: 00 != 41
3061550.1554: 7c9c51af / 0x00b51af: 00 != 44
3071550.1554: 7c9c51b0 / 0x00b51b0: 00 != 44
3081550.1554: 7c9c51b1 / 0x00b51b1: 00 != 49
3091550.1554: 7c9c51b2 / 0x00b51b2: 00 != 4e
3101550.1554: 7c9c51b3 / 0x00b51b3: 00 != 47
3111550.1554: 7c9c51b4 / 0x00b51b4: 00 != 50
3121550.1554: 7c9c51b5 / 0x00b51b5: 00 != 41
3131550.1554: 7c9c51b6 / 0x00b51b6: 00 != 44
3141550.1554: 7c9c51b7 / 0x00b51b7: 00 != 44
3151550.1554: 7c9c51b8 / 0x00b51b8: 00 != 49
3161550.1554: 7c9c51b9 / 0x00b51b9: 00 != 4e
3171550.1554: 7c9c51ba / 0x00b51ba: 00 != 47
3181550.1554: 7c9c51bb / 0x00b51bb: 00 != 58
3191550.1554: 7c9c51bc / 0x00b51bc: 00 != 58
3201550.1554: 7c9c51bd / 0x00b51bd: 00 != 50
3211550.1554: 7c9c51be / 0x00b51be: 00 != 41
3221550.1554: 7c9c51bf / 0x00b51bf: 00 != 44
3231550.1554: 7c9c51c0 / 0x00b51c0: 00 != 44
3241550.1554: 7c9c51c1 / 0x00b51c1: 00 != 49
3251550.1554: 7c9c51c2 / 0x00b51c2: 00 != 4e
3261550.1554: 7c9c51c3 / 0x00b51c3: 00 != 47
3271550.1554: 7c9c51c4 / 0x00b51c4: 00 != 50
3281550.1554: 7c9c51c5 / 0x00b51c5: 00 != 41
3291550.1554: 7c9c51c6 / 0x00b51c6: 00 != 44
3301550.1554: 7c9c51c7 / 0x00b51c7: 00 != 44
3311550.1554: 7c9c51c8 / 0x00b51c8: 00 != 49
3321550.1554: 7c9c51c9 / 0x00b51c9: 00 != 4e
3331550.1554: 7c9c51ca / 0x00b51ca: 00 != 47
3341550.1554: 7c9c51cb / 0x00b51cb: 00 != 58
3351550.1554: 7c9c51cc / 0x00b51cc: 00 != 58
3361550.1554: 7c9c51cd / 0x00b51cd: 00 != 50
3371550.1554: 7c9c51ce / 0x00b51ce: 00 != 41
3381550.1554: 7c9c51cf / 0x00b51cf: 00 != 44
3391550.1554: 7c9c51d0 / 0x00b51d0: 00 != 44
3401550.1554: 7c9c51d1 / 0x00b51d1: 00 != 49
3411550.1554: 7c9c51d2 / 0x00b51d2: 00 != 4e
3421550.1554: 7c9c51d3 / 0x00b51d3: 00 != 47
3431550.1554: 7c9c51d4 / 0x00b51d4: 00 != 50
3441550.1554: 7c9c51d5 / 0x00b51d5: 00 != 41
3451550.1554: 7c9c51d6 / 0x00b51d6: 00 != 44
3461550.1554: 7c9c51d7 / 0x00b51d7: 00 != 44
3471550.1554: 7c9c51d8 / 0x00b51d8: 00 != 49
3481550.1554: 7c9c51d9 / 0x00b51d9: 00 != 4e
3491550.1554: 7c9c51da / 0x00b51da: 00 != 47
3501550.1554: 7c9c51db / 0x00b51db: 00 != 58
3511550.1554: 7c9c51dc / 0x00b51dc: 00 != 58
3521550.1554: 7c9c51dd / 0x00b51dd: 00 != 50
3531550.1554: 7c9c51de / 0x00b51de: 00 != 41
3541550.1554: 7c9c51df / 0x00b51df: 00 != 44
3551550.1554: 7c9c51e0 / 0x00b51e0: 00 != 44
3561550.1554: 7c9c51e1 / 0x00b51e1: 00 != 49
3571550.1554: 7c9c51e2 / 0x00b51e2: 00 != 4e
3581550.1554: 7c9c51e3 / 0x00b51e3: 00 != 47
3591550.1554: 7c9c51e4 / 0x00b51e4: 00 != 50
3601550.1554: 7c9c51e5 / 0x00b51e5: 00 != 41
3611550.1554: 7c9c51e6 / 0x00b51e6: 00 != 44
3621550.1554: 7c9c51e7 / 0x00b51e7: 00 != 44
3631550.1554: 7c9c51e8 / 0x00b51e8: 00 != 49
3641550.1554: 7c9c51e9 / 0x00b51e9: 00 != 4e
3651550.1554: 7c9c51ea / 0x00b51ea: 00 != 47
3661550.1554: 7c9c51eb / 0x00b51eb: 00 != 58
3671550.1554: 7c9c51ec / 0x00b51ec: 00 != 58
3681550.1554: 7c9c51ed / 0x00b51ed: 00 != 50
3691550.1554: 7c9c51ee / 0x00b51ee: 00 != 41
3701550.1554: 7c9c51ef / 0x00b51ef: 00 != 44
3711550.1554: 7c9c51f0 / 0x00b51f0: 00 != 44
3721550.1554: 7c9c51f1 / 0x00b51f1: 00 != 49
3731550.1554: 7c9c51f2 / 0x00b51f2: 00 != 4e
3741550.1554: 7c9c51f3 / 0x00b51f3: 00 != 47
3751550.1554: 7c9c51f4 / 0x00b51f4: 00 != 50
3761550.1554: 7c9c51f5 / 0x00b51f5: 00 != 41
3771550.1554: 7c9c51f6 / 0x00b51f6: 00 != 44
3781550.1554: 7c9c51f7 / 0x00b51f7: 00 != 44
3791550.1554: 7c9c51f8 / 0x00b51f8: 00 != 49
3801550.1554: 7c9c51f9 / 0x00b51f9: 00 != 4e
3811550.1554: 7c9c51fa / 0x00b51fa: 00 != 47
3821550.1554: 7c9c51fb / 0x00b51fb: 00 != 58
3831550.1554: 7c9c51fc / 0x00b51fc: 00 != 58
3841550.1554: 7c9c51fd / 0x00b51fd: 00 != 50
3851550.1554: 7c9c51fe / 0x00b51fe: 00 != 41
3861550.1554: 7c9c51ff / 0x00b51ff: 00 != 44
3871550.1554: Restored 0xf2c bytes of original file content at 7c9c50d4
3881550.1554: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x2
3891550.1554: supR3HardNtChildPurify: Startup delay kludge #1/1: 518 ms, 0 sleeps
3901550.1554: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3911550.1554: *00000000-fffeffff 0x0001/0x0000 0x0000000
3921550.1554: *00010000-0000efff 0x0004/0x0004 0x0020000
3931550.1554: 00011000-00001fff 0x0001/0x0000 0x0000000
3941550.1554: *00020000-0001efff 0x0004/0x0004 0x0020000
3951550.1554: 00021000-00011fff 0x0001/0x0000 0x0000000
3961550.1554: *00030000-fff31fff 0x0000/0x0004 0x0020000
3971550.1554: 0012e000-0012cfff 0x0104/0x0004 0x0020000
3981550.1554: 0012f000-0012dfff 0x0004/0x0004 0x0020000
3991550.1554: *00130000-0012cfff 0x0002/0x0002 0x0040000
4001550.1554: 00133000-ffe65fff 0x0001/0x0000 0x0000000
4011550.1554: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4021550.1554: 00401000-0038cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4031550.1554: 00475000-00473fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4041550.1554: 00476000-00448fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4051550.1554: 004a3000-00499fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4061550.1554: 004ac000-00478fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4071550.1554: 004df000-840adfff 0x0001/0x0000 0x0000000
4081550.1554: *7c910000-7c90efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
4091550.1554: 7c911000-7c893fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
4101550.1554: 7c98e000-7c989fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
4111550.1554: 7c992000-7c990fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
4121550.1554: 7c993000-7c95cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
4131550.1554: 7c9c9000-793e1fff 0x0001/0x0000 0x0000000
4141550.1554: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000
4151550.1554: 7ffd4000-7ffd0fff 0x0001/0x0000 0x0000000
4161550.1554: *7ffd7000-7ffd5fff 0x0004/0x0004 0x0020000
4171550.1554: 7ffd8000-7ffd0fff 0x0001/0x0000 0x0000000
4181550.1554: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
4191550.1554: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
4201550.1554: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
4211550.1554: supR3HardNtChildPurify: Done after 1191 ms and 1 fixes (loop #1).
4221550.1554: supR3HardNtEnableThreadCreation:
4231558.155c: Log file opened: 4.3.20r96997 g_hStartupLog=00000ffc g_uNtVerCombined=0x510a2830
4241558.155c: supR3HardenedVmProcessInit: uNtDllAddr=7c910000
4251558.155c: ntdll.dll: timestamp 0x4d00f2b5 (rc=VINF_SUCCESS)
4261558.155c: System32: \Device\HarddiskVolume1\WINDOWS\system32
4271558.155c: WinSxS: \Device\HarddiskVolume1\WINDOWS\WinSxS
4281558.155c: KnownDllPath: C:\WINDOWS\system32
4291558.155c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
4301558.155c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4311558.155c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4321558.155c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=7c911166 pvNtTerminateThread=7c91de7e
4331550.1554: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 14 ms.
4341558.155c: \SystemRoot\System32\ntdll.dll:
4351558.155c: CreationTime: 2010-12-09T15:16:05.000000000Z
4361558.155c: LastWriteTime: 2010-12-09T15:16:05.000000000Z
4371558.155c: ChangeTime: 2012-11-12T10:28:56.906250000Z
4381558.155c: FileAttributes: 0x20
4391558.155c: Size: 0xb5800
4401558.155c: NT Headers: 0xd0
4411558.155c: Timestamp: 0x4d00f2b5
4421558.155c: Machine: 0x14c - i386
4431558.155c: Timestamp: 0x4d00f2b5
4441558.155c: Image Version: 5.1
4451558.155c: SizeOfImage: 0xb9000 (757760)
4461558.155c: Resource Dir: 0x83000 LB 0x320d4
4471558.155c: \SystemRoot\System32\kernel32.dll:
4481558.155c: CreationTime: 2009-06-08T04:42:01.000000000Z
4491558.155c: LastWriteTime: 2014-03-12T10:48:57.000000000Z
4501558.155c: ChangeTime: 2014-04-25T01:04:20.343750000Z
4511558.155c: FileAttributes: 0x20
4521558.155c: Size: 0x102600
4531558.155c: NT Headers: 0xf0
4541558.155c: Timestamp: 0x53203b99
4551558.155c: Machine: 0x14c - i386
4561558.155c: Timestamp: 0x53203b99
4571558.155c: Image Version: 5.1
4581558.155c: SizeOfImage: 0x106000 (1073152)
4591558.155c: Resource Dir: 0x8a000 LB 0x75c48
4601558.155c: Found driver SymEvent (0x2)
4611558.155c: Found driver SRTSPX (0x2)
4621558.155c: supR3HardenedWinFindAdversaries: 0x2
4631558.155c: Calling main()
4641558.155c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
4651558.155c: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
4661558.155c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe)
4671558.155c: SUPR3HardenedMain: Respawn #2
4681558.155c: supR3HardNtEnableThreadCreation:
4691558.155c: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
4701558.155c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe)
4711558.155c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
4721558.155c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
4731558.155c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll)
4741558.155c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll
4751558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4761558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4771558.155c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
4781558.155c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'secur32.dll'.
4791558.155c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll)
4801558.155c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll
4811558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
4821558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll' [rcNtRedir=0xc0150008]
4831558.155c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
4841558.155c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll)
4851558.155c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
4861558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
4871558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
4881558.155c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
4891558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
4901558.155c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
4911558.155c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
4921558.155c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x1000 pwszSearchPath=00000000:<flags> [calling]
4931558.155c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
4941558.155c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
4951558.155c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77da0000 'C:\WINDOWS\system32\ADVAPI32.DLL'
4961558.155c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
4971558.155c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (Input=advapi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00245da0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
4981558.155c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77da0000 'C:\WINDOWS\system32\advapi32.dll'
4991558.155c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=7c911166 pvNtTerminateThread=7c91de7e
5001558.155c: supR3HardenedWinDoReSpawn(2): New child 16e0.16e4 [kernel32].
5011558.155c: supR3HardNtChildGatherData: PebBaseAddress=7ffd4000 cbPeb=0x20c
5021558.155c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=7c910000 uNtDllChildAddr=7c910000
5031558.155c: supR3HardenedWinSetupChildInit: uLdrInitThunk=7c911166
5041558.155c: supR3HardenedWinSetupChildInit: Start child.
5051558.155c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
5061558.155c: supR3HardNtChildPurify: Startup delay kludge #1/0: 518 ms, 0 sleeps
5071558.155c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
5081558.155c: *00000000-fffeffff 0x0001/0x0000 0x0000000
5091558.155c: *00010000-0000efff 0x0004/0x0004 0x0020000
5101558.155c: 00011000-00001fff 0x0001/0x0000 0x0000000
5111558.155c: *00020000-0001efff 0x0004/0x0004 0x0020000
5121558.155c: 00021000-00011fff 0x0001/0x0000 0x0000000
5131558.155c: *00030000-fff31fff 0x0000/0x0004 0x0020000
5141558.155c: 0012e000-0012cfff 0x0104/0x0004 0x0020000
5151558.155c: 0012f000-0012dfff 0x0004/0x0004 0x0020000
5161558.155c: *00130000-0012cfff 0x0002/0x0002 0x0040000
5171558.155c: 00133000-ffe65fff 0x0001/0x0000 0x0000000
5181558.155c: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5191558.155c: 00401000-0038cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5201558.155c: 00475000-00473fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5211558.155c: 00476000-00448fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5221558.155c: 004a3000-004a1fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5231558.155c: 004a4000-004a2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5241558.155c: 004a5000-004a3fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5251558.155c: 004a6000-004a4fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5261558.155c: 004a7000-004a4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5271558.155c: 004a9000-004a5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5281558.155c: 004ac000-00478fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
5291558.155c: 004df000-840adfff 0x0001/0x0000 0x0000000
5301558.155c: *7c910000-7c90efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
5311558.155c: 7c911000-7c893fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
5321558.155c: 7c98e000-7c988fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
5331558.155c: 7c993000-7c95cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
5341558.155c: 7c9c9000-793e1fff 0x0001/0x0000 0x0000000
5351558.155c: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000
5361558.155c: *7ffd4000-7ffd2fff 0x0004/0x0004 0x0020000
5371558.155c: 7ffd5000-7ffcafff 0x0001/0x0000 0x0000000
5381558.155c: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
5391558.155c: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
5401558.155c: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
5411558.155c: VirtualBox.exe: timestamp 0x5473137a (rc=VINF_SUCCESS)
5421558.155c: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
5431558.155c: '\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll' has no imports
5441558.155c: ntdll.dll: Differences in section #3 (.rsrc) between file and memory:
5451558.155c: 7c9c50d4 / 0x00b50d4: 00 != 50
5461558.155c: 7c9c50d5 / 0x00b50d5: 00 != 41
5471558.155c: 7c9c50d6 / 0x00b50d6: 00 != 44
5481558.155c: 7c9c50d7 / 0x00b50d7: 00 != 44
5491558.155c: 7c9c50d8 / 0x00b50d8: 00 != 49
5501558.155c: 7c9c50d9 / 0x00b50d9: 00 != 4e
5511558.155c: 7c9c50da / 0x00b50da: 00 != 47
5521558.155c: 7c9c50db / 0x00b50db: 00 != 58
5531558.155c: 7c9c50dc / 0x00b50dc: 00 != 58
5541558.155c: 7c9c50dd / 0x00b50dd: 00 != 50
5551558.155c: 7c9c50de / 0x00b50de: 00 != 41
5561558.155c: 7c9c50df / 0x00b50df: 00 != 44
5571558.155c: 7c9c50e0 / 0x00b50e0: 00 != 44
5581558.155c: 7c9c50e1 / 0x00b50e1: 00 != 49
5591558.155c: 7c9c50e2 / 0x00b50e2: 00 != 4e
5601558.155c: 7c9c50e3 / 0x00b50e3: 00 != 47
5611558.155c: 7c9c50e4 / 0x00b50e4: 00 != 50
5621558.155c: 7c9c50e5 / 0x00b50e5: 00 != 41
5631558.155c: 7c9c50e6 / 0x00b50e6: 00 != 44
5641558.155c: 7c9c50e7 / 0x00b50e7: 00 != 44
5651558.155c: 7c9c50e8 / 0x00b50e8: 00 != 49
5661558.155c: 7c9c50e9 / 0x00b50e9: 00 != 4e
5671558.155c: 7c9c50ea / 0x00b50ea: 00 != 47
5681558.155c: 7c9c50eb / 0x00b50eb: 00 != 58
5691558.155c: 7c9c50ec / 0x00b50ec: 00 != 58
5701558.155c: 7c9c50ed / 0x00b50ed: 00 != 50
5711558.155c: 7c9c50ee / 0x00b50ee: 00 != 41
5721558.155c: 7c9c50ef / 0x00b50ef: 00 != 44
5731558.155c: 7c9c50f0 / 0x00b50f0: 00 != 44
5741558.155c: 7c9c50f1 / 0x00b50f1: 00 != 49
5751558.155c: 7c9c50f2 / 0x00b50f2: 00 != 4e
5761558.155c: 7c9c50f3 / 0x00b50f3: 00 != 47
5771558.155c: 7c9c50f4 / 0x00b50f4: 00 != 50
5781558.155c: 7c9c50f5 / 0x00b50f5: 00 != 41
5791558.155c: 7c9c50f6 / 0x00b50f6: 00 != 44
5801558.155c: 7c9c50f7 / 0x00b50f7: 00 != 44
5811558.155c: 7c9c50f8 / 0x00b50f8: 00 != 49
5821558.155c: 7c9c50f9 / 0x00b50f9: 00 != 4e
5831558.155c: 7c9c50fa / 0x00b50fa: 00 != 47
5841558.155c: 7c9c50fb / 0x00b50fb: 00 != 58
5851558.155c: 7c9c50fc / 0x00b50fc: 00 != 58
5861558.155c: 7c9c50fd / 0x00b50fd: 00 != 50
5871558.155c: 7c9c50fe / 0x00b50fe: 00 != 41
5881558.155c: 7c9c50ff / 0x00b50ff: 00 != 44
5891558.155c: 7c9c5100 / 0x00b5100: 00 != 44
5901558.155c: 7c9c5101 / 0x00b5101: 00 != 49
5911558.155c: 7c9c5102 / 0x00b5102: 00 != 4e
5921558.155c: 7c9c5103 / 0x00b5103: 00 != 47
5931558.155c: 7c9c5104 / 0x00b5104: 00 != 50
5941558.155c: 7c9c5105 / 0x00b5105: 00 != 41
5951558.155c: 7c9c5106 / 0x00b5106: 00 != 44
5961558.155c: 7c9c5107 / 0x00b5107: 00 != 44
5971558.155c: 7c9c5108 / 0x00b5108: 00 != 49
5981558.155c: 7c9c5109 / 0x00b5109: 00 != 4e
5991558.155c: 7c9c510a / 0x00b510a: 00 != 47
6001558.155c: 7c9c510b / 0x00b510b: 00 != 58
6011558.155c: 7c9c510c / 0x00b510c: 00 != 58
6021558.155c: 7c9c510d / 0x00b510d: 00 != 50
6031558.155c: 7c9c510e / 0x00b510e: 00 != 41
6041558.155c: 7c9c510f / 0x00b510f: 00 != 44
6051558.155c: 7c9c5110 / 0x00b5110: 00 != 44
6061558.155c: 7c9c5111 / 0x00b5111: 00 != 49
6071558.155c: 7c9c5112 / 0x00b5112: 00 != 4e
6081558.155c: 7c9c5113 / 0x00b5113: 00 != 47
6091558.155c: 7c9c5114 / 0x00b5114: 00 != 50
6101558.155c: 7c9c5115 / 0x00b5115: 00 != 41
6111558.155c: 7c9c5116 / 0x00b5116: 00 != 44
6121558.155c: 7c9c5117 / 0x00b5117: 00 != 44
6131558.155c: 7c9c5118 / 0x00b5118: 00 != 49
6141558.155c: 7c9c5119 / 0x00b5119: 00 != 4e
6151558.155c: 7c9c511a / 0x00b511a: 00 != 47
6161558.155c: 7c9c511b / 0x00b511b: 00 != 58
6171558.155c: 7c9c511c / 0x00b511c: 00 != 58
6181558.155c: 7c9c511d / 0x00b511d: 00 != 50
6191558.155c: 7c9c511e / 0x00b511e: 00 != 41
6201558.155c: 7c9c511f / 0x00b511f: 00 != 44
6211558.155c: 7c9c5120 / 0x00b5120: 00 != 44
6221558.155c: 7c9c5121 / 0x00b5121: 00 != 49
6231558.155c: 7c9c5122 / 0x00b5122: 00 != 4e
6241558.155c: 7c9c5123 / 0x00b5123: 00 != 47
6251558.155c: 7c9c5124 / 0x00b5124: 00 != 50
6261558.155c: 7c9c5125 / 0x00b5125: 00 != 41
6271558.155c: 7c9c5126 / 0x00b5126: 00 != 44
6281558.155c: 7c9c5127 / 0x00b5127: 00 != 44
6291558.155c: 7c9c5128 / 0x00b5128: 00 != 49
6301558.155c: 7c9c5129 / 0x00b5129: 00 != 4e
6311558.155c: 7c9c512a / 0x00b512a: 00 != 47
6321558.155c: 7c9c512b / 0x00b512b: 00 != 58
6331558.155c: 7c9c512c / 0x00b512c: 00 != 58
6341558.155c: 7c9c512d / 0x00b512d: 00 != 50
6351558.155c: 7c9c512e / 0x00b512e: 00 != 41
6361558.155c: 7c9c512f / 0x00b512f: 00 != 44
6371558.155c: 7c9c5130 / 0x00b5130: 00 != 44
6381558.155c: 7c9c5131 / 0x00b5131: 00 != 49
6391558.155c: 7c9c5132 / 0x00b5132: 00 != 4e
6401558.155c: 7c9c5133 / 0x00b5133: 00 != 47
6411558.155c: 7c9c5134 / 0x00b5134: 00 != 50
6421558.155c: 7c9c5135 / 0x00b5135: 00 != 41
6431558.155c: 7c9c5136 / 0x00b5136: 00 != 44
6441558.155c: 7c9c5137 / 0x00b5137: 00 != 44
6451558.155c: 7c9c5138 / 0x00b5138: 00 != 49
6461558.155c: 7c9c5139 / 0x00b5139: 00 != 4e
6471558.155c: 7c9c513a / 0x00b513a: 00 != 47
6481558.155c: 7c9c513b / 0x00b513b: 00 != 58
6491558.155c: 7c9c513c / 0x00b513c: 00 != 58
6501558.155c: 7c9c513d / 0x00b513d: 00 != 50
6511558.155c: 7c9c513e / 0x00b513e: 00 != 41
6521558.155c: 7c9c513f / 0x00b513f: 00 != 44
6531558.155c: 7c9c5140 / 0x00b5140: 00 != 44
6541558.155c: 7c9c5141 / 0x00b5141: 00 != 49
6551558.155c: 7c9c5142 / 0x00b5142: 00 != 4e
6561558.155c: 7c9c5143 / 0x00b5143: 00 != 47
6571558.155c: 7c9c5144 / 0x00b5144: 00 != 50
6581558.155c: 7c9c5145 / 0x00b5145: 00 != 41
6591558.155c: 7c9c5146 / 0x00b5146: 00 != 44
6601558.155c: 7c9c5147 / 0x00b5147: 00 != 44
6611558.155c: 7c9c5148 / 0x00b5148: 00 != 49
6621558.155c: 7c9c5149 / 0x00b5149: 00 != 4e
6631558.155c: 7c9c514a / 0x00b514a: 00 != 47
6641558.155c: 7c9c514b / 0x00b514b: 00 != 58
6651558.155c: 7c9c514c / 0x00b514c: 00 != 58
6661558.155c: 7c9c514d / 0x00b514d: 00 != 50
6671558.155c: 7c9c514e / 0x00b514e: 00 != 41
6681558.155c: 7c9c514f / 0x00b514f: 00 != 44
6691558.155c: 7c9c5150 / 0x00b5150: 00 != 44
6701558.155c: 7c9c5151 / 0x00b5151: 00 != 49
6711558.155c: 7c9c5152 / 0x00b5152: 00 != 4e
6721558.155c: 7c9c5153 / 0x00b5153: 00 != 47
6731558.155c: 7c9c5154 / 0x00b5154: 00 != 50
6741558.155c: 7c9c5155 / 0x00b5155: 00 != 41
6751558.155c: 7c9c5156 / 0x00b5156: 00 != 44
6761558.155c: 7c9c5157 / 0x00b5157: 00 != 44
6771558.155c: 7c9c5158 / 0x00b5158: 00 != 49
6781558.155c: 7c9c5159 / 0x00b5159: 00 != 4e
6791558.155c: 7c9c515a / 0x00b515a: 00 != 47
6801558.155c: 7c9c515b / 0x00b515b: 00 != 58
6811558.155c: 7c9c515c / 0x00b515c: 00 != 58
6821558.155c: 7c9c515d / 0x00b515d: 00 != 50
6831558.155c: 7c9c515e / 0x00b515e: 00 != 41
6841558.155c: 7c9c515f / 0x00b515f: 00 != 44
6851558.155c: 7c9c5160 / 0x00b5160: 00 != 44
6861558.155c: 7c9c5161 / 0x00b5161: 00 != 49
6871558.155c: 7c9c5162 / 0x00b5162: 00 != 4e
6881558.155c: 7c9c5163 / 0x00b5163: 00 != 47
6891558.155c: 7c9c5164 / 0x00b5164: 00 != 50
6901558.155c: 7c9c5165 / 0x00b5165: 00 != 41
6911558.155c: 7c9c5166 / 0x00b5166: 00 != 44
6921558.155c: 7c9c5167 / 0x00b5167: 00 != 44
6931558.155c: 7c9c5168 / 0x00b5168: 00 != 49
6941558.155c: 7c9c5169 / 0x00b5169: 00 != 4e
6951558.155c: 7c9c516a / 0x00b516a: 00 != 47
6961558.155c: 7c9c516b / 0x00b516b: 00 != 58
6971558.155c: 7c9c516c / 0x00b516c: 00 != 58
6981558.155c: 7c9c516d / 0x00b516d: 00 != 50
6991558.155c: 7c9c516e / 0x00b516e: 00 != 41
7001558.155c: 7c9c516f / 0x00b516f: 00 != 44
7011558.155c: 7c9c5170 / 0x00b5170: 00 != 44
7021558.155c: 7c9c5171 / 0x00b5171: 00 != 49
7031558.155c: 7c9c5172 / 0x00b5172: 00 != 4e
7041558.155c: 7c9c5173 / 0x00b5173: 00 != 47
7051558.155c: 7c9c5174 / 0x00b5174: 00 != 50
7061558.155c: 7c9c5175 / 0x00b5175: 00 != 41
7071558.155c: 7c9c5176 / 0x00b5176: 00 != 44
7081558.155c: 7c9c5177 / 0x00b5177: 00 != 44
7091558.155c: 7c9c5178 / 0x00b5178: 00 != 49
7101558.155c: 7c9c5179 / 0x00b5179: 00 != 4e
7111558.155c: 7c9c517a / 0x00b517a: 00 != 47
7121558.155c: 7c9c517b / 0x00b517b: 00 != 58
7131558.155c: 7c9c517c / 0x00b517c: 00 != 58
7141558.155c: 7c9c517d / 0x00b517d: 00 != 50
7151558.155c: 7c9c517e / 0x00b517e: 00 != 41
7161558.155c: 7c9c517f / 0x00b517f: 00 != 44
7171558.155c: 7c9c5180 / 0x00b5180: 00 != 44
7181558.155c: 7c9c5181 / 0x00b5181: 00 != 49
7191558.155c: 7c9c5182 / 0x00b5182: 00 != 4e
7201558.155c: 7c9c5183 / 0x00b5183: 00 != 47
7211558.155c: 7c9c5184 / 0x00b5184: 00 != 50
7221558.155c: 7c9c5185 / 0x00b5185: 00 != 41
7231558.155c: 7c9c5186 / 0x00b5186: 00 != 44
7241558.155c: 7c9c5187 / 0x00b5187: 00 != 44
7251558.155c: 7c9c5188 / 0x00b5188: 00 != 49
7261558.155c: 7c9c5189 / 0x00b5189: 00 != 4e
7271558.155c: 7c9c518a / 0x00b518a: 00 != 47
7281558.155c: 7c9c518b / 0x00b518b: 00 != 58
7291558.155c: 7c9c518c / 0x00b518c: 00 != 58
7301558.155c: 7c9c518d / 0x00b518d: 00 != 50
7311558.155c: 7c9c518e / 0x00b518e: 00 != 41
7321558.155c: 7c9c518f / 0x00b518f: 00 != 44
7331558.155c: 7c9c5190 / 0x00b5190: 00 != 44
7341558.155c: 7c9c5191 / 0x00b5191: 00 != 49
7351558.155c: 7c9c5192 / 0x00b5192: 00 != 4e
7361558.155c: 7c9c5193 / 0x00b5193: 00 != 47
7371558.155c: 7c9c5194 / 0x00b5194: 00 != 50
7381558.155c: 7c9c5195 / 0x00b5195: 00 != 41
7391558.155c: 7c9c5196 / 0x00b5196: 00 != 44
7401558.155c: 7c9c5197 / 0x00b5197: 00 != 44
7411558.155c: 7c9c5198 / 0x00b5198: 00 != 49
7421558.155c: 7c9c5199 / 0x00b5199: 00 != 4e
7431558.155c: 7c9c519a / 0x00b519a: 00 != 47
7441558.155c: 7c9c519b / 0x00b519b: 00 != 58
7451558.155c: 7c9c519c / 0x00b519c: 00 != 58
7461558.155c: 7c9c519d / 0x00b519d: 00 != 50
7471558.155c: 7c9c519e / 0x00b519e: 00 != 41
7481558.155c: 7c9c519f / 0x00b519f: 00 != 44
7491558.155c: 7c9c51a0 / 0x00b51a0: 00 != 44
7501558.155c: 7c9c51a1 / 0x00b51a1: 00 != 49
7511558.155c: 7c9c51a2 / 0x00b51a2: 00 != 4e
7521558.155c: 7c9c51a3 / 0x00b51a3: 00 != 47
7531558.155c: 7c9c51a4 / 0x00b51a4: 00 != 50
7541558.155c: 7c9c51a5 / 0x00b51a5: 00 != 41
7551558.155c: 7c9c51a6 / 0x00b51a6: 00 != 44
7561558.155c: 7c9c51a7 / 0x00b51a7: 00 != 44
7571558.155c: 7c9c51a8 / 0x00b51a8: 00 != 49
7581558.155c: 7c9c51a9 / 0x00b51a9: 00 != 4e
7591558.155c: 7c9c51aa / 0x00b51aa: 00 != 47
7601558.155c: 7c9c51ab / 0x00b51ab: 00 != 58
7611558.155c: 7c9c51ac / 0x00b51ac: 00 != 58
7621558.155c: 7c9c51ad / 0x00b51ad: 00 != 50
7631558.155c: 7c9c51ae / 0x00b51ae: 00 != 41
7641558.155c: 7c9c51af / 0x00b51af: 00 != 44
7651558.155c: 7c9c51b0 / 0x00b51b0: 00 != 44
7661558.155c: 7c9c51b1 / 0x00b51b1: 00 != 49
7671558.155c: 7c9c51b2 / 0x00b51b2: 00 != 4e
7681558.155c: 7c9c51b3 / 0x00b51b3: 00 != 47
7691558.155c: 7c9c51b4 / 0x00b51b4: 00 != 50
7701558.155c: 7c9c51b5 / 0x00b51b5: 00 != 41
7711558.155c: 7c9c51b6 / 0x00b51b6: 00 != 44
7721558.155c: 7c9c51b7 / 0x00b51b7: 00 != 44
7731558.155c: 7c9c51b8 / 0x00b51b8: 00 != 49
7741558.155c: 7c9c51b9 / 0x00b51b9: 00 != 4e
7751558.155c: 7c9c51ba / 0x00b51ba: 00 != 47
7761558.155c: 7c9c51bb / 0x00b51bb: 00 != 58
7771558.155c: 7c9c51bc / 0x00b51bc: 00 != 58
7781558.155c: 7c9c51bd / 0x00b51bd: 00 != 50
7791558.155c: 7c9c51be / 0x00b51be: 00 != 41
7801558.155c: 7c9c51bf / 0x00b51bf: 00 != 44
7811558.155c: 7c9c51c0 / 0x00b51c0: 00 != 44
7821558.155c: 7c9c51c1 / 0x00b51c1: 00 != 49
7831558.155c: 7c9c51c2 / 0x00b51c2: 00 != 4e
7841558.155c: 7c9c51c3 / 0x00b51c3: 00 != 47
7851558.155c: 7c9c51c4 / 0x00b51c4: 00 != 50
7861558.155c: 7c9c51c5 / 0x00b51c5: 00 != 41
7871558.155c: 7c9c51c6 / 0x00b51c6: 00 != 44
7881558.155c: 7c9c51c7 / 0x00b51c7: 00 != 44
7891558.155c: 7c9c51c8 / 0x00b51c8: 00 != 49
7901558.155c: 7c9c51c9 / 0x00b51c9: 00 != 4e
7911558.155c: 7c9c51ca / 0x00b51ca: 00 != 47
7921558.155c: 7c9c51cb / 0x00b51cb: 00 != 58
7931558.155c: 7c9c51cc / 0x00b51cc: 00 != 58
7941558.155c: 7c9c51cd / 0x00b51cd: 00 != 50
7951558.155c: 7c9c51ce / 0x00b51ce: 00 != 41
7961558.155c: 7c9c51cf / 0x00b51cf: 00 != 44
7971558.155c: 7c9c51d0 / 0x00b51d0: 00 != 44
7981558.155c: 7c9c51d1 / 0x00b51d1: 00 != 49
7991558.155c: 7c9c51d2 / 0x00b51d2: 00 != 4e
8001558.155c: 7c9c51d3 / 0x00b51d3: 00 != 47
8011558.155c: 7c9c51d4 / 0x00b51d4: 00 != 50
8021558.155c: 7c9c51d5 / 0x00b51d5: 00 != 41
8031558.155c: 7c9c51d6 / 0x00b51d6: 00 != 44
8041558.155c: 7c9c51d7 / 0x00b51d7: 00 != 44
8051558.155c: 7c9c51d8 / 0x00b51d8: 00 != 49
8061558.155c: 7c9c51d9 / 0x00b51d9: 00 != 4e
8071558.155c: 7c9c51da / 0x00b51da: 00 != 47
8081558.155c: 7c9c51db / 0x00b51db: 00 != 58
8091558.155c: 7c9c51dc / 0x00b51dc: 00 != 58
8101558.155c: 7c9c51dd / 0x00b51dd: 00 != 50
8111558.155c: 7c9c51de / 0x00b51de: 00 != 41
8121558.155c: 7c9c51df / 0x00b51df: 00 != 44
8131558.155c: 7c9c51e0 / 0x00b51e0: 00 != 44
8141558.155c: 7c9c51e1 / 0x00b51e1: 00 != 49
8151558.155c: 7c9c51e2 / 0x00b51e2: 00 != 4e
8161558.155c: 7c9c51e3 / 0x00b51e3: 00 != 47
8171558.155c: 7c9c51e4 / 0x00b51e4: 00 != 50
8181558.155c: 7c9c51e5 / 0x00b51e5: 00 != 41
8191558.155c: 7c9c51e6 / 0x00b51e6: 00 != 44
8201558.155c: 7c9c51e7 / 0x00b51e7: 00 != 44
8211558.155c: 7c9c51e8 / 0x00b51e8: 00 != 49
8221558.155c: 7c9c51e9 / 0x00b51e9: 00 != 4e
8231558.155c: 7c9c51ea / 0x00b51ea: 00 != 47
8241558.155c: 7c9c51eb / 0x00b51eb: 00 != 58
8251558.155c: 7c9c51ec / 0x00b51ec: 00 != 58
8261558.155c: 7c9c51ed / 0x00b51ed: 00 != 50
8271558.155c: 7c9c51ee / 0x00b51ee: 00 != 41
8281558.155c: 7c9c51ef / 0x00b51ef: 00 != 44
8291558.155c: 7c9c51f0 / 0x00b51f0: 00 != 44
8301558.155c: 7c9c51f1 / 0x00b51f1: 00 != 49
8311558.155c: 7c9c51f2 / 0x00b51f2: 00 != 4e
8321558.155c: 7c9c51f3 / 0x00b51f3: 00 != 47
8331558.155c: 7c9c51f4 / 0x00b51f4: 00 != 50
8341558.155c: 7c9c51f5 / 0x00b51f5: 00 != 41
8351558.155c: 7c9c51f6 / 0x00b51f6: 00 != 44
8361558.155c: 7c9c51f7 / 0x00b51f7: 00 != 44
8371558.155c: 7c9c51f8 / 0x00b51f8: 00 != 49
8381558.155c: 7c9c51f9 / 0x00b51f9: 00 != 4e
8391558.155c: 7c9c51fa / 0x00b51fa: 00 != 47
8401558.155c: 7c9c51fb / 0x00b51fb: 00 != 58
8411558.155c: 7c9c51fc / 0x00b51fc: 00 != 58
8421558.155c: 7c9c51fd / 0x00b51fd: 00 != 50
8431558.155c: 7c9c51fe / 0x00b51fe: 00 != 41
8441558.155c: 7c9c51ff / 0x00b51ff: 00 != 44
8451558.155c: Restored 0xf2c bytes of original file content at 7c9c50d4
8461558.155c: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x2
8471558.155c: supR3HardNtChildPurify: Startup delay kludge #1/1: 519 ms, 0 sleeps
8481558.155c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
8491558.155c: *00000000-fffeffff 0x0001/0x0000 0x0000000
8501558.155c: *00010000-0000efff 0x0004/0x0004 0x0020000
8511558.155c: 00011000-00001fff 0x0001/0x0000 0x0000000
8521558.155c: *00020000-0001efff 0x0004/0x0004 0x0020000
8531558.155c: 00021000-00011fff 0x0001/0x0000 0x0000000
8541558.155c: *00030000-fff31fff 0x0000/0x0004 0x0020000
8551558.155c: 0012e000-0012cfff 0x0104/0x0004 0x0020000
8561558.155c: 0012f000-0012dfff 0x0004/0x0004 0x0020000
8571558.155c: *00130000-0012cfff 0x0002/0x0002 0x0040000
8581558.155c: 00133000-ffe65fff 0x0001/0x0000 0x0000000
8591558.155c: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
8601558.155c: 00401000-0038cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
8611558.155c: 00475000-00473fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
8621558.155c: 00476000-00448fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
8631558.155c: 004a3000-00499fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
8641558.155c: 004ac000-00478fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe
8651558.155c: 004df000-840adfff 0x0001/0x0000 0x0000000
8661558.155c: *7c910000-7c90efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
8671558.155c: 7c911000-7c893fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
8681558.155c: 7c98e000-7c989fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
8691558.155c: 7c992000-7c990fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
8701558.155c: 7c993000-7c95cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
8711558.155c: 7c9c9000-793e1fff 0x0001/0x0000 0x0000000
8721558.155c: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000
8731558.155c: *7ffd4000-7ffd2fff 0x0004/0x0004 0x0020000
8741558.155c: 7ffd5000-7ffcafff 0x0001/0x0000 0x0000000
8751558.155c: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
8761558.155c: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
8771558.155c: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
8781558.155c: supR3HardNtChildPurify: Done after 1052 ms and 1 fixes (loop #1).
8791558.155c: supR3HardNtEnableThreadCreation:
88016e0.16e4: Log file opened: 4.3.20r96997 g_hStartupLog=00000ffc g_uNtVerCombined=0x510a2830
88116e0.16e4: supR3HardenedVmProcessInit: uNtDllAddr=7c910000
88216e0.16e4: ntdll.dll: timestamp 0x4d00f2b5 (rc=VINF_SUCCESS)
88316e0.16e4: System32: \Device\HarddiskVolume1\WINDOWS\system32
88416e0.16e4: WinSxS: \Device\HarddiskVolume1\WINDOWS\WinSxS
88516e0.16e4: KnownDllPath: C:\WINDOWS\system32
88616e0.16e4: supR3HardenedVmProcessInit: Opening vboxdrv...
88716e0.16e4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
88816e0.16e4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
88916e0.16e4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=7c911166 pvNtTerminateThread=7c91de7e
8901558.155c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 16 ms.
89116e0.16e4: \SystemRoot\System32\ntdll.dll:
89216e0.16e4: CreationTime: 2010-12-09T15:16:05.000000000Z
89316e0.16e4: LastWriteTime: 2010-12-09T15:16:05.000000000Z
89416e0.16e4: ChangeTime: 2012-11-12T10:28:56.906250000Z
89516e0.16e4: FileAttributes: 0x20
89616e0.16e4: Size: 0xb5800
89716e0.16e4: NT Headers: 0xd0
89816e0.16e4: Timestamp: 0x4d00f2b5
89916e0.16e4: Machine: 0x14c - i386
90016e0.16e4: Timestamp: 0x4d00f2b5
90116e0.16e4: Image Version: 5.1
90216e0.16e4: SizeOfImage: 0xb9000 (757760)
90316e0.16e4: Resource Dir: 0x83000 LB 0x320d4
90416e0.16e4: \SystemRoot\System32\kernel32.dll:
90516e0.16e4: CreationTime: 2009-06-08T04:42:01.000000000Z
90616e0.16e4: LastWriteTime: 2014-03-12T10:48:57.000000000Z
90716e0.16e4: ChangeTime: 2014-04-25T01:04:20.343750000Z
90816e0.16e4: FileAttributes: 0x20
90916e0.16e4: Size: 0x102600
91016e0.16e4: NT Headers: 0xf0
91116e0.16e4: Timestamp: 0x53203b99
91216e0.16e4: Machine: 0x14c - i386
91316e0.16e4: Timestamp: 0x53203b99
91416e0.16e4: Image Version: 5.1
91516e0.16e4: SizeOfImage: 0x106000 (1073152)
91616e0.16e4: Resource Dir: 0x8a000 LB 0x75c48
91716e0.16e4: Found driver SymEvent (0x2)
91816e0.16e4: Found driver SRTSPX (0x2)
91916e0.16e4: supR3HardenedWinFindAdversaries: 0x2
92016e0.16e4: Calling main()
92116e0.16e4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
92216e0.16e4: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
92316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.exe)
92416e0.16e4: SUPR3HardenedMain: Final process, opening VBoxDrv...
92516e0.16e4: supR3HardNtEnableThreadCreation:
92616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
92716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
92816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00243540:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
92916e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
93016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
93116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
93216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00243ed8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
93316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=10000000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
93416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
93516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00243ed8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
93616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=10000000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
93716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=10000000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
93816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
93916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'crypt32.dll'.
94016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'imagehlp.dll'.
94116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'.
94216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
94316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
94416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
94516e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll)
94616e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll
94716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
94816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
94916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
95016e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\user32.dll)
95116e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\user32.dll
95216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
95316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
95416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
95516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'secur32.dll'.
95616e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll)
95716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll
95816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
95916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
96016e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll)
96116e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll
96216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
96316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll' [rcNtRedir=0xc0150008]
96416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
96516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
96616e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll)
96716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll
96816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imagehlp.dll'...
96916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imagehlp.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll' [rcNtRedir=0xc0150008]
97016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
97116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
97216e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll)
97316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll
97416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
97516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll' [rcNtRedir=0xc0150008]
97616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
97716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msasn1.dll'.
97816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
97916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
98016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
98116e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll)
98216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll
98316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
98416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
98516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
98616e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll)
98716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll
98816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
98916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
99016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
99116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
99216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
99316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
99416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
99516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
99616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
99716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
99816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
99916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
100016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
100116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll' [rcNtRedir=0xc0150008]
100216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll [lacks WinVerifyTrust]
100316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
100416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
100516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
100616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
100716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
100816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
100916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
101016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
101116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
101216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
101316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
101416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
101516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
101616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
101716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
101816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
101916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll' [rcNtRedir=0xc0150008]
102016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
102116e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll)
102216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
102316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
102416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
102516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
102616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
102716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
102816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
102916e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll)
103016e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll
103116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
103216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
103316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
103416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
103516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
103616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
103716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=002436f0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
103816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll [lacks WinVerifyTrust]
103916e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll [lacks WinVerifyTrust]
104016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll [lacks WinVerifyTrust]
104116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll [lacks WinVerifyTrust]
104216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
104316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
104416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
104516e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\imm32.dll)
104616e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll
104716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll [lacks WinVerifyTrust]
104816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
104916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
105016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
105116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
105216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
105316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
105416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
105516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
105616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
105716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=002449b8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
105816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll [lacks WinVerifyTrust]
105916e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll [lacks WinVerifyTrust]
106016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76320000 'C:\WINDOWS\system32\IMM32.DLL'
106116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
106216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (Input=advapi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00245118:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
106316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77da0000 'C:\WINDOWS\system32\advapi32.dll'
106416e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll)
106516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll
106616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00246a70:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
106716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7c800000 'C:\WINDOWS\system32\kernel32.dll'
106816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
106916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (Input=advapi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00247040:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
107016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77da0000 'C:\WINDOWS\system32\advapi32.dll'
107116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76be0000 'C:\WINDOWS\system32\Wintrust.dll'
107216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
107316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
107416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
107516e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll)
107616e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll
107716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
107816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
107916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
108016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
108116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
108216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
108316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
108416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
108516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
108616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (Input=rsaenh.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00249270:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
108716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll [lacks WinVerifyTrust]
108816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll [lacks WinVerifyTrust]
108916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll [lacks WinVerifyTrust]
109016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00249c08:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
109116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=779e0000 'C:\WINDOWS\system32\crypt32.dll'
109216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=68000000 'C:\WINDOWS\system32\rsaenh.dll'
109316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll [lacks WinVerifyTrust]
109416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00250f80:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
109516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76be0000 'C:\WINDOWS\system32\WINTRUST.DLL'
109616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll [lacks WinVerifyTrust]
109716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00250f80:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
109816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=779e0000 'C:\WINDOWS\system32\CRYPT32.dll'
109916e0.16e4: '\Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll' has no imports
110016e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll)
110116e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll
110216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\xpsp2res.dll (Input=xpsp2res.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00258e28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
110316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll [lacks WinVerifyTrust]
110416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll [lacks WinVerifyTrust]
110516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00c70000 'C:\WINDOWS\system32\xpsp2res.dll'
110616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
110716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
110816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
110916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
111016e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll)
111116e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll
111216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
111316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
111416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
111516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
111616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
111716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
111816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
111916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
112016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
112116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
112216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
112316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
112416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00260068:C:\WINDOWS\system32;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
112516e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll [lacks WinVerifyTrust]
112616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll [lacks WinVerifyTrust]
112716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
112816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll [lacks WinVerifyTrust]
112916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (Input=uxtheme.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0025edf0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
113016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
113116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll [lacks WinVerifyTrust]
113216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00260068:C:\WINDOWS\system32;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
113316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
113416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll [lacks WinVerifyTrust]
113516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00260068:C:\WINDOWS\system32;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
113616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
113716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll [lacks WinVerifyTrust]
113816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00260068:C:\WINDOWS\system32;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
113916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
114016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll [lacks WinVerifyTrust]
114116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0025edf0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
114216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7c800000 'C:\WINDOWS\system32\kernel32.dll'
114316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
114416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
114516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
114616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
114716e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll)
114816e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll
114916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
115016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
115116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
115216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
115316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
115416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
115516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
115616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
115716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
115816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
115916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
116016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
116116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (Input=userenv.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0031d818:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
116216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
116316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
116416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76960000 'C:\WINDOWS\system32\userenv.dll'
116516e0.1740: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
116616e0.1740: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (Input=userenv.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0031e008:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
116716e0.1740: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76960000 'C:\WINDOWS\system32\userenv.dll'
116816e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\version.dll)
116916e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\version.dll
117016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\VERSION.dll (Input=VERSION.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=003211d0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
117116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\version.dll [lacks WinVerifyTrust]
117216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\version.dll [lacks WinVerifyTrust]
117316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77bd0000 'C:\WINDOWS\system32\VERSION.dll'
117416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
117516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (Input=userenv.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=003211d0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
117616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76960000 'C:\WINDOWS\system32\userenv.dll'
117716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
117816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (Input=userenv.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=003218c0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
117916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76960000 'C:\WINDOWS\system32\userenv.dll'
118016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
118116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (Input=userenv.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=003211d0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
118216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76960000 'C:\WINDOWS\system32\userenv.dll'
118316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
118416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00323c40:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
118516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77e50000 'C:\WINDOWS\system32\rpcrt4.dll'
118616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
118716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
118816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
118916e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll)
119016e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll
119116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
119216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
119316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
119416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
119516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
119616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
119716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
119816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
119916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
120016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\netapi32.dll (Input=netapi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00324e68:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
120116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll [lacks WinVerifyTrust]
120216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll [lacks WinVerifyTrust]
120316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6fee0000 'C:\WINDOWS\system32\netapi32.dll'
120416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
120516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'crypt32.dll'.
120616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
120716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'psapi.dll'.
120816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sensapi.dll'.
120916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shlwapi.dll'.
121016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'userenv.dll'.
121116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'winhttp.dll'.
121216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'wldap32.dll'.
121316e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll)
121416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll
121516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
121616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll' [rcNtRedir=0xc0150008]
121716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
121816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
121916e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll)
122016e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll
122116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winhttp.dll'...
122216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winhttp.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll' [rcNtRedir=0xc0150008]
122316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
122416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shlwapi.dll'.
122516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
122616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
122716e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll)
122816e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll
122916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
123016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll' [rcNtRedir=0xc0150008]
123116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll [lacks WinVerifyTrust]
123216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
123316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
123416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
123516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
123616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
123716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
123816e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll)
123916e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll
124016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sensapi.dll'...
124116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sensapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll' [rcNtRedir=0xc0150008]
124216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
124316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
124416e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll)
124516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll
124616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'psapi.dll'...
124716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'psapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\psapi.dll' [rcNtRedir=0xc0150008]
124816e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\psapi.dll)
124916e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\psapi.dll
125016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
125116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
125216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
125316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
125416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll' [rcNtRedir=0xc0150008]
125516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll [lacks WinVerifyTrust]
125616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
125716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
125816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
125916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
126016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
126116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
126216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
126316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
126416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
126516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
126616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
126716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
126816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
126916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
127016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
127116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
127216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
127316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
127416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
127516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
127616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
127716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
127816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
127916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
128016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
128116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
128216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
128316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
128416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
128516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll [lacks WinVerifyTrust]
128616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
128716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
128816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
128916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
129016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
129116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
129216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
129316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
129416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
129516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1910:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
129616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
129716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
129816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\psapi.dll [lacks WinVerifyTrust]
129916e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll [lacks WinVerifyTrust]
130016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll [lacks WinVerifyTrust]
130116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
130216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1e30:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
130316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
130416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
130516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1e30:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
130616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
130716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
130816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1e30:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
130916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
131016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
131116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1e30:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
131216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
131316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
131416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1e30:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
131516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
131616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
131716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1e30:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
131816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
131916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
132016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
132116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
132216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
132316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
132416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
132516e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
132616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
132716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
132816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
132916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
133016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
133116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
133216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
133316e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll)
133416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll
133516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
133616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
133716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
133816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
133916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
134016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
134116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
134216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
134316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
134416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
134516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
134616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
134716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
134816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
134916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
135016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\setupapi.dll (Input=setupapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1910:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
135116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
135216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
135316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
135416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
135516e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll)
135616e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll
135716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
135816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
135916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
136016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
136116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
136216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
136316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
136416e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll)
136516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
136616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
136716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
136816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
136916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
137016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
137116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
137216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
137316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
137416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
137516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
137616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
137716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
137816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
137916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
138016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
138116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011b1910:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
138216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll [lacks WinVerifyTrust]
138316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll [lacks WinVerifyTrust]
138416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
138516e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
138616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\setupapi.dll (Input=setupapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=012299d0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
138716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
138816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
138916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
139016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll [lacks WinVerifyTrust]
139116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=012299d0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
139216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
139316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
139416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
139516e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
139616e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77da0000 'C:\WINDOWS\system32\ADVAPI32.DLL'
139716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
139816e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
139916e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2help.dll'.
140016e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll)
140116e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll
140216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2help.dll'...
140316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2help.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll' [rcNtRedir=0xc0150008]
140416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
140516e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll)
140616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll
140716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
140816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
140916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
141016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
141116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
141216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
141316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
141416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
141516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
141616e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ws2_32.dll (Input=ws2_32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
141716e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
141816e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
141916e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll [lacks WinVerifyTrust]
142016e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\WINDOWS\system32\ws2_32.dll'
142116e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
142216e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ws2_32.dll (Input=ws2_32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
142316e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\WINDOWS\system32\ws2_32.dll'
142416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
142516e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
142616e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
142716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
142816e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ws2help.dll'.
142916e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll)
143016e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll
143116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2help.dll'...
143216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2help.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll' [rcNtRedir=0xc0150008]
143316e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll [lacks WinVerifyTrust]
143416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
143516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
143616e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
143716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
143816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
143916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
144016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
144116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
144216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
144316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
144416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
144516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
144616e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
144716e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll [lacks WinVerifyTrust]
144816e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll [lacks WinVerifyTrust]
144916e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=71990000 'C:\WINDOWS\system32\mswsock.dll'
145016e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
145116e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
145216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
145316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
145416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
145516e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll)
145616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll
145716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
145816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
145916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
146016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
146116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
146216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
146316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
146416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
146516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
146616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
146716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
146816e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
146916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
147016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
147116e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
147216e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\hnetcfg.dll (Input=hnetcfg.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
147316e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll [lacks WinVerifyTrust]
147416e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll [lacks WinVerifyTrust]
147516e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=62e40000 'C:\WINDOWS\system32\hnetcfg.dll'
147616e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll [lacks WinVerifyTrust]
147716e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
147816e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=71990000 'C:\WINDOWS\system32\mswsock.dll'
147916e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ws2_32.dll'.
148016e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll)
148116e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll
148216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
148316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
148416e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
148516e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wshtcpip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
148616e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll [lacks WinVerifyTrust]
148716e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll [lacks WinVerifyTrust]
148816e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719d0000 'C:\WINDOWS\System32\wshtcpip.dll'
148916e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
149016e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
149116e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rasman.dll'.
149216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
149316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'tapi32.dll'.
149416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
149516e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll)
149616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll
149716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
149816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
149916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
150016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'tapi32.dll'...
150116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'tapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll' [rcNtRedir=0xc0150008]
150216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
150316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
150416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
150516e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
150616e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rtutils.dll'.
150716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shlwapi.dll'.
150816e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
150916e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'winmm.dll'.
151016e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll)
151116e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll
151216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
151316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
151416e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
151516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rasman.dll'...
151616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rasman.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rasman.dll' [rcNtRedir=0xc0150008]
151716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
151816e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
151916e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'netapi32.dll'.
152016e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
152116e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
152216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ws2_32.dll'.
152316e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rasman.dll)
152416e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rasman.dll
152516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
152616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
152716e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
152816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
152916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
153016e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
153116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
153216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
153316e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
153416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
153516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
153616e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
153716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
153816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
153916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
154016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netapi32.dll'...
154116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'netapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll' [rcNtRedir=0xc0150008]
154216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll [lacks WinVerifyTrust]
154316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
154416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
154516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
154616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
154716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
154816e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
154916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
155016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
155116e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
155216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
155316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
155416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
155516e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll)
155616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
155716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
155816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
155916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
156016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
156116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
156216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll [lacks WinVerifyTrust]
156316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rtutils.dll'...
156416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rtutils.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll' [rcNtRedir=0xc0150008]
156516e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
156616e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
156716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
156816e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll)
156916e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll
157016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
157116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
157216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
157316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
157416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
157516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
157616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
157716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
157816e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
157916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
158016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
158116e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
158216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
158316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
158416e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
158516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
158616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
158716e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
158816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
158916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
159016e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
159116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
159216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
159316e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
159416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
159516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
159616e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
159716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
159816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
159916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
160016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
160116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
160216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
160316e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\RASAPI32.DLL (Input=RASAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0120f218:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
160416e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll [lacks WinVerifyTrust]
160516e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll [lacks WinVerifyTrust]
160616e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rasman.dll [lacks WinVerifyTrust]
160716e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll [lacks WinVerifyTrust]
160816e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll [lacks WinVerifyTrust]
160916e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll [lacks WinVerifyTrust]
161016e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
161116e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
161216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
161316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'shlwapi.dll'.
161416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
161516e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll)
161616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
161716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
161816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
161916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
162016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
162116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
162216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll [lacks WinVerifyTrust]
162316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
162416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
162516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll [lacks WinVerifyTrust]
162616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
162716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
162816e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
162916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
163016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
163116e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
163216e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Input=comctl32.dll, rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=011be9b0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
163316e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [lacks WinVerifyTrust]
163416e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [lacks WinVerifyTrust]
163516e0.1744: supR3HardenedScreenImage/NtCreateSection: Applying the drop-exec-kludge for '\Device\HarddiskVolume1\WINDOWS\WindowsShell.Manifest'
163616e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77390000 'C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll'
163716e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll [lacks WinVerifyTrust]
163816e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\RASAPI32.DLL (Input=RASAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011be9b0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
163916e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76e90000 'C:\WINDOWS\system32\RASAPI32.DLL'
164016e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76e90000 'C:\WINDOWS\system32\RASAPI32.DLL'
164116e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll [lacks WinVerifyTrust]
164216e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\RTUTILS.DLL (Input=RTUTILS.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0120f620:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
164316e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76e30000 'C:\WINDOWS\system32\RTUTILS.DLL'
164416e0.1744: '\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll' has no imports
164516e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll)
164616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
164716e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0120fa50:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
164816e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7c910000 'C:\WINDOWS\system32\ntdll.dll'
164916e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll [lacks WinVerifyTrust]
165016e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0120fa50:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
165116e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=71990000 'C:\WINDOWS\System32\mswsock.dll'
165216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
165316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
165416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
165516e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
165616e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll)
165716e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll
165816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
165916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
166016e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
166116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
166216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
166316e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll [lacks WinVerifyTrust]
166416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
166516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
166616e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
166716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
166816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
166916e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
167016e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\DNSAPI.dll (Input=DNSAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
167116e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll [lacks WinVerifyTrust]
167216e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll [lacks WinVerifyTrust]
167316e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76ed0000 'C:\WINDOWS\system32\DNSAPI.dll'
167416e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
167516e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
167616e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
167716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
167816e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll)
167916e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll
168016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
168116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
168216e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
168316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
168416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
168516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll [lacks WinVerifyTrust]
168616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
168716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
168816e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
168916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
169016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
169116e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
169216e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\iphlpapi.dll (Input=iphlpapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
169316e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll [lacks WinVerifyTrust]
169416e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll [lacks WinVerifyTrust]
169516e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76d10000 'C:\WINDOWS\system32\iphlpapi.dll'
169616e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'nimdnsresponder.dll'.
169716e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ws2_32.dll'.
169816e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr90.dll'.
169916e0.1744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll)
170016e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll
170116e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr90.dll'...
170216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Failed to locate 'msvcr90.dll'
170316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
170416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
170516e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
170616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nimdnsresponder.dll'...
170716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'nimdnsresponder.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\nimdnsresponder.dll' [rcNtRedir=0xc0150008]
170816e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
170916e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
171016e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr90.dll'.
171116e0.1744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\nimdnsResponder.dll)
171216e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\nimdnsResponder.dll
171316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr90.dll'...
171416e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Failed to locate 'msvcr90.dll'
171516e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
171616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
171716e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
171816e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
171916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
172016e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
172116e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
172216e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [lacks WinVerifyTrust]
172316e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [lacks WinVerifyTrust]
172416e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\nimdnsResponder.dll [lacks WinVerifyTrust]
172516e0.1744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll)
172616e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
172716e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=63560000 'C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll'
172816e0.1744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll [lacks WinVerifyTrust]
172916e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (Input=Iphlpapi, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
173016e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76d10000 'C:\WINDOWS\system32\Iphlpapi.dll'
173116e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
173216e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
173316e0.1744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
173416e0.1744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll)
173516e0.1744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll
173616e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
173716e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
173816e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll [lacks WinVerifyTrust]
173916e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
174016e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
174116e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll [lacks WinVerifyTrust]
174216e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
174316e0.1744: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
174416e0.1744: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll [lacks WinVerifyTrust]
174516e0.1744: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rasadhlp.dll (Input=rasadhlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=011bee28:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
174616e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll [lacks WinVerifyTrust]
174716e0.1744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll [lacks WinVerifyTrust]
174816e0.1744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76f70000 'C:\WINDOWS\system32\rasadhlp.dll'
174916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000 pwszName=\SystemRoot\System32\ntdll.dll
175016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: New context 011ad078
175116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
175216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D1443DF14F1B99A568DF8FF9C41041F3F66B6F24
175316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2393802.CAT'; file='\SystemRoot\System32\ntdll.dll'
175416e0.16e4: g_pfnWinVerifyTrust=76be2f3c
175516e0.16e4: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll [redoing WinVerifyTrust]
175616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f18 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll
175716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
175816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
175916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C341FCB0AD55E6B447AA010CD92D43E155B6418C
176016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2868626.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll'
176116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
176216e0.16e4: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll'
176316e0.16e4: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll [redoing WinVerifyTrust]
176416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f34 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll
176516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
176616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
176716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A2B7AB9F84E26193E8BA435941C0890B5B42B289
176816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2749655.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll'
176916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
177016e0.16e4: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll'
177116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c0c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll
177216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
177316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
177416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=552176BC9BF85D1D11C191F0EB834A35CEDE28CE
177516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll'
177616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
177716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll'
177816e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll'
177916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
178016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\setupapi.dll (Input=setupapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=021c0068:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
178116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
178216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
178316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
178416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll [lacks WinVerifyTrust]
178516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=021c0068:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
178616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
178716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
178816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
178916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\nimdnsResponder.dll'
179016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
179116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
179216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll [lacks WinVerifyTrust]
179316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
179416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll [lacks WinVerifyTrust]
179516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=023a98b8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
179616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
179716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll [lacks WinVerifyTrust]
179816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
179916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll'
180016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c40 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll
180116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
180216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
180316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=465C77C665506AFA10DE59B2F71A74C0F2AA9FDE
180416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll'
180516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
180616e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll'
180716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c44 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll
180816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
180916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
181016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9647C79485123D392C08D081B1B0458F05F0C72E
181116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2509553.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll'
181216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
181316e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll'
181416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c48 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
181516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
181616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
181716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D1443DF14F1B99A568DF8FF9C41041F3F66B6F24
181816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2393802.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll'
181916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
182016e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll'
182116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c7c pwszName=\Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
182216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
182316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
182416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CDB6A30E231C6E9680580C09C7C31A7AB205BB15
182516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2296011.CAT'; file='\Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll'
182616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
182716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll'
182816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c98 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll
182916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
183016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
183116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=91412DACF71A1E68EFEB6BB8401C0C2BC940932D
183216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll'
183316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
183416e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll'
183516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000c9c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
183616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
183716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
183816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FF53DB5820731A92CB3C20B414E6F260713D70CB
183916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2598479.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll'
184016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
184116e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll'
184216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ca0 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rasman.dll
184316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
184416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
184516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9E71C2260BD69C0E99301B0CA0B2CA1221251B4F
184616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\rasman.dll'
184716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
184816e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rasman.dll'
184916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ca4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll
185016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
185116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
185216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=666091732536A2ACAA3BECA1014282C9CECCECD8
185316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll'
185416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
185516e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll'
185616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ca8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll
185716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
185816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
185916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BA71496C8C5AAACDD80B608B5F2F5D81A503F3B2
186016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll'
186116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
186216e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll'
186316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000cb4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll
186416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
186516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
186616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=86A9B738B45352134DC9897B33AB96FF053AE5A7
186716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll'
186816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
186916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll'
187016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000cc4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll
187116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
187216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
187316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=AFDD92B65EFCBCEDBB0224EBF77350F59522EBD3
187416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll'
187516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
187616e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll'
187716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ccc pwszName=\Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll
187816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
187916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
188016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B02E3E7E88C7208BFAA457ABB076B8B15D6236AA
188116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2509553.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll'
188216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
188316e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll'
188416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000cf0 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll
188516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
188616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
188716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=50273AEA6B921CC2896019318A8E1BAD154D38E6
188816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll'
188916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
189016e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll'
189116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000cf4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll
189216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
189316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
189416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=571801C2E8F7A35C90207C24D26D1B7BEE8DE838
189516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll'
189616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
189716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll'
189816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ce8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
189916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
190016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
190116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5119AE92CEA26503D02D35B6383158AE37FE2E9A
190216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2876217.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll'
190316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
190416e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll'
190516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000cec pwszName=\Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll
190616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
190716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
190816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=033A601B4D761D7DDDAD93AD7CDDD4F92412F8D3
190916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll'
191016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
191116e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll'
191216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d08 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll
191316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
191416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
191516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4F24AC68A5929CDF9DF06101C21D2C010BAF4711
191616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll'
191716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
191816e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll'
191916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d20 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\psapi.dll
192016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
192116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
192216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1220A5661FC53E5F9DA608039CEBCEEE48FBF18E
192316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\psapi.dll'
192416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
192516e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\psapi.dll'
192616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d24 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll
192716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
192816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
192916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C05564A2A12323E14E1C8DD377AD041BA28C1FED
193016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll'
193116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
193216e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll'
193316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d28 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll
193416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
193516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
193616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=64AD3D673F6010762035A6FA977EAA4105055D5D
193716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975713.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll'
193816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
193916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll'
194016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d2c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll
194116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
194216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
194316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=ECB3A67C150C6398D253290D09C0F59A60E084C2
194416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2585542.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll'
194516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
194616e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll'
194716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d30 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll
194816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
194916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
195016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4B49CCC56B14D5FEFEE6C327DDD03222E1C939F4
195116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll'
195216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
195316e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll'
195416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d34 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll
195516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
195616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
195716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=23C485A2E765631DB45262AC9E8B76BADFFEDFC4
195816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll'
195916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
196016e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll'
196116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000db8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll
196216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
196316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
196416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7443FDB256E844E5D9CF24C4AA21F9A72D726BB5
196516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2705219.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll'
196616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
196716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll'
196816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000dfc pwszName=\Device\HarddiskVolume1\WINDOWS\system32\version.dll
196916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
197016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
197116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB81DD86353AAEF1E4E72C5D957E415E7AA3AF99
197216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\version.dll'
197316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
197416e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\version.dll'
197516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000e54 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll
197616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
197716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
197816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E0DB8A4A02042655EC1C88403D6B9F21798A6222
197916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll'
198016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
198116e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll'
198216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000eac pwszName=\Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll
198316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 011ad078
198416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=011ad078
198516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F27B29AAF5A03A9643181C7CB7D46B5D66FA434F
198616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Retrying with fresh context (CryptCATAdminEnumCatalogFromHash -> 1168; iCat=0x0)
198716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: New context 023a81c8
198816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
198916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F27B29AAF5A03A9643181C7CB7D46B5D66FA434F
199016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: CryptCATAdminEnumCatalogFromHash failed ERRROR_NOT_FOUND (1168)
199116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 22900 (org 22900)
199216e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll'
199316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000eb0 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll
199416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
199516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
199616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=81C3821151BB898A7DD4E7818266435D3EE8D3CF
199716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll'
199816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
199916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll'
200016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ec4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll
200116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
200216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
200316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B8F28F680EBD8859E161F9CDD168257B62A08018
200416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll'
200516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
200616e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll'
200716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ee8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll
200816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
200916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
201016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7D85B357611ADF03247D596C92EC3B501D427B06
201116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2922229.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll'
201216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
201316e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll'
201416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000efc pwszName=\Device\HarddiskVolume1\WINDOWS\system32\imm32.dll
201516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
201616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
201716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D6F0D1301D0F6E63296261C8CC39CBFC638710B0
201816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\imm32.dll'
201916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
202016e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\imm32.dll'
202116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f0c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll
202216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
202316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
202416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9AA903C9B33EA1263DC5669BF4225AF3ECAAC13F
202516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2876331.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll'
202616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
202716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll'
202816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f10 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
202916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
203016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
203116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2F8F9F10FAA68A11A403FBB3170B2620567FE8FC
203216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB968389.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll'
203316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
203416e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll'
203516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f14 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll
203616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
203716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
203816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B79ED0303B95FE0DED65BC8F630FDF85473885F3
203916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956572.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll'
204016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
204116e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll'
204216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f1c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll
204316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
204416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
204516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=07B420286AF1BDEF3D3AD4662CFA560FBCAE8FE9
204616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2893294.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll'
204716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
204816e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll'
204916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f20 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll
205016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
205116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
205216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6D2DF3145AB4B9DACCCDC41CB1524D6C637BE774
205316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB974571.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll'
205416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
205516e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll'
205616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f24 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll
205716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
205816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
205916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=10B15A907D0CB491D9F7FBA4AA3F548B2905F303
206016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll'
206116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
206216e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll'
206316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f28 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll
206416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
206516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
206616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9BD9AAC7D2700E5F6C3F920C62F7257D1F4ABC69
206716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2898715.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll'
206816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
206916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll'
207016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000f2c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\user32.dll
207116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
207216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
207316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F8F6009B4F0F666651CBDBF36D8544CF9B0520E0
207416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\user32.dll'
207516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
207616e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll'
207716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
207816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll
207916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=023faef8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
208016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
208116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll
208216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=023faef8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
208316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
208416e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
208516e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll
208616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254870:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
208716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=779e0000 'C:\WINDOWS\system32\crypt32.dll'
208816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
208916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xca2de669f55ba200 C=US, O=Symantec Corporation, CN=Symantec Root 2005 CA
209016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
209116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
209216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3423e6c7a208b400 O=Symantec Corporation, CN=Symantec Root CA
209316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
209416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
209516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
209616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe0249b57ec7fbc00 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication EV RootCA1
209716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xee325335cd8dba00 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2007
209816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4a25c87eb933b700 C=RO, O=certSIGN, OU=certSIGN ROOT CA
209916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x10fd08902b14a900 C=es, O=Servicio de Certificacion del Colegio de Registradores (SCR), OU=Certificado Propio, OU=Certificado Raiz, CN=Certificado de la Clave PrincipalS
210016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3703c8da1585b000 C=FI, ST=Finland, O=Vaestorekisterikeskus CA, OU=Certification Authority Services, OU=Varmennepalvelut, CN=VRK Gov. Root CA
210116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8b062bb556fcc300 C=FR, O=Certeurope, OU=0002 434202180, CN=Certeurope Root CA 2
210216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x977025a7d23db100 C=UY, O=ADMINISTRACION NACIONAL DE CORREOS, OU=SERVICIOS ELECTRONICOS, CN=Correo Uruguayo - Root CA
210316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x15941d5f68b5c600 CN=ComSign Secured CA, O=ComSign, C=IL
210416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa12b07674f1bf600 C=US, O=AffirmTrust, CN=AffirmTrust Commercial
210516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x1d56e8e1edcfce00 C=KR, O=KISA, OU=ROOTCA, CN=CertRSA01
210616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x75a2ccecb8259a00 C=TW, O=Government Root Certification Authority
210716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3c0043239a65bd00 C=FR, O=Certplus, CN=Class 3TS Primary CA
210816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
210916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa5c88c0a3eb7ab00 CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Aralık 2007
211016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xfefb81851ded9800 C=MX, CN=Autoridad Certificadora del Colegio Nacional de Correduria Publica Mexicana, A.C., O=Colegio Nacional de Correduria Publica Mexicana, A.C.
211116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6693ec7ebc027a58 C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Public Notary Root
211216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x49dccfc3945cd200 C=GB, O=Trustis Limited, OU=Trustis EVS Root CA
211316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xeb7a1ac4eef2cd00 C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Platina (Class Platinum) Főtanúsítvány
211416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd9e629afec17ef00 C=us, ST=Utah, L=Salt Lake City, O=Digital Signature Trust Co., OU=United Parcel Service, CN=DST (UPS) RootCA, Email=ca@digsigtrust.com
211516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8fe279bdb46fee00 C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certificate Authority
211616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9b1aee9a3ab19500 C=AT, O=Telekom-Control-Kommission, CN=Telekom-Control-Kommission Top 1
211716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe0c6a3a05515a600 C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA
211816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x53bc21710786a600 C=AT, O=A-Trust Ges. für Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-01, CN=A-Trust-Qual-01
211916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa6ba96b8897a8259 L=ValiCert Validation Network, O=ValiCert, Inc., OU=ValiCert Class 1 Policy Validation Authority, CN=http://www.valicert.com/, Email=info@valicert.com
212016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8404841a381f9f63 C=ES, ST=Barcelona, L=Barcelona, O=Fundacion FESTE, CN=FESTE, Verified Certs, Email=feste@feste.org
212116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xfc37ffd3ffd98900 C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 1 2007:PN
212216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xaf25238a616cb0ec C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Expressz (Class C) Tanusitvanykiado
212316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc7d32b6954e4f000 CN=ComSign CA, O=ComSign, C=IL
212416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
212516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x760668e19592ff00 CN=ACEDICOM Root, OU=PKI, O=EDICOM, C=ES
212616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
212716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x36e53cbe91a2a500 C=HK, O=Hongkong Post, CN=Hongkong Post Root CA
212816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x50bb81640c01cb00 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
212916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xaafa7abb99ab000 O=Cisco Systems, CN=Cisco Root CA 2048
213016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
213116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
213216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5eb09e2012c300 C=TR, O=Elektronik Bilgi Guvenligi A.S., CN=e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
213316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x79e5fa129075bd8e C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Root
213416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
213516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x93de77b717bc192f C=US, O=Equifax Secure Inc., CN=Equifax Secure eBusiness CA-1
213616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8d415c0f556db600 C=TN, O=ANCE, OU=Certification & PKI, CN=Agence Nationale de Certification Electronique, Email=ance@certification.tn
213716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe248b7eeee4af00 C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2
213816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x41fe5fa9df12c400 C=US, O=AffirmTrust, CN=AffirmTrust Premium
213916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x266e9b638ffac00 C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1
214016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xafc0be88bdf2a800 DC=rs, DC=posta, DC=ca, CN=Configuration, CN=Services, CN=Public Key Services, CN=AIA, CN=Posta CA Root
214116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
214216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
214316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x90f3036e613dad00 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-nQual-03, CN=A-Trust-nQual-03
214416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd94cd06e3094b700 C=FR, O=Certplus, CN=Class 3 Primary CA
214516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd30db27b36d6632f C=DE, ST=Hamburg, L=Hamburg, O=TC TrustCenter for Security in Data Networks GmbH, OU=TC TrustCenter Class 4 CA, Email=certificate@trustcenter.de
214616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf08242cb8436b500 C=CZ, CN=I.CA - Qualified Certification Authority, 09/2009, O=První certifikační autorita, a.s., OU=I.CA - Accredited Provider of Certification Services
214716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
214816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
214916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
215016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x27987caecfd64e64 C=BR, ST=Rio de Janeiro, L=Rio de Janeiro, O=Certisign Certificadora Digital Ltda., OU=Certisign Autoridade Certificadora AC3S
215116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x31ae72c74210188 C=US, O=VeriSign, Inc., OU=Class 2 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
215216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4c227db225309500 C=ES, ST=Madrid, L=Madrid, O=IPS Certification Authority s.l. ipsCA, OU=ipsCA, CN=ipsCA Main CA Root, Email=main01@ipsca.com
215316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd350fa779bacd900 C=us, ST=Utah, L=Salt Lake City, O=Digital Signature Trust Co., OU=National Retail Federation, CN=DST (NRF) RootCA, Email=ca@digsigtrust.com
215416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
215516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x39889aa748eabf00 C=ES, ST=Barcelona, L=Barcelona (see current address at https://www.anf.es/address/), O=ANF Autoridad de Certificación, OU=ANF Clase 1 CA
215616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x992d6156a36dbf19 C=US, O=VeriSign, Inc., OU=Class 1 Public Primary Certification Authority
215716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x48cc53a3896bab00 C=CO, O=Sociedad Cameral de Certificación Digital - Certicámara S.A., CN=AC Raíz Certicámara S.A.
215816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd71519e43fd5ba00 C=CA, ST=Ontario, L=Toronto, O=Echoworx Corporation, OU=Certification Services, CN=Echoworx Root CA2
215916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xade42733bd8d9700 C=us, O=U.S. Government, OU=FBCA, CN=Common Policy
216016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x1c29714b0c909400 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA1
216116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
216216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe0b0c3006b04c400 C=LV, OU=Sertifikacijas pakalpojumu dala, CN=E-ME SSI (RCA)
216316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x59c66911a5cbad00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 4 Public Primary Certification Authority - G3
216416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa1ce6ec6f7fabd00 O=eSign Australia, OU=Gatekeeper PKI, CN=Gatekeeper Root CA
216516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd8240de4137fd600 C=IE, O=An Post, OU=Post.Trust Ltd., CN=Post.Trust Root CA
216616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5295db258780a400 C=CL, ST=Region Metropolitana, L=Santiago, O=E-CERTCHILE, OU=Autoridad Certificadora, Email=sclientes@ccs.cl, CN=E-CERT ROOT CA
216716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd38f027573ffd300 CN=TÜRKTRUST Elektronik İşlem Hizmetleri, C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Kasım 2005
216816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x292d67d00f91f000 C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados Notariales
216916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd8bd00c158b0ac00 C=NL, O=DigiNotar, CN=DigiNotar Root CA, Email=info@diginotar.nl
217016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xea33d3c14ab5d900 C=DE, ST=Baden-Wuerttemberg (BW), L=Stuttgart, O=Deutscher Sparkassen Verlag GmbH, CN=S-TRUST Authentication and Encryption Root CA 2005:PN
217116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
217216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x12e3130f8d4bf71d C=US, O=Digital Signature Trust Co., OU=DST-Entrust GTI CA
217316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd8240de4137fd600 C=IE, O=An Post, OU=Post.Trust Ltd., CN=Post.Trust Root CA
217416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6e864c7a8071ba00 C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM
217516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x923c3ab73579a1d0 C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC
217616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xbab415bd1e249800 C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority
217716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3da5e7b626c6d200 C=us, ST=Utah, L=Salt Lake City, O=Digital Signature Trust Co., OU=DSTCA X1, CN=DST RootCA X1, Email=ca@digsigtrust.com
217816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x267184556bd9ee00 C=MX, CN=Autoridad Certificadora de la Asociacion Nacional del Notariado Mexicano, A.C., O=Asociacion Nacional del Notariado Mexicano, A.C.
217916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe98376b596a767b3 C=GB, O=ViaCode, OU=CA Data, OU=CA 1
218016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
218116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4c4391c37e36a900 CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Kasım 2005
218216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x31ae72c74210188 C=US, O=VeriSign, Inc., OU=Class 2 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
218316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x20a3c30cad008000 C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC RAIZ DNIE
218416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
218516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf7c33b7ebfec9b00 C=SI, O=POSTA, OU=POSTArCA
218616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
218716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4f0fd52da765ca7a L=Internet, O=VeriSign, Inc., OU=VeriSign Individual Software Publishers CA
218816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xab7df2a48539b200 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Client Authentication and Email
218916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb3d6d6c9f168c800 C=FR, O=Dhimyotis, CN=Certigna
219016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
219116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xfbf8ea8e6b96ca00 C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068
219216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc3f08e9b8780ab00 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 2 CA, CN=TC TrustCenter Class 2 CA II
219316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
219416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf44cbb0f8c74bc00 C=HU, ST=Hungary, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado
219516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x181333ef92178f93 C=US, O=Digital Signature Trust Co., OU=DSTCA E2
219616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6a4c39c4152dd100 C=CZ, CN=I.CA - Standard root certificate, O=Prvni certifikacni autorita a.s.
219716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xbf168afe877852f1 C=US, O=thawte, Inc., OU=(c) 2007 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G2
219816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdf103d404d3cef00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA 2
219916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa5236f6f0323e700 C=ES, L=C/ Muntaner 244 Barcelona, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, Email=ca@firmaprofesional.com
220016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
220116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xbeb3e8b6dcbbd000 C=BR, O=Serasa S.A., OU=Serasa CA I, CN=Serasa Certificate Authority I
220216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x51aead9c4ccdb500 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 4 CA, CN=TC TrustCenter Class 4 CA II
220316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8083236a0da38b5a C=US, O=VeriSign, Inc., OU=Class 2 Public Primary Certification Authority
220416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x177a8452aab3d500 C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Primary Normalised CA
220516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb879433db3ccbc00 C=US, O=Digital Signature Trust Co., CN=Baltimore EZ by DST, Mail=ca@digsigtrust.com
220616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe98c039c6a36e44b C=DE, ST=Hamburg, L=Hamburg, O=TC TrustCenter for Security in Data Networks GmbH, OU=TC TrustCenter Time Stamping CA, CN=TC TrustCenter Time Stamping CA
220716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x449f1b13efa09400 C=CH, O=SwissSign AG, CN=SwissSign Platinum Root CA - G3
220816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
220916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xda5f1cc8fc5ca000 C=CZ, O=Česká pošta, s.p. [IČ 47114983], CN=PostSignum Root QCA 2
221016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdff6d845073c8b00 C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 CA 1
221116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x2f371157ab2ac600 C=ES, O=Generalitat Valenciana, OU=PKIGVA, CN=Root CA Generalitat Valenciana
221216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xec8d0d2e0535c1b4 C=DE, ST=Hamburg, L=Hamburg, O=TC TrustCenter for Security in Data Networks GmbH, OU=TC TrustCenter Class 3 CA, Email=certificate@trustcenter.de
221316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe66b56ffc86e50a4 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA, Email=server-certs@thawte.com
221416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd41691e475fb8515 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority
221516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x1a1ea800c447f200 C=BR, O=Serasa S.A., OU=Serasa CA III, CN=Serasa Certificate Authority III
221616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf444417a00c9bdd C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 1
221716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xada18517b3fdc600 C=FR, O=KEYNECTIS, OU=ROOT, CN=KEYNECTIS ROOT CA
221816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3178d37f87f1c400 C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2
221916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xff3891b54348328 C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
222016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
222116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
222216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd29c4acac78fdf00 C=IN, O=India PKI, CN=CCA India 2007
222316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x87b3c722f299c800 C=LT, O=VI Registru Centras - I.k. 124110246, OU=Registru Centro Sertifikavimo Centras, CN=VI Registru Centras RCSC (RootCA)
222416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4f0fd52da765ca7a L=Internet, O=VeriSign, Inc., OU=VeriSign Individual Software Publishers CA
222516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x68dbf810c635b900 C=JP, O=LGPKI, OU=Application CA G2
222616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x71b9b0629cdac200 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Universal CA, CN=TC TrustCenter Universal CA III
222716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x34f9263b33a8d500 C=US, O=Wells Fargo, OU=Wells Fargo Certification Authority, CN=Wells Fargo Root Certificate Authority
222816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4ef92ac43a0cd500 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2
222916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
223016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x52273f34861cc300 C=IT, L=Milano, O=Actalis S.p.A./03358520967, CN=Actalis Authentication CA G1
223116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xebbf1d700c008a00 C=US, O=Verizon Business, OU=OmniRoot, CN=Verizon Global Root CA
223216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7c717c98dbba4fe6 C=US, O=GTE Corporation, CN=GTE CyberTrust Root
223316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x94fb3f125608a800 C=CZ, CN=I.CA - Standard Certification Authority, 09/2009, O=První certifikační autorita, a.s., OU=I.CA - Provider of Certification Services
223416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x992d6156a36dbf19 C=US, O=VeriSign, Inc., OU=Class 1 Public Primary Certification Authority
223516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6a592bec2f2ab200 C=UY, O=ADMINISTRACION NACIONAL DE CORREOS, OU=SERVICIOS ELECTRONICOS, CN=SERVICIOS DE CERTIFICACION - A.N.C., Mail=correo_cert@correo.com.uy
223616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
223716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x86ff05772ef3c000 C=BR, O=ICP-Brasil, OU=Instituto Nacional de Tecnologia da Informacao - ITI, L=Brasilia, ST=DF, CN=Autoridade Certificadora Raiz Brasileira
223816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x236696801e5e9900 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA3
223916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc96a9a6d83aa070b C=AT, ST=Austria, L=Vienna, O=Arge Daten Oesterreichische Gesellschaft fuer Datenschutz, Email=a-cert@argedaten.at
224016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xef62113787ebace5 C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2
224116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7c71e6059b87be00 C=CH, O=SwissSign AG, CN=SwissSign Silver Root CA - G3
224216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
224316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe56c346b77d48b00 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Universal CA, CN=TC TrustCenter Universal CA II
224416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6a3ad06184a0ee00 CN=EBG Elektronik Sertifika Hizmet Sağlayıcısı, O=EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., C=TR
224516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xad77733ff735d300 C=CN, O=CNNIC, CN=CNNIC ROOT
224616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9bd2ba86bccaaf00 C=CO, L=Carrera 9 16-21 Bogota, O=Certicamara S.A. Entidad de Certificacion, CN=Certificado Empresarial Clase-A
224716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdaad63f38ff8e900 C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, Email=info@e-szigno.hu
224816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xcdb1b8b8b61ca200 C=MO, O=Macao Post, CN=Macao Post eSignTrust Root Certification Authority
224916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8fc223a020ec04ea C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Uzleti (Class B) Tanusitvanykiado
225016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
225116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xcfb22061f662ac00 C=DK, O=TDC, CN=TDC OCES CA
225216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3de91d4541cc00 C=US, O=America Online Inc., CN=America Online Root Certification Authority 2
225316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x298be035a30bab00 C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2
225416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
225516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8371290032ede838 C=DE, ST=Hamburg, L=Hamburg, O=TC TrustCenter for Security in Data Networks GmbH, OU=TC TrustCenter Class 2 CA, Email=certificate@trustcenter.de
225616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7d2686ca075db300 C=CN, O=UniTrust, CN=UCA Root
225716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdd241e34cfa9816c C=US, O=Digital Signature Trust Co., OU=DSTCA E1
225816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5784013b5c9c9d00 CN=ComSign Advanced Security CA
225916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5c39bb51bbe0b400 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 3 CA, CN=TC TrustCenter Class 3 CA II
226016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x80932303749f217 C=SI, O=Halcom, CN=Halcom CA PO 2
226116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8b7607cf260bd500 C=si, O=state-institutions, OU=sigov-ca
226216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8f874e74e06da700 C=JP, O=Japanese Government, OU=ApplicationCA
226316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x23f085ee57b2b400 C=ES, O=Consejo General de la Abogacia NIF:Q-2863006I, CN=Autoridad de Certificacion de la Abogacia
226416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5534b165029017e7 C=US, O=Equifax Secure Inc., CN=Equifax Secure Global eBusiness CA-1
226516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7052e7f4a064c100 hS
226616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x435579e011d3b100 C=US, ST=DC, L=Washington, O=ABA.ECOM, INC., CN=ABA.ECOM Root CA, Email=admin@digsigtrust.com
226716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd80363d60552ca00 CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=ANKARA, O=(c) 2005 TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş.
226816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x992d6156a36dbf19 C=US, O=VeriSign, Inc., OU=Class 1 Public Primary Certification Authority
226916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x802b3770cb00af00 C=EU, L=Madrid (see current address at www.camerfirma.com/address)œÿ¾?xS
227016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x774c69b07c26cf00 C=us, O=U.S. Government, OU=FBCA, CN=Common Policy
227116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x99a5d5a058801148 C=US, O=Digital Signature Trust Co., OU=DST (ANX Network) CA
227216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
227316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xff91db7d3f31b300 CN=TÜRKTRUST Elektronik İşlem Hizmetleri, C=TR, L=ANKARA, O=(c) 2005 TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş.
227416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc66d30927ebce400 C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority
227516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa09adb78d220ae00 C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Primary Qualified CA
227616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
227716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA
227816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb6d7aeb376b4eb29 C=DE, ST=Hamburg, L=Hamburg, O=TC TrustCenter for Security in Data Networks GmbH, OU=TC TrustCenter Class 1 CA, Email=certificate@trustcenter.de
227916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xce3493bee81cce00 C=BR, O=ICP-Brasil, OU=Instituto Nacional de Tecnologia da Informacao - ITI, CN=Autoridade Certificadora Raiz Brasileira v1
228016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x611467ea52d3b600 O=eSign Australia, OU=Public Secure Services, CN=eSign Imperito Primary Root CA
228116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa16e1e56de57af00 C=US, O=VISA, OU=Visa International Service Association, CN=Visa eCommerce Root
228216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x185da5e55536b700 C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Chambers of Commerce Root
228316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca999312534d200 C=CH, O=admin, OU=Services, OU=Certification Authorities, CN=AdminCA-CD-T01
228416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x90af44962377a400 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Universal CA, CN=TC TrustCenter Universal CA I
228516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x41f41df2ae6da400 O=eSign Australia, OU=Public Secure Services, CN=Primary Utility Root CA
228616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xaec72ec8296bc300 C=FR, O=Certplus, CN=Class 1 Primary CA
228716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6b1d5e81c965198 L=ValiCert Validation Network, O=ValiCert, Inc., OU=ValiCert Class 3 Policy Validation Authority, CN=http://www.valicert.com/, Email=info@valicert.com
228816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf7bfb4de1854ad00 C=US, ST=Utah, L=Salt Lake City, O=Xcert EZ by DST, CN=Xcert EZ by DST, Email=ca@digsigtrust.com
228916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
229016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9675c08cf075dc00 C=us, ST=Utah, L=Salt Lake City, O=Digital Signature Trust Co., OU=DSTCA X2, CN=DST RootCA X2, Email=ca@digsigtrust.com
229116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x59b08ed7ab919600 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-02, CN=A-Trust-Qual-02
229216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8083236a0da38b5a C=US, O=VeriSign, Inc., OU=Class 2 Public Primary Certification Authority
229316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x88db8dee0f25e100 C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority
229416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf06a004f18aca200 C=FR, O=NATIXIS, OU=0002 542044524, CN=CESAM
229516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x91e3728b8b40d000 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority
229616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf274f0a48808ab00 C=CZ, CN=I.CA - Qualified root certificate, O=První certifikační autorita, a.s.
229716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x48f1013ae27eb000 C=NL, O=PTT Post, OU=KeyMail, CN=PTT Post Root CA, Mail=ca@ptt-post.nl
229816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x40552c1742a1d640 C=KR, O=Government of Korea, OU=GPKI, CN=Root CA
229916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
230016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
230116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdb2cd5c20d0aaf00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 2 Public Primary Certification Authority - G3
230216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6429d974d78ea400 C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 CA 1
230316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x33c562d0d11fb200 C=FR, ST=France, L=Paris, O=PM/SGDN, OU=DCSSI, CN=IGC/A, Email=igca@sgdn.pm.gouv.fr
230416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
230516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd1ae6517edbade00 C=KR, O=KISA, OU=Korea Certification Authority Central, CN=KISA RootCA 3
230616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x665014bdbcc8f800 O=Cybertrust, Inc, CN=Cybertrust Global Root
230716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb352b1523915d000 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2
230816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xbbd90ca8b0b9d000 C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 1
230916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x12d327cc0bc1db00 C=IT, O=SIA S.p.A., L=Milano, CN=SIA Secure Server CA
231016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5536e4a191fbb300 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Network Applications
231116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
231216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9c288b4941d93b41 O=EUnet International, CN=EUnet International Root CA
231316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x19c084be4feaba00 C=LT, O=Skaitmeninio sertifikavimo centras, OU=Certification Authority, CN=SSC Root CA A
231416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x92d01fe10011c900 C=US, O=VISA, OU=Visa International Service Association, CN=Visa Information Delivery Root CA
231516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3eaa756fe759c500 C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G2
231616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x363d9b00b34fcb00 C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA
231716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6e2ba21058eedf00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC
231816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf8dae202a2dfca00 C=CH, O=SwissSign AG, CN=SwissSign Platinum CA - G2
231916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7637cbb5cf9ce200 C=SG, O=Netrust Certificate Authority 1, OU=Netrust CA1
232016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xec5f3f9083ccd483 C=BR, O=Certisign Certificadora Digital Ltda., OU=Certisign - Autoridade Certificadora - AC4
232116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9e9e11801cf5ff00 C=AT, O=A-Trust, OU=A-Trust-nQual-01, CN=A-Trust-nQual-01
232216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
232316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x783bbdee737e9b00 C=CN, O=China Internet Network Information Center, CN=China Internet Network Information Center EV Certificates Root
232416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
232516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3ef12ba7af89f000 L=Bogota AV Calle 26 N 68D-35, C=CO, O=Entidad de Certificacion Digital Abierta Certicamara S.A., CN=CERTICAMARA S.A.
232616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9456d690eba5cc30 C=BR, O=Certisign Certificadora Digital Ltda., OU=Certisign - Autoridade Certificadora - AC2
232716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc54d6a4fd5b3b9d9 C=be, O=Belgacom, OU=MTM, CN=Belgacom E-Trust Primary CA, Mail=info@e-trust.be
232816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
232916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x52e0d6dc2904e700 C=FI, L=Helsinki, O=Saunalahden Serveri Oy, CN=Saunalahden Serveri CA, Email=gold-certs@saunalahti.fi
233016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5263666a6040b0fc C=IT, O=SIA S.p.A., L=Milano, CN=SIA Secure Client CA
233116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9b3ae4d356dfc000 C=EU, L=Madrid (see current address at www.camerfirma.com/address)°I=
233216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x69785d02da6eb500 C=ES, O=IZENPE S.A. - CIF A-01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8, L=Avda del Mediterraneo Etorbidea 3 - 01010 Vitoria-Gasteiz, CN=Izenpe.com, Email=Info@izenpe.com
233316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf8491584e4cdb300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 2 CA 2007
233416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
233516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x89aa5a3e83aec17a C=US, O=RSA Data Security, Inc., OU=Secure Server Certification Authority
233616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xfe3e3d933619ad3f C=ES, O=FNMT, OU=FNMT Clase 2 CA
233716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc7e1e7c92e9bf383 C=ES, ST=Barcelona, L=Barcelona, O=Fundacion FESTE, CN=FESTE, Public Notary Certs, Email=feste@feste.org
233816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa321f027ebbec200 O=TeliaSonera, CN=TeliaSonera Root CA v1
233916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xcfd21c88249eb300 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-03, CN=A-Trust-Qual-03
234016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x824f50c06d5393bc C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting, OU=Certification Services Division, CN=Thawte Personal Basic CA, Email=personal-basic@thawte.com
234116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd607333e36718100 Email=pki@sk.ee, C=EE, O=AS Sertifitseerimiskeskus, CN=Juur-SK
234216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x40a4bfb9091e141c C=US, O=First Data Digital Certificates Inc., CN=First Data Digital Certificates Inc. Certification Authority
234316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdc94c92cf53db900 C=US, O=Digital Signature Trust, OU=DST ACES, CN=DST ACES CA X6
234416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5485aec4f9cfe4f0 C=US, O=VeriSign, Inc., OU=Class 4 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
234516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4e5147f555f3c100 C=LT, O=Skaitmeninio sertifikavimo centras, OU=Certification Authority, CN=SSC Root CA B
234616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x64acc0b265e5b000 C=si, O=state-institutions, OU=sigen-ca
234716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
234816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x91b03080ccefa700 C=ES, ST=Madrid, L=Madrid, O=IPS Certification Authority s.l. ipsCA, OU=ipsCA, CN=ipsCA Global CA Root, Email=global01@ipsca.com
234916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5901ca5aa77fd00 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11
235016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd0353b9e7b50c500 C=GB, O=Trustis Limited, OU=Trustis FPS Root CA
235116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x556cacd82e35af00 C=US, O=SecureTrust Corporation, CN=Secure Global CA
235216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x281b06521e933939 C=US, O=Equifax Secure, OU=Equifax Secure eBusiness CA-2
235316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x30669a4e82fa800 C=US, O=America Online Inc., CN=America Online Root Certification Authority 1
235416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa9c86e43a2efdb00 C=PT, O=SCEE, CN=ECRaizEstado
235516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf0ca9d354a179000 C=FI, O=Sonera, CN=Sonera Class2 CA
235616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf23ec9c15254b300 C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA 2
235716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
235816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8cb9cf4407f8d966 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting, OU=Certification Services Division, CN=Thawte Personal Premium CA, Email=personal-premium@thawte.com
235916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
236016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7052e7f4a064c100 L=Alvaro Obregon, ST=Distrito Federal, C=MX
236116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe8985fec4712d200 C=AT, L=Vienna, ST=Austria, O=ARGE DATEN - Austrian Society for Data Protection, OU=GLOBALTRUST Certification Service, CN=GLOBALTRUST, Email=info@globaltrust.info
236216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xae429fd0a270a200 C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Global Chambersign Root
236316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
236416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5b9d66b2891fad00 C=BR, O=Serasa S.A., OU=Serasa CA II, CN=Serasa Certificate Authority II
236516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9259c8abe5ca713a L=ValiCert Validation Network, O=ValiCert, Inc., OU=ValiCert Class 2 Policy Validation Authority, CN=http://www.valicert.com/, Email=info@valicert.com
236616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xac1e0fca7ad3c900 C=ES, O=IZENPE S.A., CN=Izenpe.com
236716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x192908b713c1bb00 C=TN, O=ANCE, OU=ANCE WEB, CN=Agence Nationale de Certification Electronique, Email=ance@certification.tn
236816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
236916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xafe3d3869f859d00 C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Autorité Racine
237016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
237116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xfd887dc131f69200 C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig
237216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9da62f2397ebdd00 C=AT, ST=Austria, L=Vienna, O=ARGE DATEN - Austrian Society for Data Protection, OU=A-CERT Certification Service, CN=A-CERT ADVANCED, Email=info@a-cert.at
237316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6b2e1733cc84b400 C=US, O=AffirmTrust, CN=AffirmTrust Networking
237416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x4297e24fc722b300 C=ES, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), OU=Serveis Publics de Certificacio, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Jerarquia Entitats de Certificacio Catalanes, CN=EC-ACC
237516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
237616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd483b82d16bebad0 C=US, O=VeriSign, Inc., OU=Class 1 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
237716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xfe221444afe0cb00 C=ch, O=admin, OU=Services, OU=Certification Authorities, CN=Admin-Root-CA
237816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdd80d271558fb700 O=RSA Security Inc, OU=RSA Security 2048 V3
237916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdc8eea399f74524f C=ES, ST=BARCELONA, L=BARCELONA, O=IPS Seguridad CA, OU=Certificaciones, CN=IPS SERVIDORES, Email=ips@mail.ips.es
238016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
238116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa9cc8cfa2245a100 C=LT, O=Skaitmeninio sertifikavimo centras, OU=Certification Authority, CN=SSC Root CA C
238216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe66b56ffc86e50a4 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA, Email=server-certs@thawte.com
238316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xcd7b81d500c8ed00 C=HU, L=Budapest, O=Microsec Ltd., OU=e-Szigno CA, CN=Microsec e-Szigno Root CA
238416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x92ac5ed85c2d0e9b C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4
238516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x63d591bc40b8c400 C=DK, O=TDC Internet, OU=TDC Internet Root CA
238616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x419b60ebff37ab00 C=FR, O=Certplus, CN=Class 3P Primary CA
238716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xb8ce920e1b50ac00 C=ES, O=Colegio de Registradores de la Propiedad y Mercantiles de España, OU=Certificado Propio, CN=Registradores de España - CA Raíz
238816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x2676db9b15412b5a C=KR, O=Government of Korea, OU=GPKI, CN=GPKIRootCA
238916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x715b6494b0d4d769 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting, OU=Certification Services Division, CN=Thawte Personal Freemail CA, Email=personal-freemail@thawte.com
239016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa7f9b4b9d484dd00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 1 Public Primary Certification Authority - G3
239116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x366c87bc8c77d200 C=FI, L=Helsinki, O=Saunalahden Serveri Oy, CN=Saunalahden Serveri CA, Email=silver-certs@saunalahti.fi
239216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xe69c54164257cc00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3
239316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x3a8810ff4b6d8a00 C=TR, L=Gebze - Kocaeli, O=Türkiye Bilimsel ve Teknolojik Araştırma Kurumu - TÜBİTAK, OU=Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü - UEKAE, OU=Kamu Sertifikasyon Merkezi, CN=TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
239416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7f2bd4d15bd9c500 C=SE, O=Carelink, CN=SITHS CA v3
239516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
239616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xcaac0c3f3f759000 C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados CGN
239716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x817a1151b5d29800 C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA
239816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xeb8adc879521a200 C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Corporaciones de Derecho Publico
239916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf63f5006e5b3da00 C=CN, O=UniTrust, CN=UCA Global Root
240016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x5485aec4f9cfe4f0 C=US, O=VeriSign, Inc., OU=Class 4 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
240116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9d5a65c89fe8c300 C=CH, O=SwissSign AG, CN=SwissSign Gold Root CA - G3
240216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x2f5561fdf9b89b00 C=LV, O=VAS Latvijas Pasts - Vien.reg.Nr.40003052790, OU=Sertifikacijas pakalpojumi, CN=VAS Latvijas Pasts SSI(RCA)
240316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
240416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa674f2b1f89b500 C=FI, O=Sonera, CN=Sonera Class1 CA
240516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x6d4bbe735e24c400 C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Arany (Class Gold) Főtanúsítvány
240616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
240716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf1fbd6404bd4a500 C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust TOP Root CA
240816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd483b82d16bebad0 C=US, O=VeriSign, Inc., OU=Class 1 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
240916e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xa8b43f38c3f7b100 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware
241016e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x407c0c3d7576bf00 C=SI, O=ACNLB
241116e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x7ea41f5ea4cd9c00 C=BG, O=InfoNotary PLC, DC=root-ca, CN=InfoNotary CSP Root, OU=InfoNotary CSP Root, Email=csp@infonotary.com
241216e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9de5960126a3bc00 C=SI, O=Halcom, CN=Halcom CA FO
241316e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
241416e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
241516e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xf03913fae404bc00 C=KR, O=KISA, OU=Korea Certification Authority Central, CN=KISA RootCA 1
241616e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xd43dd8b22552c700 C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado, Email=info@netlock.hu
241716e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0xdf603f23927b9600 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA2
241816e0.16e4: supR3HardenedWinIsDesiredRootCA: Adding 0x9bf841c5a3eb95c0 C=BR, O=Certisign Certificadora Digital Ltda., OU=Certisign Autoridade Certificadora AC1S
241916e0.16e4: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=331
242016e0.16e4: SUPR3HardenedMain: Load Runtime...
242116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll
242216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
242316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll
242416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
242516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
242616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
242716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
242816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
242916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
243016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
243116e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll)WinVerifyTrust
243216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
243316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
243416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
243516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll
243616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
243716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
243816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
243916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
244016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
244116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll
244216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
244316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
244416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
244516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
244616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll)WinVerifyTrust
244716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
244816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
244916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
245016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
245116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
245216e0.16e4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
245316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll)
245416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
245516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
245616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
245716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
245816e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll)WinVerifyTrust
245916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0230aad8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
246016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
246116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
246216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
246316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
246416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
246516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
246616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
246716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'
246816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
246916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
247016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
247116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
247216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
247316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
247416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
247516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
247616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
247716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
247816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
247916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
248016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
248116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
248216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
248316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
248416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
248516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
248616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
248716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
248816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
248916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
249416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
249516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
249916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
250916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
251016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
251116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
251216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024e29a0:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;.;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
251316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
251416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
251516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
251616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=02db0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
251716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll
251816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0230aad8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
251916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76be0000 'C:\WINDOWS\system32\Wintrust.dll'
252016e0.1318: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll
252116e0.1318: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0230aad8:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
252216e0.1318: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7c910000 'C:\WINDOWS\system32\ntdll.dll'
252316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll
252416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00257568:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
252516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=779e0000 'C:\WINDOWS\system32\crypt32.dll'
252616e0.16e4: SUPR3HardenedMain: Load TrustedMain...
252716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
252816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
252916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
253016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
253116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
253216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
253316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
253416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
253516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtcorevbox4.dll'.
253616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtguivbox4.dll'.
253716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtnetworkvbox4.dll'.
253816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qtopenglvbox4.dll'.
253916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
254016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'gdi32.dll'.
254116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'advapi32.dll'.
254216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shell32.dll'.
254316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'ole32.dll'.
254416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
254516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'comdlg32.dll'.
254616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'winmm.dll'.
254716e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.dll)WinVerifyTrust
254816e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.dll
254916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
255016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
255116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
255216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
255316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll' [rcNtRedir=0xc0150008]
255416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b24 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll
255516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
255616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
255716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4C680794B609B9556A5D07B97D372223AF976E3B
255816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll'
255916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
256016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
256116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comctl32.dll'.
256216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
256316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'shell32.dll'.
256416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shlwapi.dll'.
256516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
256616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll)WinVerifyTrust
256716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll
256816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
256916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
257016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b38 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
257116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
257216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
257316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E02C0F1A326DAAFCE19DABF15FC7635E69C6D644
257416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2802968.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll'
257516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
257616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
257716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
257816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
257916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
258016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
258116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
258216e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll)WinVerifyTrust
258316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
258416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
258516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
258616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
258716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
258816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shell32.dll' [rcNtRedir=0xc0150008]
258916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b14 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\shell32.dll
259016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
259116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
259216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=36D95588F184535F0F51B7D91E5B6E1DE218716C
259316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2691442.cat'; file='\Device\HarddiskVolume1\WINDOWS\system32\shell32.dll'
259416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
259516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
259616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
259716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
259816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
259916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shlwapi.dll'.
260016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
260116e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\shell32.dll)WinVerifyTrust
260216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\shell32.dll
260316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
260416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
260516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
260616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
260716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
260816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
260916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
261016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' [rcNtRedir=0xc0150008]
261116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
261216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
261316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
261416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
261516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll
261616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
261716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
261816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
261916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
262016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
262116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
262216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
262316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
262416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
262516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
262616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
262716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
262816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
262916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
263016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
263116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
263216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
263316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
263416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
263516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
263616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
263716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
263816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
263916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
264016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
264116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll
264216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
264316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shell32.dll' [rcNtRedir=0xc0150008]
264416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\shell32.dll
264516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
264616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
264716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
264816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll' [rcNtRedir=0xc0150008]
264916e0.16e4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll'.
265016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
265116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
265216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
265316e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll)
265416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll
265516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
265616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
265716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
265816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
265916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
266016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
266116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
266216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
266316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll
266416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
266516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
266616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
266716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
266816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
266916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
267016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
267116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
267216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
267316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)WinVerifyTrust
267416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
267516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
267616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' [rcNtRedir=0xc0150008]
267716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
267816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
267916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
268016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
268116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
268216e0.16e4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll'.
268316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
268416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
268516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
268616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
268716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
268816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
268916e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)
269016e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
269116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
269216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
269316e0.16e4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll'.
269416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
269516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
269616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
269716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
269816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
269916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
270016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
270116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
270216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
270316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
270416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
270516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
270616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
270716e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)
270816e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
270916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
271016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
271116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
271216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
271316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
271416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll' [rcNtRedir=0xc0150008]
271516e0.16e4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll'.
271616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
271716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
271816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
271916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
272016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
272116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
272216e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll)
272316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll
272416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
272516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
272616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
272716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll' [rcNtRedir=0xc0150008]
272816e0.16e4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll'.
272916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
273016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'dciman32.dll'.
273116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
273216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
273316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
273416e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll)
273516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll
273616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
273716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\glu32.dll' [rcNtRedir=0xc0150008]
273816e0.16e4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume1\WINDOWS\system32\glu32.dll'.
273916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
274016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
274116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
274216e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\glu32.dll)
274316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\glu32.dll
274416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
274516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
274616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll
274716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
274816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
274916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
275016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
275116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
275216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
275316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
275416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
275516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
275616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
275716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
275816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
275916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
276016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
276116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shell32.dll' [rcNtRedir=0xc0150008]
276216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\shell32.dll
276316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
276416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
276516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
276616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
276716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
276816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
276916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
277016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
277116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume1\WINDOWS\system32\winspool.drv' [rcNtRedir=0xc0150008]
277216e0.16e4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume1\WINDOWS\system32\winspool.drv'.
277316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
277416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
277516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
277616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
277716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
277816e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\winspool.drv)
277916e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\winspool.drv
278016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
278116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
278216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
278316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
278416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\imm32.dll' [rcNtRedir=0xc0150008]
278516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll
278616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
278716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
278816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
278916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
279016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll' [rcNtRedir=0xc0150008]
279116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll
279216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
279316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
279416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
279516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
279616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
279716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
279816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
279916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
280016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
280116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
280216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
280316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
280416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
280516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
280616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
280716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
280816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
280916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
281016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
281116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
281216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
281316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
281416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
281516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
281616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
281716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
281816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
281916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
282016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
282116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
282216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll' [rcNtRedir=0xc0150008]
282316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll [lacks WinVerifyTrust]
282416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
282516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
282616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
282716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
282816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
282916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
283016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
283116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
283216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
283316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll' [rcNtRedir=0xc0150008]
283416e0.16e4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll'.
283516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
283616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
283716e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll)
283816e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll
283916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
284016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
284116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
284216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
284316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\user32.dll
284416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
284516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
284616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
284716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
284816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
284916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
285016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
285116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
285216e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)WinVerifyTrust
285316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
285416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
285516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
285616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [redoing WinVerifyTrust]
285716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
285816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
285916e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
286016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
286116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
286216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
286316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
286416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
286516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
286616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
286716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
286816e0.16e4: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll'
286916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
287016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
287116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [redoing WinVerifyTrust]
287216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
287316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
287416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
287516e0.16e4: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll'
287616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
287716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
287816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
287916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
288016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
288116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
288216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
288316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
288416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
288516e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll
288616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
288716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
288816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
288916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
289016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
289116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
289216e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll)WinVerifyTrust
289316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
289416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
289516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
289616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
289716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll' [rcNtRedir=0xc0150008]
289816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll [redoing WinVerifyTrust]
289916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000af8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll
290016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
290116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
290216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=38B0A8F7F2C9853DFC13831E497477A3F907B497
290316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll'
290416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
290516e0.16e4: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll'
290616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
290716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
290816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
290916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
291016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
291116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
291216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
291316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
291416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
291516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
291616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxREM.dll)WinVerifyTrust
291716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxREM.dll
291816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
291916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
292016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
292116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
292216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
292316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
292416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
292516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
292616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
292716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
292816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
292916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=022b4510:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
293016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.dll
293116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBox.dll
293216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\opengl32.dll
293316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\glu32.dll [avoiding WinVerifyTrust]
293416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll [avoiding WinVerifyTrust]
293516e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll [avoiding WinVerifyTrust]
293616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
293716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxREM.dll
293816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
293916e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
294016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\winspool.drv [avoiding WinVerifyTrust]
294116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
294216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
294316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b10 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll
294416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
294516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
294616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B2C18CE258AA6A2D57D3AB4679A58E33A6C19E2C
294716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll'
294816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
294916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\dciman32.dll'
295016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b28 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\winspool.drv
295116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
295216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
295316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B21E85370EE853827C450E24B451EF3EE57CEB51
295416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\winspool.drv'
295516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
295616e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\winspool.drv'
295716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000af4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\glu32.dll
295816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
295916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
296016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B07C80896D77C9A60C453C4D6329D5A304A4D0B0
296116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\glu32.dll'
296216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
296316e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\glu32.dll'
296416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b5c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll
296516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
296616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
296716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4972C4499D69BEB3BE81683228F7E8CBB9EB6517
296816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll'
296916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
297016e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\ddraw.dll'
297116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000b00 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll
297216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
297316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
297416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DF58D632CEDD691E6E0DD939DEE3DB7B24B97DE0
297516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2296011.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll'
297616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
297716e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll'
297816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
297916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Input=comctl32.dll, rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
298016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77390000 'C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll'
298116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll
298216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\comctl32.dll (Input=comctl32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
298316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll
298416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll
298516e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll
298616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=023cc148:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
298716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76320000 'C:\WINDOWS\system32\imm32.dll'
298816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=58b50000 'C:\WINDOWS\system32\comctl32.dll'
298916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=039d0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
299016e0.16e4: SUPR3HardenedMain: Calling TrustedMain (039d1da0)...
299116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
299216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
299316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76ae0000 'C:\WINDOWS\system32\winmm.dll'
299416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000afc pwszName=\Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll
299516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
299616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
299716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D69FDC29566863C5CFE290B5E181C208AA895726
299816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll'
299916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
300016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
300116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
300216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
300316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
300416e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll)WinVerifyTrust
300516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll
300616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
300716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
300816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
300916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
301016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll
301116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
301216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
301316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
301416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
301516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=023b8238:C:\WINDOWS\system32;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
301616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll
301716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll
301816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74690000 'C:\WINDOWS\system32\MSCTF.dll'
301916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
302016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
302116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
302216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
302316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'imm32.dll'.
302416e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME)
302516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME
302616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME [avoiding WinVerifyTrust]
302716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a84 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME
302816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
302916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
303016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FE75712B5B00DF9DCC3B3B4B376E822A26A5041D
303116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME'
303216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
303316e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME'
303416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME
303516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
303616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\imm32.dll' [rcNtRedir=0xc0150008]
303716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll
303816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
303916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
304016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
304116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
304216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
304316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
304416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
304516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
304616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msctfime.ime (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
304716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME
304816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME
304916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
305016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=023cc148:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
305116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=774a0000 'C:\WINDOWS\system32\ole32.dll'
305216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75140000 'C:\WINDOWS\system32\msctfime.ime'
305316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTFIME.IME
305416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msctfime.ime (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
305516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75140000 'C:\WINDOWS\system32\msctfime.ime'
305616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
305716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
305816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
305916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'secur32.dll'.
306016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
306116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ws2_32.dll'.
306216e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\rpcss.dll)
306316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\rpcss.dll
306416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a74 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\rpcss.dll
306516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
306616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
306716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=29CDB5AC14DBCB99714C9A0DE141784A07287C08
306816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956572.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\rpcss.dll'
306916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
307016e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\rpcss.dll'
307116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll
307216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
307316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
307416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
307516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
307616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
307716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll' [rcNtRedir=0xc0150008]
307816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
307916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
308016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
308116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
308216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
308316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
308416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
308516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
308616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7c800000 'C:\WINDOWS\system32\kernel32.dll'
308716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll
308816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
308916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
309016e0.16e4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll)
309116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
309216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\WINDOWS\system32\wintab32.dll'
309316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7e390000 'C:\WINDOWS\system32\user32.dll'
309416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll
309516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
309616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=5b090000 'C:\WINDOWS\system32\uxtheme.dll'
309716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7e390000 'C:\WINDOWS\system32\user32.dll'
309816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a6c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
309916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
310016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
310116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=94839C07CA96B93D253CF4C45D95DA14747AD7EE
310216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv'
310316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
310416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
310516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
310616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv)WinVerifyTrust
310716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
310816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
310916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
311016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
311116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
311216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
311316e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
311416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
311516e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
311616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
311716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
311816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll
311916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WINTRUST.dll (Input=WINTRUST.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
312016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76be0000 'C:\WINDOWS\system32\WINTRUST.dll'
312116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
312216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
312316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
312416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
312516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
312616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
312716e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
312816e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
312916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
313016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
313116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
313216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
313316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
313416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
313516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
313616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv
313716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
313816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c70000 'C:\WINDOWS\system32\wdmaud.drv'
313916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a58 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
314016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
314116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
314216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7E5BDB597201CFD576800168AA16B8A53BD033BB
314316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv'
314416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
314516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
314616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'winmm.dll'.
314716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msacm32.dll'.
314816e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv)WinVerifyTrust
314916e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
315016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
315116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll' [rcNtRedir=0xc0150008]
315216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a44 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll
315316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
315416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
315516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DCE61CA96198B8560E1BB7CB20FB256498251FB4
315616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll'
315716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
315816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
315916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
316016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
316116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
316216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'.
316316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll)WinVerifyTrust
316416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll
316516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
316616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
316716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
316816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
316916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
317016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
317116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
317216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
317316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
317416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
317516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
317616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
317716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
317816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
317916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
318016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
318116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
318216e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
318316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
318416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll
318516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c60000 'C:\WINDOWS\system32\msacm32.drv'
318616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
318716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
318816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c60000 'C:\WINDOWS\system32\msacm32.drv'
318916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
319016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
319116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c60000 'C:\WINDOWS\system32\msacm32.drv'
319216e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
319316e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
319416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c60000 'C:\WINDOWS\system32\msacm32.drv'
319516e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
319616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
319716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c60000 'C:\WINDOWS\system32\msacm32.drv'
319816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv
319916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
320016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72c60000 'C:\WINDOWS\system32\msacm32.drv'
320116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a34 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
320216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
320316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
320416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9FA858EAD0177E9BBD2BB0DEB7699CA9E9B5F5ED
320516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\midimap.dll'
320616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
320716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
320816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
320916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
321016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
321116e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\midimap.dll)WinVerifyTrust
321216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
321316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
321416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winmm.dll' [rcNtRedir=0xc0150008]
321516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll
321616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
321716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
321816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
321916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
322016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
322116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
322216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
322316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
322416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
322516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77ba0000 'C:\WINDOWS\system32\midimap.dll'
322616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
322716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
322816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77ba0000 'C:\WINDOWS\system32\midimap.dll'
322916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
323016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
323116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77ba0000 'C:\WINDOWS\system32\midimap.dll'
323216e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll
323316e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
323416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77ba0000 'C:\WINDOWS\system32\midimap.dll'
323516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77da0000 'C:\WINDOWS\system32\advapi32.dll'
323616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll
323716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
323816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76960000 'C:\WINDOWS\system32\userenv.dll'
323916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll
324016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
324116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7c800000 'C:\WINDOWS\system32\kernel32.dll'
324216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000009f4 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll
324316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
324416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
324516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=699574B340FD3F08B79783D74904E879A99962B4
324616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll'
324716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
324816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
324916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comres.dll'.
325016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
325116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
325216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
325316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
325416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
325516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'version.dll'.
325616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll)WinVerifyTrust
325716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll
325816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
325916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\version.dll' [rcNtRedir=0xc0150008]
326016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\version.dll
326116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
326216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
326316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
326416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
326516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
326616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
326716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
326816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
326916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
327016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
327116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
327216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
327316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comres.dll'...
327416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comres.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\comres.dll' [rcNtRedir=0xc0150008]
327516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000a20 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\comres.dll
327616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
327716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
327816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2217494F84A52ECFEC5A048865D4FE658F5E9664
327916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\comres.dll'
328016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
328116e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\comres.dll)WinVerifyTrust
328216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\comres.dll
328316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
328416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
328516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\CLBCATQ.DLL (Input=CLBCATQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
328616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll
328716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll
328816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\comres.dll
328916e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76f80000 'C:\WINDOWS\system32\CLBCATQ.DLL'
329016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll
329116e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\CLBCATQ.DLL (Input=CLBCATQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
329216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76f80000 'C:\WINDOWS\system32\CLBCATQ.DLL'
329316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
329416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'authz.dll'.
329516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'crypt32.dll'.
329616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
329716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
329816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'nddeapi.dll'.
329916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'profmap.dll'.
330016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'psapi.dll'.
330116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'regapi.dll'.
330216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
330316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'secur32.dll'.
330416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'setupapi.dll'.
330516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'user32.dll'.
330616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'userenv.dll'.
330716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'version.dll'.
330816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'winsta.dll'.
330916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wintrust.dll'.
331016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'ws2_32.dll'.
331116e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\winlogon.exe)
331216e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\winlogon.exe
331316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000097c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\winlogon.exe
331416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
331516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
331616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D9A72AEA0EA976C7CAEA0642163D45B764169657
331716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\winlogon.exe'
331816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
331916e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\winlogon.exe'
332016e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll
332116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
332216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
332316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll
332416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wintrust.dll'...
332516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wintrust.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll' [rcNtRedir=0xc0150008]
332616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll
332716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winsta.dll'...
332816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winsta.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\winsta.dll' [rcNtRedir=0xc0150008]
332916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000970 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\winsta.dll
333016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
333116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
333216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1825F2CBFD47A48A0E6729E214146EA21D610979
333316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\winsta.dll'
333416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
333516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'netapi32.dll'.
333616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
333716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
333816e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\winsta.dll)WinVerifyTrust
333916e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\winsta.dll
334016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
334116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\version.dll' [rcNtRedir=0xc0150008]
334216e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\version.dll
334316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
334416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll' [rcNtRedir=0xc0150008]
334516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
334616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
334716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
334816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll' [rcNtRedir=0xc0150008]
334916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
335016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll' [rcNtRedir=0xc0150008]
335116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
335216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
335316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
335416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'regapi.dll'...
335516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'regapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\regapi.dll' [rcNtRedir=0xc0150008]
335616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000095c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\regapi.dll
335716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
335816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
335916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=701429B670B9D3CDAAA93F0CA471F8E0EB19AD63
336016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\regapi.dll'
336116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
336216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
336316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
336416e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\regapi.dll)WinVerifyTrust
336516e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\regapi.dll
336616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'psapi.dll'...
336716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'psapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\psapi.dll' [rcNtRedir=0xc0150008]
336816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\psapi.dll
336916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profmap.dll'...
337016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profmap.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\profmap.dll' [rcNtRedir=0xc0150008]
337116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000096c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\profmap.dll
337216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
337316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
337416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=226A0802DF71E8CA07A5AA4E7FFDA34A6FFE2359
337516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\profmap.dll'
337616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
337716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
337816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
337916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'netapi32.dll'.
338016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
338116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'userenv.dll'.
338216e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\profmap.dll)WinVerifyTrust
338316e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\profmap.dll
338416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nddeapi.dll'...
338516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nddeapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\nddeapi.dll' [rcNtRedir=0xc0150008]
338616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000948 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\nddeapi.dll
338716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
338816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
338916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=50E86E3E191757029D57A1336AAA45A70553CB8F
339016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\nddeapi.dll'
339116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
339216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
339316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
339416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
339516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
339616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\nddeapi.dll)WinVerifyTrust
339716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\nddeapi.dll
339816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
339916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
340016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
340116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
340216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
340316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll' [rcNtRedir=0xc0150008]
340416e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll
340516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'authz.dll'...
340616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'authz.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\authz.dll' [rcNtRedir=0xc0150008]
340716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000964 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\authz.dll
340816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
340916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
341016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9318650D0DC3C48C69EABFF0AF86067C45FE348E
341116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\authz.dll'
341216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
341316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
341416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
341516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
341616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\authz.dll)WinVerifyTrust
341716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\authz.dll
341816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
341916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
342016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
342116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
342216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
342316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
342416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
342516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
342616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
342716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
342816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
342916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
343016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
343116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
343216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
343316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
343416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
343516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\userenv.dll' [rcNtRedir=0xc0150008]
343616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
343716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
343816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netapi32.dll'...
343916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'netapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll' [rcNtRedir=0xc0150008]
344016e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll
344116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
344216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
344316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
344416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
344516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
344616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
344716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
344816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
344916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
345016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
345116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
345216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
345316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netapi32.dll'...
345416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'netapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll' [rcNtRedir=0xc0150008]
345516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll
345616e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\xpsp2res.dll (Input=xpsp2res.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
345716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00c70000 'C:\WINDOWS\system32\xpsp2res.dll'
345816e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
345916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLE32.dll (Input=OLE32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
346016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=774a0000 'C:\WINDOWS\system32\OLE32.dll'
346116e0.11d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
346216e0.11d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLE32.DLL (Input=OLE32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
346316e0.11d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=774a0000 'C:\WINDOWS\system32\OLE32.DLL'
346416e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
346516e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\oleaut32.dll (Input=oleaut32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
346616e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=770e0000 'C:\WINDOWS\system32\oleaut32.dll'
346716e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77e50000 'C:\WINDOWS\system32\rpcrt4.dll'
346816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000094c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\sxs.dll
346916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
347016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
347116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CEF7D8C0B584B288203BB359DAA9EF6BF3EE593C
347216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\sxs.dll'
347316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
347416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
347516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
347616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\sxs.dll)WinVerifyTrust
347716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\sxs.dll
347816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
347916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
348016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
348116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
348216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SXS.DLL (Input=SXS.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
348316e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\sxs.dll
348416e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\sxs.dll
348516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77210000 'C:\WINDOWS\system32\SXS.DLL'
348616e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
348716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\oleaut32.dll (Input=oleaut32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
348816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=770e0000 'C:\WINDOWS\system32\oleaut32.dll'
348916e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
349016e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLEAUT32.dll (Input=OLEAUT32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
349116e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=770e0000 'C:\WINDOWS\system32\OLEAUT32.dll'
349216e0.16e4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll)
349316e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
349416e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\WINDOWS\system32\wintab32.dll'
349516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77ef0000 'C:\WINDOWS\system32\gdi32.dll'
349616e0.11e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=774a0000 'C:\WINDOWS\system32\OLE32.DLL'
349716e0.7dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=774a0000 'C:\WINDOWS\system32\OLE32.DLL'
349816e0.7dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
349916e0.7dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\secur32.dll (Input=secur32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02424258:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
350016e0.7dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77fc0000 'C:\WINDOWS\system32\secur32.dll'
350116e0.7dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
350216e0.7dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
350316e0.7dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
350416e0.1340: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll
350516e0.1340: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02424258:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
350616e0.1340: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74690000 'C:\WINDOWS\system32\Msctf.dll'
350716e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
350816e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
350916e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
351016e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
351116e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
351216e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ws2_32.dll'.
351316e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ole32.dll'.
351416e0.7dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleaut32.dll'.
351516e0.7dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll)WinVerifyTrust
351616e0.7dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
351716e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
351816e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
351916e0.7dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
352016e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
352116e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
352216e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
352316e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
352416e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
352516e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
352616e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
352716e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
352816e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
352916e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
353016e0.7dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
353116e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
353216e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
353316e0.7dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
353416e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
353516e0.7dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
353616e0.7dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
353716e0.7dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
353816e0.7dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
353916e0.7dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=05ee0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
354016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=7e390000 'C:\WINDOWS\system32\user32.dll'
354116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
354216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
354316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msctf.dll'.
354416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
354516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
354616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'version.dll'.
354716e0.16e4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume1\WINDOWS\system32\MSIMTF.dll)
354816e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\MSIMTF.dll
354916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000005b0 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\MSIMTF.dll
355016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
355116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
355216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3D2134D5D9F11B07E2D65CBE635EC2CB36DFE79E
355316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\MSIMTF.dll'
355416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
355516e0.16e4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\WINDOWS\system32\MSIMTF.dll'
355616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
355716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\version.dll' [rcNtRedir=0xc0150008]
355816e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\version.dll
355916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
356016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
356116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
356216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
356316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
356416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msctf.dll' [rcNtRedir=0xc0150008]
356516e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\MSCTF.dll
356616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
356716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
356816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
356916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
357016e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=774a0000 'C:\WINDOWS\system32\ole32.dll'
357116e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
357216e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
357316e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=770e0000 'C:\WINDOWS\system32\OLEAUT32.dll'
357416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000594 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll
357516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
357616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
357716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DD40403C88C35CA82409C151985D7AD179C54D84
357816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll'
357916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
358016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
358116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
358216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
358316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
358416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'wbemcomn.dll'.
358516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ws2_32.dll'.
358616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll)WinVerifyTrust
358716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll
358816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
358916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
359016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
359116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll' [rcNtRedir=0xc0150008]
359216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000005a8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll
359316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
359416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
359516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2D3ECCE01AA033DBC082DE0843CE25E394A6A59E
359616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll'
359716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
359816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
359916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
360016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
360116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'.
360216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
360316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll)WinVerifyTrust
360416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll
360516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
360616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
360716e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
360816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
360916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
361016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
361116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
361216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
361316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
361416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
361516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
361616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
361716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
361816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
361916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
362016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
362116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
362216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
362316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
362416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02337388:C:\WINDOWS\system32\wbem;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
362516e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll
362616e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll
362716e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll
362816e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74e60000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
362916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000058c pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemsvc.dll
363016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
363116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
363216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E573C91BE5C7506DA4006517329451BFED31AB06
363316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemsvc.dll'
363416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
363516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
363616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
363716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
363816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
363916e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemsvc.dll)WinVerifyTrust
364016e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemsvc.dll
364116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
364216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
364316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
364416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
364516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
364616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
364716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
364816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
364916e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02365008:C:\WINDOWS\system32\wbem;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
365016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemsvc.dll
365116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemsvc.dll
365216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74e40000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
365316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000005ac pwszName=\Device\HarddiskVolume1\WINDOWS\system32\wbem\fastprox.dll
365416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
365516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
365616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5B2FC232DBF7E7F2DCC976262C49E28B466F4D72
365716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956572.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\wbem\fastprox.dll'
365816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
365916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
366016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp60.dll'.
366116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'wbemcomn.dll'.
366216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
366316e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
366416e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
366516e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ntdsapi.dll'.
366616e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\wbem\fastprox.dll)WinVerifyTrust
366716e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\wbem\fastprox.dll
366816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntdsapi.dll'...
366916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntdsapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll' [rcNtRedir=0xc0150008]
367016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000564 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll
367116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
367216e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
367316e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B0F39F453E2EEDEF7205E55297200BA2FD61C99A
367416e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll'
367516e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
367616e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'dnsapi.dll'.
367716e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
367816e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'netapi32.dll'.
367916e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
368016e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'secur32.dll'.
368116e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wldap32.dll'.
368216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
368316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll)WinVerifyTrust
368416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll
368516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
368616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
368716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
368816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
368916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
369016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
369116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
369216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll' [rcNtRedir=0xc0150008]
369316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll
369416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp60.dll'...
369516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp60.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll' [rcNtRedir=0xc0150008]
369616e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000598 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll
369716e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
369816e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
369916e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FD1DA8C731AD8084B449616BC0F7F1840926D883
370016e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll'
370116e0.16e4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
370216e0.16e4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
370316e0.16e4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll)WinVerifyTrust
370416e0.16e4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll
370516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
370616e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
370716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
370816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
370916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
371016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll' [rcNtRedir=0xc0150008]
371116e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
371216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll' [rcNtRedir=0xc0150008]
371316e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll
371416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
371516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\secur32.dll' [rcNtRedir=0xc0150008]
371616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll
371716e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
371816e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
371916e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netapi32.dll'...
372016e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'netapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll' [rcNtRedir=0xc0150008]
372116e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll
372216e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
372316e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
372416e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dnsapi.dll'...
372516e0.16e4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dnsapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll' [rcNtRedir=0xc0150008]
372616e0.16e4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll
372716e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=024446a0:C:\WINDOWS\system32\wbem;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
372816e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\fastprox.dll
372916e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wbem\fastprox.dll
373016e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll
373116e0.16e4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll
373216e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75610000 'C:\WINDOWS\system32\wbem\fastprox.dll'
373316e0.16e4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll
373416e0.16e4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\comctl32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
373516e0.16e4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=58b50000 'C:\WINDOWS\system32\comctl32.dll'
373616e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
373716e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
373816e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
373916e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004bc pwszName=\Device\HarddiskVolume1\WINDOWS\system32\netcfgx.dll
374016e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
374116e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
374216e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=74D589FB312C4BD8D1F89076B688A3CE8C6DC6B4
374316e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\netcfgx.dll'
374416e0.1608: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
374516e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'shlwapi.dll'.
374616e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'clusapi.dll'.
374716e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
374816e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
374916e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'dnsapi.dll'.
375016e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
375116e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
375216e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
375316e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
375416e0.1608: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\netcfgx.dll)WinVerifyTrust
375516e0.1608: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\netcfgx.dll
375616e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
375716e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
375816e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
375916e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
376016e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
376116e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
376216e0.1608: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll
376316e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
376416e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll' [rcNtRedir=0xc0150008]
376516e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dnsapi.dll'...
376616e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'dnsapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll' [rcNtRedir=0xc0150008]
376716e0.1608: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll
376816e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
376916e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
377016e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
377116e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
377216e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'clusapi.dll'...
377316e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'clusapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\clusapi.dll' [rcNtRedir=0xc0150008]
377416e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004a8 pwszName=\Device\HarddiskVolume1\WINDOWS\system32\clusapi.dll
377516e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 023a81c8
377616e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=023a81c8
377716e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F318C599D81233DCBF2D4F4EF89E49A53465817E
377816e0.1608: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT'; file='\Device\HarddiskVolume1\WINDOWS\system32\clusapi.dll'
377916e0.1608: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
378016e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
378116e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
378216e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
378316e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
378416e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
378516e0.1608: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\WINDOWS\system32\clusapi.dll)WinVerifyTrust
378616e0.1608: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\WINDOWS\system32\clusapi.dll
378716e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
378816e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll' [rcNtRedir=0xc0150008]
378916e0.1608: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll
379016e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
379116e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll' [rcNtRedir=0xc0150008]
379216e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
379316e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll' [rcNtRedir=0xc0150008]
379416e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
379516e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\ole32.dll' [rcNtRedir=0xc0150008]
379616e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
379716e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
379816e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
379916e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll' [rcNtRedir=0xc0150008]
380016e0.1608: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll
380116e0.1608: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\netcfgx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0231e930:C:\WINDOWS\system32;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
380216e0.1608: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\netcfgx.dll
380316e0.1608: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\netcfgx.dll
380416e0.1608: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\clusapi.dll
380516e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75570000 'C:\WINDOWS\system32\netcfgx.dll'
380616e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\SETUPAPI.dll'
380716e0.1608: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll
380816e0.1608: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WINTRUST.dll (Input=WINTRUST.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
380916e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76be0000 'C:\WINDOWS\system32\WINTRUST.dll'
381016e0.1058: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
381116e0.1058: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=750c0000 'C:\WINDOWS\system32\Cabinet.dll'
381216e0.1058: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
381316e0.1058: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
381416e0.1058: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
381516e0.1058: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
381616e0.1058: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
381716e0.1058: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll)WinVerifyTrust
381816e0.1058: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
381916e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
382016e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\user32.dll' [rcNtRedir=0xc0150008]
382116e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
382216e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
382316e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
382416e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
382516e0.1058: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
382616e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
382716e0.1058: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
382816e0.1058: supR3HardenedMonitor_LdrLoadDll: pName=msvcrt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
382916e0.1058: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77be0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
383016e0.1060: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
383116e0.1060: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
383216e0.1060: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
383316e0.1060: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
383416e0.1060: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll)WinVerifyTrust
383516e0.1060: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
383616e0.1060: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
383716e0.1060: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
383816e0.1060: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
383916e0.1060: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
384016e0.1060: supR3HardenedMonitor_LdrLoadDll: pName=msvcrt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
384116e0.1060: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77be0000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
384216e0.1068: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
384316e0.1068: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll
384416e0.1068: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
384516e0.1068: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
384616e0.1068: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
384716e0.1068: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
384816e0.1068: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
384916e0.1068: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll)WinVerifyTrust
385016e0.1068: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
385116e0.1068: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
385216e0.1068: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
385316e0.1068: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
385416e0.1068: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
385516e0.1068: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
385616e0.1068: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
385716e0.1068: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
385816e0.1068: supR3HardenedMonitor_LdrLoadDll: pName=msvcrt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
385916e0.1068: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77be0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
386016e0.1070: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll
386116e0.1070: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\setupapi.dll (Input=setupapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00254d10:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
386216e0.1070: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
386316e0.1070: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
386416e0.1070: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
386516e0.1070: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
386616e0.1070: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
386716e0.1070: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll)WinVerifyTrust
386816e0.1070: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
386916e0.1070: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
387016e0.1070: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
387116e0.1070: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
387216e0.1070: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
387316e0.1070: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
387416e0.1070: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
387516e0.1070: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
387616e0.1070: supR3HardenedMonitor_LdrLoadDll: pName=msvcrt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
387716e0.1070: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77be0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
387816e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=778e0000 'C:\WINDOWS\system32\setupapi.dll'
387916e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ed0000 'C:\WINDOWS\system32\cryptnet.dll'
388016e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
388116e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
388216e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
388316e0.1608: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
388416e0.1608: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxREM64.dll)WinVerifyTrust
388516e0.1608: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxREM64.dll
388616e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
388716e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
388816e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
388916e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll' [rcNtRedir=0xc0150008]
389016e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
389116e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
389216e0.1608: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
389316e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
389416e0.1608: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
389516e0.1608: supR3HardenedMonitor_LdrLoadDll: pName=msvcrt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0233d010:C:\Program Files\Oracle\VirtualBox;C:\WINDOWS\system32;C:\WINDOWS\system;C:\WINDOWS;C:\Python27\Lib\site-packages\PyQt4;C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Python27;C:\Python27\DLLs;C:\Python27\Scripts;C:\Python27\Lib\site-packages\vtk;C:\Python27\gnuplot\binary;C:\Program Files\pythonxy\console;C:\Program Files\pythonxy\SciTE-2.29;C:\MinGW32-xy\bin;C:\Program Files\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\WinNT\Bin;C:\Program Files\Internet Explorer;C:\Program Files\IVI Foundation\IVI\bin;C:\Python27\Lib\site-packages\PyQt4;C:\WINDOWS\System32 [calling]
389616e0.1608: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77be0000 'C:\Program Files\Oracle\VirtualBox\VBoxREM64.DLL'
389716e0.16e4: Terminating the normal way: rcExit=0
38981558.155c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 26365 ms, the end);
38991550.1554: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 27516 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy