VirtualBox

Ticket #13791: VBoxStartup.log

File VBoxStartup.log, 369.9 KB (added by attila75, 10 years ago)
Line 
12088.17e0: Log file opened: 4.3.20r96997 g_hStartupLog=00000000000000ac g_uNtVerCombined=0x611db110
22088.17e0: \SystemRoot\System32\ntdll.dll:
32088.17e0: CreationTime: 2013-10-09T19:49:40.482352000Z
42088.17e0: LastWriteTime: 2013-08-29T02:16:35.515578900Z
52088.17e0: ChangeTime: 2013-10-11T11:47:49.959480800Z
62088.17e0: FileAttributes: 0x20
72088.17e0: Size: 0x1a6dc0
82088.17e0: NT Headers: 0xe0
92088.17e0: Timestamp: 0x521eaf24
102088.17e0: Machine: 0x8664 - amd64
112088.17e0: Timestamp: 0x521eaf24
122088.17e0: Image Version: 6.1
132088.17e0: SizeOfImage: 0x1a9000 (1740800)
142088.17e0: Resource Dir: 0x151000 LB 0x560d8
152088.17e0: ProductName: Microsoft® Windows® Operating System
162088.17e0: ProductVersion: 6.1.7601.18247
172088.17e0: FileVersion: 6.1.7601.18247 (win7sp1_gdr.130828-1532)
182088.17e0: FileDescription: NT Layer DLL
192088.17e0: \SystemRoot\System32\kernel32.dll:
202088.17e0: CreationTime: 2014-04-09T20:46:06.356623900Z
212088.17e0: LastWriteTime: 2014-03-04T09:44:00.336000000Z
222088.17e0: ChangeTime: 2014-04-10T08:16:02.443941000Z
232088.17e0: FileAttributes: 0x20
242088.17e0: Size: 0x11c000
252088.17e0: NT Headers: 0xe8
262088.17e0: Timestamp: 0x5315a059
272088.17e0: Machine: 0x8664 - amd64
282088.17e0: Timestamp: 0x5315a059
292088.17e0: Image Version: 6.1
302088.17e0: SizeOfImage: 0x11f000 (1175552)
312088.17e0: Resource Dir: 0x116000 LB 0x528
322088.17e0: ProductName: Microsoft® Windows® Operating System
332088.17e0: ProductVersion: 6.1.7601.18409
342088.17e0: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
352088.17e0: FileDescription: Windows NT BASE API Client DLL
362088.17e0: \SystemRoot\System32\KernelBase.dll:
372088.17e0: CreationTime: 2014-05-15T08:13:15.592383400Z
382088.17e0: LastWriteTime: 2014-03-04T09:44:00.336000000Z
392088.17e0: ChangeTime: 2014-05-16T10:57:02.087738500Z
402088.17e0: FileAttributes: 0x20
412088.17e0: Size: 0x67c00
422088.17e0: NT Headers: 0xe8
432088.17e0: Timestamp: 0x5315a05a
442088.17e0: Machine: 0x8664 - amd64
452088.17e0: Timestamp: 0x5315a05a
462088.17e0: Image Version: 6.1
472088.17e0: SizeOfImage: 0x6c000 (442368)
482088.17e0: Resource Dir: 0x6a000 LB 0x530
492088.17e0: ProductName: Microsoft® Windows® Operating System
502088.17e0: ProductVersion: 6.1.7601.18409
512088.17e0: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
522088.17e0: FileDescription: Windows NT BASE API Client DLL
532088.17e0: \SystemRoot\System32\apisetschema.dll:
542088.17e0: CreationTime: 2013-09-12T22:16:46.088099300Z
552088.17e0: LastWriteTime: 2013-08-02T02:12:20.275000000Z
562088.17e0: ChangeTime: 2013-09-13T11:29:09.028327400Z
572088.17e0: FileAttributes: 0x20
582088.17e0: Size: 0x1a00
592088.17e0: NT Headers: 0xc0
602088.17e0: Timestamp: 0x51fb15ca
612088.17e0: Machine: 0x8664 - amd64
622088.17e0: Timestamp: 0x51fb15ca
632088.17e0: Image Version: 6.1
642088.17e0: SizeOfImage: 0x50000 (327680)
652088.17e0: Resource Dir: 0x30000 LB 0x3f8
662088.17e0: ProductName: Microsoft® Windows® Operating System
672088.17e0: ProductVersion: 6.1.7601.18229
682088.17e0: FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
692088.17e0: FileDescription: ApiSet Schema DLL
702088.17e0: supR3HardenedWinFindAdversaries: 0x0
712088.17e0: Calling main()
722088.17e0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
732088.17e0: SUPR3HardenedMain: Respawn #1
742088.17e0: System32: \Device\HarddiskVolume8\Windows\System32
752088.17e0: WinSxS: \Device\HarddiskVolume8\Windows\winsxs
762088.17e0: KnownDllPath: C:\Windows\system32
772088.17e0: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
782088.17e0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
792088.17e0: supR3HardNtEnableThreadCreation:
802088.17e0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00000000778ac340 pvNtTerminateThread=00000000778d17e0
812088.17e0: supR3HardenedWinDoReSpawn(1): New child 1e20.1ae4 [kernel32].
822088.17e0: supR3HardNtChildGatherData: PebBaseAddress=000007fffffd3000 cbPeb=0x380
832088.17e0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000077880000 uNtDllChildAddr=0000000077880000
842088.17e0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00000000778ac340
852088.17e0: supR3HardenedWinSetupChildInit: Start child.
862088.17e0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
872088.17e0: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 33 sleeps
882088.17e0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
892088.17e0: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000
902088.17e0: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000
912088.17e0: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000
922088.17e0: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000
932088.17e0: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000
942088.17e0: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000
952088.17e0: *0000000000050000-000000000004efff 0x0004/0x0004 0x0020000
962088.17e0: 0000000000051000-fffffffffffe1fff 0x0001/0x0000 0x0000000
972088.17e0: *00000000000c0000-fffffffffffc3fff 0x0000/0x0004 0x0020000
982088.17e0: 00000000001bc000-00000000001b8fff 0x0104/0x0004 0x0020000
992088.17e0: 00000000001bf000-00000000001bdfff 0x0004/0x0004 0x0020000
1002088.17e0: 00000000001c0000-ffffffff88afffff 0x0001/0x0000 0x0000000
1012088.17e0: *0000000077880000-000000007787efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1022088.17e0: 0000000077881000-000000007777efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1032088.17e0: 0000000077983000-0000000077953fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1042088.17e0: 00000000779b2000-00000000779a9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1052088.17e0: 00000000779ba000-00000000779b8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1062088.17e0: 00000000779bb000-00000000779b7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1072088.17e0: 00000000779be000-0000000077952fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1082088.17e0: 0000000077a29000-0000000070471fff 0x0001/0x0000 0x0000000
1092088.17e0: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000
1102088.17e0: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
1112088.17e0: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
1122088.17e0: 000000007fff0000-ffffffffc043ffff 0x0001/0x0000 0x0000000
1132088.17e0: *000000013fba0000-000000013fb9efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1142088.17e0: 000000013fba1000-000000013fb1cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1152088.17e0: 000000013fc25000-000000013fc23fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1162088.17e0: 000000013fc26000-000000013fbe8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1172088.17e0: 000000013fc63000-000000013fc61fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1182088.17e0: 000000013fc64000-000000013fc62fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1192088.17e0: 000000013fc65000-000000013fc62fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1202088.17e0: 000000013fc67000-000000013fc65fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1212088.17e0: 000000013fc68000-000000013fc66fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1222088.17e0: 000000013fc69000-000000013fc64fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1232088.17e0: 000000013fc6d000-000000013fc33fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1242088.17e0: 000000013fca6000-fffff8037fdabfff 0x0001/0x0000 0x0000000
1252088.17e0: *000007feffba0000-000007feffb9efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\apisetschema.dll
1262088.17e0: 000007feffba1000-000007fdff791fff 0x0001/0x0000 0x0000000
1272088.17e0: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000
1282088.17e0: *000007fffffd3000-000007fffffd1fff 0x0004/0x0004 0x0020000
1292088.17e0: 000007fffffd4000-000007fffffc9fff 0x0001/0x0000 0x0000000
1302088.17e0: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000
1312088.17e0: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000
1322088.17e0: apisetschema.dll: timestamp 0x51fb15ca (rc=VINF_SUCCESS)
1332088.17e0: VirtualBox.exe: timestamp 0x54731167 (rc=VINF_SUCCESS)
1342088.17e0: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1352088.17e0: '\Device\HarddiskVolume8\Windows\System32\apisetschema.dll' has no imports
1362088.17e0: '\Device\HarddiskVolume8\Windows\System32\ntdll.dll' has no imports
1372088.17e0: supR3HardNtChildPurify: Done after 298 ms and 0 fixes (loop #0).
1381e20.1ae4: Log file opened: 4.3.20r96997 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db110
1391e20.1ae4: supR3HardenedVmProcessInit: uNtDllAddr=0000000077880000
1401e20.1ae4: ntdll.dll: timestamp 0x521eaf24 (rc=VINF_SUCCESS)
1411e20.1ae4: New simple heap: #1 00000000002c0000 LB 0x400000 (for 1740800 allocation)
1422088.17e0: supR3HardNtEnableThreadCreation:
1431e20.1ae4: System32: \Device\HarddiskVolume8\Windows\System32
1441e20.1ae4: WinSxS: \Device\HarddiskVolume8\Windows\winsxs
1451e20.1ae4: KnownDllPath: C:\Windows\system32
1461e20.1ae4: supR3HardenedVmProcessInit: Opening vboxdrv stub...
1471e20.1ae4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
1481e20.1ae4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
1491e20.1ae4: Registered Dll notification callback with NTDLL.
1501e20.1ae4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\kernel32.dll)
1511e20.1ae4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\kernel32.dll
1521e20.1ae4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
1531e20.1ae4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1541e20.1ae4: supR3HardenedDllNotificationCallback: load 0000000077660000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
1551e20.1ae4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1561e20.1ae4: supR3HardenedDllNotificationCallback: load 000007fefd750000 LB 0x0006c000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
1571e20.1ae4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\KernelBase.dll)
1581e20.1ae4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\KernelBase.dll
1591e20.1ae4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077660000 'C:\Windows\system32\kernel32.dll'
1601e20.1ae4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00000000778ac340 pvNtTerminateThread=00000000778d17e0
1612088.17e0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 21 ms.
1621e20.1ae4: \SystemRoot\System32\ntdll.dll:
1631e20.1ae4: CreationTime: 2013-10-09T19:49:40.482352000Z
1641e20.1ae4: LastWriteTime: 2013-08-29T02:16:35.515578900Z
1651e20.1ae4: ChangeTime: 2013-10-11T11:47:49.959480800Z
1661e20.1ae4: FileAttributes: 0x20
1671e20.1ae4: Size: 0x1a6dc0
1681e20.1ae4: NT Headers: 0xe0
1691e20.1ae4: Timestamp: 0x521eaf24
1701e20.1ae4: Machine: 0x8664 - amd64
1711e20.1ae4: Timestamp: 0x521eaf24
1721e20.1ae4: Image Version: 6.1
1731e20.1ae4: SizeOfImage: 0x1a9000 (1740800)
1741e20.1ae4: Resource Dir: 0x151000 LB 0x560d8
1751e20.1ae4: ProductName: Microsoft® Windows® Operating System
1761e20.1ae4: ProductVersion: 6.1.7601.18247
1771e20.1ae4: FileVersion: 6.1.7601.18247 (win7sp1_gdr.130828-1532)
1781e20.1ae4: FileDescription: NT Layer DLL
1791e20.1ae4: \SystemRoot\System32\kernel32.dll:
1801e20.1ae4: CreationTime: 2014-04-09T20:46:06.356623900Z
1811e20.1ae4: LastWriteTime: 2014-03-04T09:44:00.336000000Z
1821e20.1ae4: ChangeTime: 2014-04-10T08:16:02.443941000Z
1831e20.1ae4: FileAttributes: 0x20
1841e20.1ae4: Size: 0x11c000
1851e20.1ae4: NT Headers: 0xe8
1861e20.1ae4: Timestamp: 0x5315a059
1871e20.1ae4: Machine: 0x8664 - amd64
1881e20.1ae4: Timestamp: 0x5315a059
1891e20.1ae4: Image Version: 6.1
1901e20.1ae4: SizeOfImage: 0x11f000 (1175552)
1911e20.1ae4: Resource Dir: 0x116000 LB 0x528
1921e20.1ae4: ProductName: Microsoft® Windows® Operating System
1931e20.1ae4: ProductVersion: 6.1.7601.18409
1941e20.1ae4: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
1951e20.1ae4: FileDescription: Windows NT BASE API Client DLL
1961e20.1ae4: \SystemRoot\System32\KernelBase.dll:
1971e20.1ae4: CreationTime: 2014-05-15T08:13:15.592383400Z
1981e20.1ae4: LastWriteTime: 2014-03-04T09:44:00.336000000Z
1991e20.1ae4: ChangeTime: 2014-05-16T10:57:02.087738500Z
2001e20.1ae4: FileAttributes: 0x20
2011e20.1ae4: Size: 0x67c00
2021e20.1ae4: NT Headers: 0xe8
2031e20.1ae4: Timestamp: 0x5315a05a
2041e20.1ae4: Machine: 0x8664 - amd64
2051e20.1ae4: Timestamp: 0x5315a05a
2061e20.1ae4: Image Version: 6.1
2071e20.1ae4: SizeOfImage: 0x6c000 (442368)
2081e20.1ae4: Resource Dir: 0x6a000 LB 0x530
2091e20.1ae4: ProductName: Microsoft® Windows® Operating System
2101e20.1ae4: ProductVersion: 6.1.7601.18409
2111e20.1ae4: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
2121e20.1ae4: FileDescription: Windows NT BASE API Client DLL
2131e20.1ae4: \SystemRoot\System32\apisetschema.dll:
2141e20.1ae4: CreationTime: 2013-09-12T22:16:46.088099300Z
2151e20.1ae4: LastWriteTime: 2013-08-02T02:12:20.275000000Z
2161e20.1ae4: ChangeTime: 2013-09-13T11:29:09.028327400Z
2171e20.1ae4: FileAttributes: 0x20
2181e20.1ae4: Size: 0x1a00
2191e20.1ae4: NT Headers: 0xc0
2201e20.1ae4: Timestamp: 0x51fb15ca
2211e20.1ae4: Machine: 0x8664 - amd64
2221e20.1ae4: Timestamp: 0x51fb15ca
2231e20.1ae4: Image Version: 6.1
2241e20.1ae4: SizeOfImage: 0x50000 (327680)
2251e20.1ae4: Resource Dir: 0x30000 LB 0x3f8
2261e20.1ae4: ProductName: Microsoft® Windows® Operating System
2271e20.1ae4: ProductVersion: 6.1.7601.18229
2281e20.1ae4: FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
2291e20.1ae4: FileDescription: ApiSet Schema DLL
2301e20.1ae4: supR3HardenedWinFindAdversaries: 0x0
2311e20.1ae4: Calling main()
2321e20.1ae4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2331e20.1ae4: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2341e20.1ae4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2351e20.1ae4: SUPR3HardenedMain: Respawn #2
2361e20.1ae4: supR3HardNtEnableThreadCreation:
2371e20.1ae4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\apphelp.dll)
2381e20.1ae4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\apphelp.dll
2391e20.1ae4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
2401e20.1ae4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
2411e20.1ae4: supR3HardenedDllNotificationCallback: load 000007fefd480000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
2421e20.1ae4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
2431e20.1ae4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd480000 'C:\Windows\system32\apphelp.dll'
2441e20.1ae4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00000000778ac340 pvNtTerminateThread=00000000778d17e0
2451e20.1ae4: supR3HardenedWinDoReSpawn(2): New child 1f4c.18d4 [kernel32].
2461e20.1ae4: supR3HardNtChildGatherData: PebBaseAddress=000007fffffdf000 cbPeb=0x380
2471e20.1ae4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000077880000 uNtDllChildAddr=0000000077880000
2481e20.1ae4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00000000778ac340
2491e20.1ae4: supR3HardenedWinSetupChildInit: Start child.
2501e20.1ae4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
2511e20.1ae4: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 33 sleeps
2521e20.1ae4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2531e20.1ae4: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000
2541e20.1ae4: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000
2551e20.1ae4: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000
2561e20.1ae4: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000
2571e20.1ae4: *0000000000040000-fffffffffff43fff 0x0000/0x0004 0x0020000
2581e20.1ae4: 000000000013c000-0000000000138fff 0x0104/0x0004 0x0020000
2591e20.1ae4: 000000000013f000-000000000013dfff 0x0004/0x0004 0x0020000
2601e20.1ae4: *0000000000140000-000000000013efff 0x0004/0x0004 0x0020000
2611e20.1ae4: 0000000000141000-0000000000131fff 0x0001/0x0000 0x0000000
2621e20.1ae4: *0000000000150000-000000000014efff 0x0004/0x0004 0x0020000
2631e20.1ae4: 0000000000151000-ffffffff88a21fff 0x0001/0x0000 0x0000000
2641e20.1ae4: *0000000077880000-000000007787efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2651e20.1ae4: 0000000077881000-000000007777efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2661e20.1ae4: 0000000077983000-0000000077953fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2671e20.1ae4: 00000000779b2000-00000000779a9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2681e20.1ae4: 00000000779ba000-00000000779b8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2691e20.1ae4: 00000000779bb000-00000000779b7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2701e20.1ae4: 00000000779be000-0000000077952fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
2711e20.1ae4: 0000000077a29000-0000000070471fff 0x0001/0x0000 0x0000000
2721e20.1ae4: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000
2731e20.1ae4: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
2741e20.1ae4: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
2751e20.1ae4: 000000007fff0000-ffffffffc043ffff 0x0001/0x0000 0x0000000
2761e20.1ae4: *000000013fba0000-000000013fb9efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2771e20.1ae4: 000000013fba1000-000000013fb1cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2781e20.1ae4: 000000013fc25000-000000013fc23fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2791e20.1ae4: 000000013fc26000-000000013fbe8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2801e20.1ae4: 000000013fc63000-000000013fc61fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2811e20.1ae4: 000000013fc64000-000000013fc62fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2821e20.1ae4: 000000013fc65000-000000013fc62fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2831e20.1ae4: 000000013fc67000-000000013fc65fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2841e20.1ae4: 000000013fc68000-000000013fc66fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2851e20.1ae4: 000000013fc69000-000000013fc64fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2861e20.1ae4: 000000013fc6d000-000000013fc33fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
2871e20.1ae4: 000000013fca6000-fffff8037fdabfff 0x0001/0x0000 0x0000000
2881e20.1ae4: *000007feffba0000-000007feffb9efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\apisetschema.dll
2891e20.1ae4: 000007feffba1000-000007fdff791fff 0x0001/0x0000 0x0000000
2901e20.1ae4: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000
2911e20.1ae4: 000007fffffd3000-000007fffffc8fff 0x0001/0x0000 0x0000000
2921e20.1ae4: *000007fffffdd000-000007fffffdafff 0x0004/0x0004 0x0020000
2931e20.1ae4: *000007fffffdf000-000007fffffddfff 0x0004/0x0004 0x0020000
2941e20.1ae4: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000
2951e20.1ae4: apisetschema.dll: timestamp 0x51fb15ca (rc=VINF_SUCCESS)
2961e20.1ae4: VirtualBox.exe: timestamp 0x54731167 (rc=VINF_SUCCESS)
2971e20.1ae4: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2981e20.1ae4: '\Device\HarddiskVolume8\Windows\System32\apisetschema.dll' has no imports
2991e20.1ae4: '\Device\HarddiskVolume8\Windows\System32\ntdll.dll' has no imports
3001e20.1ae4: supR3HardNtChildPurify: Done after 297 ms and 0 fixes (loop #0).
3011f4c.18d4: Log file opened: 4.3.20r96997 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db110
3021f4c.18d4: supR3HardenedVmProcessInit: uNtDllAddr=0000000077880000
3031e20.1ae4: supR3HardenedEarlyCompact: Removed heap 1 (0x000000002c0000 LB 0x400000)
3041f4c.18d4: ntdll.dll: timestamp 0x521eaf24 (rc=VINF_SUCCESS)
3051f4c.18d4: New simple heap: #1 0000000000260000 LB 0x400000 (for 1740800 allocation)
3061e20.1ae4: supR3HardNtEnableThreadCreation:
3071f4c.18d4: System32: \Device\HarddiskVolume8\Windows\System32
3081f4c.18d4: WinSxS: \Device\HarddiskVolume8\Windows\winsxs
3091f4c.18d4: KnownDllPath: C:\Windows\system32
3101f4c.18d4: supR3HardenedVmProcessInit: Opening vboxdrv...
3111f4c.18d4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3121f4c.18d4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3131f4c.18d4: Registered Dll notification callback with NTDLL.
3141f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\kernel32.dll)
3151f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\kernel32.dll
3161f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
3171f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3181f4c.18d4: supR3HardenedDllNotificationCallback: load 0000000077660000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
3191f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3201f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd750000 LB 0x0006c000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
3211f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\KernelBase.dll)
3221f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\KernelBase.dll
3231f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077660000 'C:\Windows\system32\kernel32.dll'
3241f4c.18d4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00000000778ac340 pvNtTerminateThread=00000000778d17e0
3251e20.1ae4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 27 ms.
3261f4c.18d4: \SystemRoot\System32\ntdll.dll:
3271f4c.18d4: CreationTime: 2013-10-09T19:49:40.482352000Z
3281f4c.18d4: LastWriteTime: 2013-08-29T02:16:35.515578900Z
3291f4c.18d4: ChangeTime: 2013-10-11T11:47:49.959480800Z
3301f4c.18d4: FileAttributes: 0x20
3311f4c.18d4: Size: 0x1a6dc0
3321f4c.18d4: NT Headers: 0xe0
3331f4c.18d4: Timestamp: 0x521eaf24
3341f4c.18d4: Machine: 0x8664 - amd64
3351f4c.18d4: Timestamp: 0x521eaf24
3361f4c.18d4: Image Version: 6.1
3371f4c.18d4: SizeOfImage: 0x1a9000 (1740800)
3381f4c.18d4: Resource Dir: 0x151000 LB 0x560d8
3391f4c.18d4: ProductName: Microsoft® Windows® Operating System
3401f4c.18d4: ProductVersion: 6.1.7601.18247
3411f4c.18d4: FileVersion: 6.1.7601.18247 (win7sp1_gdr.130828-1532)
3421f4c.18d4: FileDescription: NT Layer DLL
3431f4c.18d4: \SystemRoot\System32\kernel32.dll:
3441f4c.18d4: CreationTime: 2014-04-09T20:46:06.356623900Z
3451f4c.18d4: LastWriteTime: 2014-03-04T09:44:00.336000000Z
3461f4c.18d4: ChangeTime: 2014-04-10T08:16:02.443941000Z
3471f4c.18d4: FileAttributes: 0x20
3481f4c.18d4: Size: 0x11c000
3491f4c.18d4: NT Headers: 0xe8
3501f4c.18d4: Timestamp: 0x5315a059
3511f4c.18d4: Machine: 0x8664 - amd64
3521f4c.18d4: Timestamp: 0x5315a059
3531f4c.18d4: Image Version: 6.1
3541f4c.18d4: SizeOfImage: 0x11f000 (1175552)
3551f4c.18d4: Resource Dir: 0x116000 LB 0x528
3561f4c.18d4: ProductName: Microsoft® Windows® Operating System
3571f4c.18d4: ProductVersion: 6.1.7601.18409
3581f4c.18d4: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
3591f4c.18d4: FileDescription: Windows NT BASE API Client DLL
3601f4c.18d4: \SystemRoot\System32\KernelBase.dll:
3611f4c.18d4: CreationTime: 2014-05-15T08:13:15.592383400Z
3621f4c.18d4: LastWriteTime: 2014-03-04T09:44:00.336000000Z
3631f4c.18d4: ChangeTime: 2014-05-16T10:57:02.087738500Z
3641f4c.18d4: FileAttributes: 0x20
3651f4c.18d4: Size: 0x67c00
3661f4c.18d4: NT Headers: 0xe8
3671f4c.18d4: Timestamp: 0x5315a05a
3681f4c.18d4: Machine: 0x8664 - amd64
3691f4c.18d4: Timestamp: 0x5315a05a
3701f4c.18d4: Image Version: 6.1
3711f4c.18d4: SizeOfImage: 0x6c000 (442368)
3721f4c.18d4: Resource Dir: 0x6a000 LB 0x530
3731f4c.18d4: ProductName: Microsoft® Windows® Operating System
3741f4c.18d4: ProductVersion: 6.1.7601.18409
3751f4c.18d4: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
3761f4c.18d4: FileDescription: Windows NT BASE API Client DLL
3771f4c.18d4: \SystemRoot\System32\apisetschema.dll:
3781f4c.18d4: CreationTime: 2013-09-12T22:16:46.088099300Z
3791f4c.18d4: LastWriteTime: 2013-08-02T02:12:20.275000000Z
3801f4c.18d4: ChangeTime: 2013-09-13T11:29:09.028327400Z
3811f4c.18d4: FileAttributes: 0x20
3821f4c.18d4: Size: 0x1a00
3831f4c.18d4: NT Headers: 0xc0
3841f4c.18d4: Timestamp: 0x51fb15ca
3851f4c.18d4: Machine: 0x8664 - amd64
3861f4c.18d4: Timestamp: 0x51fb15ca
3871f4c.18d4: Image Version: 6.1
3881f4c.18d4: SizeOfImage: 0x50000 (327680)
3891f4c.18d4: Resource Dir: 0x30000 LB 0x3f8
3901f4c.18d4: ProductName: Microsoft® Windows® Operating System
3911f4c.18d4: ProductVersion: 6.1.7601.18229
3921f4c.18d4: FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
3931f4c.18d4: FileDescription: ApiSet Schema DLL
3941f4c.18d4: supR3HardenedWinFindAdversaries: 0x0
3951f4c.18d4: Calling main()
3961f4c.18d4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
3971f4c.18d4: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3981f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3991f4c.18d4: SUPR3HardenedMain: Final process, opening VBoxDrv...
4001f4c.18d4: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000260000 LB 0x400000)
4011f4c.18d4: supR3HardNtEnableThreadCreation:
4021f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4031f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4041f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000674130:C:\Windows\system32 [calling]
4051f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4061f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefb140000 LB 0x00004000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4071f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4081f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4091f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
4101f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb140000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4111f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4121f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
4131f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb140000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4141f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb140000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4151f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4161f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'.
4171f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
4181f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
4191f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\wintrust.dll)
4201f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wintrust.dll
4211f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4221f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4231f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll)
4241f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
4251f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4261f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume8\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4271f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\msasn1.dll)
4281f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msasn1.dll
4291f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4301f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume8\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4311f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4321f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
4331f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\crypt32.dll)
4341f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\crypt32.dll
4351f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4361f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4371f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\msvcrt.dll)
4381f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
4391f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume8\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4411f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4441f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4451f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000674130:C:\Windows\system32 [calling]
4461f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4471f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd6c0000 LB 0x0003a000 C:\Windows\system32\Wintrust.dll [fFlags=0x0]
4481f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4491f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feffaf0000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0]
4501f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4511f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd860000 LB 0x0016c000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0]
4521f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
4531f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd650000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0]
4541f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4551f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefe050000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0]
4561f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4571f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\Wintrust.dll'
4581f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\cryptsp.dll)
4591f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cryptsp.dll
4601f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
4611f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
4621f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd020000 LB 0x00017000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0]
4631f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
4641f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd020000 'C:\Windows\system32\CRYPTSP.dll'
4651f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4661f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\rsaenh.dll)
4671f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\rsaenh.dll
4681f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4691f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4701f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4711f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
4721f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
4731f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefcb30000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
4741f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
4751f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcb30000 'C:\Windows\system32\rsaenh.dll'
4761f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4771f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
4781f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\advapi32.dll)
4791f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\advapi32.dll
4801f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4821f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4831f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4841f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4851f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4861f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
4871f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
4881f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefef10000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0]
4891f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
4901f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
4911f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
4921f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\sechost.dll)
4931f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\sechost.dll
4941f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefda00000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0]
4951f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\sechost.dll [lacks WinVerifyTrust]
4961f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\ADVAPI32.dll'
4971f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\cryptbase.dll)
4981f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cryptbase.dll
4991f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5001f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5011f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5021f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5031f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5041f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5051f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5061f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5071f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd4e0000 LB 0x0000f000 C:\Windows\system32\CRYPTBASE.dll [fFlags=0x0]
5081f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5091f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd4e0000 'C:\Windows\system32\CRYPTBASE.dll'
5101f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
5111f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5121f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077660000 'C:\Windows\system32\kernel32.dll'
5131f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5141f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5151f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\WINTRUST.DLL'
5161f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5171f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5181f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd860000 'C:\Windows\system32\CRYPT32.dll'
5191f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5201f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'advapi32.dll'.
5211f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\imagehlp.dll)
5221f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\imagehlp.dll
5231f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5241f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5251f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
5261f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5271f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5281f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5291f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imagehlp.dll (Input=imagehlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5301f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
5311f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff360000 LB 0x00019000 C:\Windows\system32\imagehlp.dll [fFlags=0x0]
5321f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
5331f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff360000 'C:\Windows\system32\imagehlp.dll'
5341f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
5351f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5361f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd020000 'C:\Windows\system32\CRYPTSP.dll'
5371f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
5381f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\user32.dll)
5391f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\user32.dll
5401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5421f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
5431f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
5441f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\gdi32.dll)
5451f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\gdi32.dll
5461f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'...
5471f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume8\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008]
5481f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
5491f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
5501f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'.
5511f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\lpk.dll)
5521f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\lpk.dll
5531f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5541f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5551f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
5561f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'...
5571f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume8\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008]
5581f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5591f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
5601f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
5611f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\usp10.dll)
5621f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\usp10.dll
5631f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5641f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5651f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
5661f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5671f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5681f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5691f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5701f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5711f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5721f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5731f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5741f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
5751f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5761f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5771f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5781f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USER32.dll (Input=USER32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5791f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
5801f4c.18d4: supR3HardenedDllNotificationCallback: load 0000000077780000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0]
5811f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
5821f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefdfe0000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0]
5831f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5841f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff710000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0]
5851f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\lpk.dll [lacks WinVerifyTrust]
5861f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefda70000 LB 0x000c9000 C:\Windows\system32\USP10.dll [fFlags=0x0]
5871f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\usp10.dll [lacks WinVerifyTrust]
5881f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5891f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
5901f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdfe0000 'C:\Windows\system32\gdi32.dll'
5911f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
5921f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
5931f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
5941f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\imm32.dll)
5951f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\imm32.dll
5961f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
5971f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume8\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
5981f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5991f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
6001f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
6011f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'.
6021f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\msctf.dll)
6031f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msctf.dll
6041f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6051f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6061f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6071f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6081f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6091f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
6101f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
6111f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume8\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
6121f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [lacks WinVerifyTrust]
6131f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6141f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6151f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6161f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6171f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6181f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
6191f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6201f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6211f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
6231f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [lacks WinVerifyTrust]
6241f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff380000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0]
6251f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [lacks WinVerifyTrust]
6261f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff800000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0]
6271f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msctf.dll [lacks WinVerifyTrust]
6281f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff380000 'C:\Windows\system32\IMM32.DLL'
6291f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077780000 'C:\Windows\system32\USER32.dll'
6301f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'bcrypt.dll'.
6311f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
6321f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'.
6331f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\ncrypt.dll)
6341f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ncrypt.dll
6351f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
6361f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume8\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
6371f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
6381f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6391f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6401f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6431f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\bcrypt.dll)
6441f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\bcrypt.dll
6451f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ncrypt.dll (Input=ncrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
6461f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
6471f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd040000 LB 0x00050000 C:\Windows\system32\ncrypt.dll [fFlags=0x0]
6481f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
6491f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6501f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefcff0000 LB 0x00022000 C:\Windows\system32\bcrypt.dll [fFlags=0x0]
6511f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6521f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd040000 'C:\Windows\system32\ncrypt.dll'
6531f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
6541f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'bcrypt.dll'.
6551f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll)
6561f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll
6571f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6581f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6591f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6601f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
6611f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
6621f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
6631f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
6641f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6651f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefc9b0000 LB 0x0004c000 C:\Windows\system32\bcryptprimitives.dll [fFlags=0x0]
6661f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6671f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc9b0000 'C:\Windows\system32\bcryptprimitives.dll'
6681f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6691f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (Input=bcrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
6701f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcff0000 'C:\Windows\system32\bcrypt.dll'
6711f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6721f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
6731f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'profapi.dll'.
6741f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\userenv.dll)
6751f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\userenv.dll
6761f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
6771f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
6781f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6791f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\profapi.dll)
6801f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\profapi.dll
6811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6821f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6831f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6841f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6851f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6861f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6871f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6881f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6891f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6901f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USERENV.dll (Input=USERENV.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
6911f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\userenv.dll [lacks WinVerifyTrust]
6921f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd9e0000 LB 0x0001e000 C:\Windows\system32\USERENV.dll [fFlags=0x0]
6931f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\userenv.dll [lacks WinVerifyTrust]
6941f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd640000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0]
6951f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\profapi.dll [lacks WinVerifyTrust]
6961f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd9e0000 'C:\Windows\system32\USERENV.dll'
6971f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
6981f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
6991f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7001f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
7011f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7021f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
7031f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\gpapi.dll)
7041f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\gpapi.dll
7051f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7061f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7071f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7081f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7091f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7101f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7111f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\GPAPI.dll (Input=GPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7121f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
7131f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefca50000 LB 0x0001b000 C:\Windows\system32\GPAPI.dll [fFlags=0x0]
7141f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
7151f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca50000 'C:\Windows\system32\GPAPI.dll'
7161f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7171f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-WIN-Service-Management-L1-1-0.dll'
7181f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7191f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7201f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe050000 'C:\Windows\system32\rpcrt4.dll'
7211f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L2-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-WIN-Service-Management-L2-1-0.dll'
7231f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7241f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
7251f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7261f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
7271f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
7281f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wldap32.dll'.
7291f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\cryptnet.dll)
7301f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cryptnet.dll
7311f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
7321f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume8\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
7331f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7341f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\Wldap32.dll)
7351f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\Wldap32.dll
7361f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
7371f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume8\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
7381f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7391f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
7401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
7411f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7441f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7451f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7461f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7471f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7481f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7491f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7501f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef99e0000 LB 0x00027000 C:\Windows\system32\cryptnet.dll [fFlags=0x0]
7511f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7521f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefdb40000 LB 0x00052000 C:\Windows\system32\WLDAP32.dll [fFlags=0x0]
7531f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
7541f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7551f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7561f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7571f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7581f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7591f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7601f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7611f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7621f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7631f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7641f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7651f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7661f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7671f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7681f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7691f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7701f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7711f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7721f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7731f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7741f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7751f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7761f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7771f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7781f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7791f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7801f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7811f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7821f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7831f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7841f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef99e0000 'C:\Windows\system32\cryptnet.dll'
7851f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7861f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
7871f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\profapi.dll [lacks WinVerifyTrust]
7881f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
7891f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd640000 'C:\Windows\system32\profapi.dll'
7901f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
7911f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
7921f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
7931f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\shlwapi.dll)
7941f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
7951f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7961f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7971f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7981f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7991f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8001f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
8011f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8021f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8031f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8041f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8051f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
8061f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff690000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0]
8071f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
8081f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff690000 'C:\Windows\system32\SHLWAPI.dll'
8091f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
8101f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000006e5980
8111f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8121f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=771D512B7B1C39F0393BD4EF9FC62F442783FB35
8131f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8141f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
8151f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8161f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-WIN-Service-Management-L1-1-0.dll'
8171f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8181f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
8191f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
8201f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8211f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\ADVAPI32.dll'
8221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8231f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
8241f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
8251f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
8261f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2882822~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\SystemRoot\System32\ntdll.dll'
8271f4c.18d4: g_pfnWinVerifyTrust=000007fefd6c1010
8281f4c.18d4: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
8291f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e0 pwszName=\Device\HarddiskVolume8\Windows\System32\crypt32.dll
8301f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8311f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8321f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CF258E1DA85AD69891395F6F7501E1D54F2DFED8
8331f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_112_for_KB2868626~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume8\Windows\System32\crypt32.dll'
8341f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8351f4c.18d4: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\crypt32.dll'
8361f4c.18d4: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
8371f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d4 pwszName=\Device\HarddiskVolume8\Windows\System32\wintrust.dll
8381f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8391f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8401f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=80662AB761CF56CEC7909E5D03289BC65B4457A8
8411f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB2862966~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume8\Windows\System32\wintrust.dll'
8421f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8431f4c.18d4: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\wintrust.dll'
8441f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003b8 pwszName=\Device\HarddiskVolume8\Windows\System32\shlwapi.dll
8451f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8461f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8471f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AB8D9C9D3E1FC95D01F9A984B16ED031BB40CD8
8481f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\shlwapi.dll'
8491f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8501f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll'
8511f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003b0 pwszName=\Device\HarddiskVolume8\Windows\System32\Wldap32.dll
8521f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8531f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8541f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=87E73086F2528CF31D3AD5F0D71E04F8B942D5D8
8551f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\Wldap32.dll'
8561f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8571f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\Wldap32.dll'
8581f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003ac pwszName=\Device\HarddiskVolume8\Windows\System32\cryptnet.dll
8591f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8601f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8611f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C1C670A9871F2BD448B2F0FA6127AC7A486B8D8F
8621f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB2862966~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume8\Windows\System32\cryptnet.dll'
8631f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8641f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cryptnet.dll'
8651f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000268 pwszName=\Device\HarddiskVolume8\Windows\System32\gpapi.dll
8661f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8671f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8681f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=470795C189226F7BDB8E50F42104CC34488B9340
8691f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\gpapi.dll'
8701f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8711f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\gpapi.dll'
8721f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001d4 pwszName=\Device\HarddiskVolume8\Windows\System32\profapi.dll
8731f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8741f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8751f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2449672745D9BA339420451D13FA0380AA768231
8761f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\profapi.dll'
8771f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8781f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\profapi.dll'
8791f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001d0 pwszName=\Device\HarddiskVolume8\Windows\System32\userenv.dll
8801f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8811f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8821f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D3E1A2CC7367F751C19EBF4E6EDF5E9A10E47313
8831f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\userenv.dll'
8841f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8851f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\userenv.dll'
8861f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll'
8871f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001a8 pwszName=\Device\HarddiskVolume8\Windows\System32\bcrypt.dll
8881f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8891f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8901f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62E377A1F0AD0C2EDC0A73CB3EFF841FF18D00D2
8911f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\bcrypt.dll'
8921f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8931f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll'
8941f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001a4 pwszName=\Device\HarddiskVolume8\Windows\System32\ncrypt.dll
8951f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
8961f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
8971f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D68DA0EBD4E0AA6C401CF7C54CEA904099DD3933
8981f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB2992611~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume8\Windows\System32\ncrypt.dll'
8991f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9001f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\ncrypt.dll'
9011f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000018c pwszName=\Device\HarddiskVolume8\Windows\System32\msctf.dll
9021f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9031f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9041f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=803AF52F95A9EFDFDA06C595023831EE36ACD3A8
9051f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\msctf.dll'
9061f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9071f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\msctf.dll'
9081f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000188 pwszName=\Device\HarddiskVolume8\Windows\System32\imm32.dll
9091f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9101f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9111f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6EEE1AB3B6D79AFF857940FF5F51ED27698153EC
9121f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\imm32.dll'
9131f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9141f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\imm32.dll'
9151f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000184 pwszName=\Device\HarddiskVolume8\Windows\System32\usp10.dll
9161f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9171f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9181f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1F1AA8340DE02FC1B6341EE2706E55D56EDF63B8
9191f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2957509~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume8\Windows\System32\usp10.dll'
9201f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9211f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\usp10.dll'
9221f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000180 pwszName=\Device\HarddiskVolume8\Windows\System32\lpk.dll
9231f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9241f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9251f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6FCA4D678614C8615E6E5C082BF3A4562FCF14EB
9261f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2847311~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume8\Windows\System32\lpk.dll'
9271f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9281f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\lpk.dll'
9291f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000017c pwszName=\Device\HarddiskVolume8\Windows\System32\gdi32.dll
9301f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9311f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9321f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7AEB59C2353484ADF282BEA358113ABD82C223B9
9331f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2993651~31bf3856ad364e35~amd64~~6.1.1.3.cat'; file='\Device\HarddiskVolume8\Windows\System32\gdi32.dll'
9341f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9351f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\gdi32.dll'
9361f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000178 pwszName=\Device\HarddiskVolume8\Windows\System32\user32.dll
9371f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9381f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9391f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B723D1B8AD72750B0CF5F6BEC66171B1254ED879
9401f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\user32.dll'
9411f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9421f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\user32.dll'
9431f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000174 pwszName=\Device\HarddiskVolume8\Windows\System32\imagehlp.dll
9441f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9451f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9461f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2702EE05F1B717B0F2CE0FBE32784A47B8419DCA
9471f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2893294~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume8\Windows\System32\imagehlp.dll'
9481f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9491f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\imagehlp.dll'
9501f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000120 pwszName=\Device\HarddiskVolume8\Windows\System32\cryptbase.dll
9511f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9521f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9531f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A965CC5DB13A5FB23BBB1B6B5FA6D400DC49462F
9541f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\cryptbase.dll'
9551f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9561f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cryptbase.dll'
9571f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000114 pwszName=\Device\HarddiskVolume8\Windows\System32\sechost.dll
9581f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9591f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9601f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3FA2A014BF360CDC0E203A174FFC9DC5343C5323
9611f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\sechost.dll'
9621f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9631f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\sechost.dll'
9641f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000108 pwszName=\Device\HarddiskVolume8\Windows\System32\advapi32.dll
9651f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9661f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9671f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7C0A1C638CE7C1160F49C473EC1420BD3AB693C4
9681f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2882822~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume8\Windows\System32\advapi32.dll'
9691f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9701f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\advapi32.dll'
9711f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\rsaenh.dll'
9721f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000104 pwszName=\Device\HarddiskVolume8\Windows\System32\cryptsp.dll
9731f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9741f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9751f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=40667EDBA9045D4A4BE1D4844665D3B88F8CD0E0
9761f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\cryptsp.dll'
9771f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9781f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cryptsp.dll'
9791f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e4 pwszName=\Device\HarddiskVolume8\Windows\System32\msvcrt.dll
9801f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9811f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9821f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2CA2FD632B264C063162F71474266E3615B6420C
9831f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume8\Windows\System32\msvcrt.dll'
9841f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9851f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll'
9861f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000dc pwszName=\Device\HarddiskVolume8\Windows\System32\msasn1.dll
9871f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9881f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9891f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F2FF57DC30D774F93061607060DAA0DD15E39CCE
9901f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\msasn1.dll'
9911f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9921f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\msasn1.dll'
9931f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d8 pwszName=\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
9941f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
9951f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
9961f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=03E871CFC4A3E7194619AFC99CEEA1EC75982D12
9971f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2978668~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll'
9981f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
9991f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll'
10001f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
10011f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000028 pwszName=\Device\HarddiskVolume8\Windows\System32\KernelBase.dll
10021f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
10031f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
10041f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=57EB6F834C5A5D9585A660D91756134028A3B089
10051f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB2871997~31bf3856ad364e35~amd64~~6.1.2.5.cat'; file='\Device\HarddiskVolume8\Windows\System32\KernelBase.dll'
10061f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
10071f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\KernelBase.dll'
10081f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000020 pwszName=\Device\HarddiskVolume8\Windows\System32\kernel32.dll
10091f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
10101f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
10111f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5349346AE66DA4E3A7206628F484AC3B3AA43776
10121f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB2871997~31bf3856ad364e35~amd64~~6.1.2.5.cat'; file='\Device\HarddiskVolume8\Windows\System32\kernel32.dll'
10131f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
10141f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\kernel32.dll'
10151f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll
10161f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000767d40:C:\Windows\system32 [calling]
10171f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd860000 'C:\Windows\system32\crypt32.dll'
10181f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
10191f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
10201f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
10211f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
10221f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
10231f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
10241f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
10251f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
10261f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
10271f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
10281f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
10291f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
10301f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
10311f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
10321f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
10331f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
10341f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
10351f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xff3891b54348328 C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
10361f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
10371f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
10381f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
10391f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
10401f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
10411f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
10421f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
10431f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
10441f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
10451f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
10461f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
10471f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
10481f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x9259c8abe5ca713a L=ValiCert Validation Network, O=ValiCert, Inc., OU=ValiCert Class 2 Policy Validation Authority, CN=http://www.valicert.com/, Email=info@valicert.com
10491f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
10501f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
10511f4c.18d4: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
10521f4c.18d4: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=34
10531f4c.18d4: SUPR3HardenedMain: Load Runtime...
10541f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
10551f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
10561f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
10571f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
10581f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll)WinVerifyTrust
10591f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
10601f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10611f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10621f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
10631f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
10641f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
10651f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000460 pwszName=\Device\HarddiskVolume8\Windows\System32\ws2_32.dll
10661f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
10671f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
10681f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3EF3BDC1E84DFA17EA056313214EE88EC3E66F79
10691f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\ws2_32.dll'
10701f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
10711f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10721f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
10731f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'.
10741f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ws2_32.dll)WinVerifyTrust
10751f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
10761f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
10771f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
10781f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
10791f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll)WinVerifyTrust
10801f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
10811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10821f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10831f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll)WinVerifyTrust
10841f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
10851f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10861f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10871f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
10881f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
10891f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
10901f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000478 pwszName=\Device\HarddiskVolume8\Windows\System32\nsi.dll
10911f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
10921f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
10931f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7AFD8538945F2D05BC1AF949B9B19B7D2D9FBBF8
10941f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\nsi.dll'
10951f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
10961f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\nsi.dll)WinVerifyTrust
10971f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\nsi.dll
10981f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10991f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
11001f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
11011f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11021f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11031f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
11041f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
11051f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11061f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fee5bc0000 LB 0x00531000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
11071f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11081f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
11091f4c.18d4: supR3HardenedDllNotificationCallback: load 000000006eb40000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
11101f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
11111f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
11121f4c.18d4: supR3HardenedDllNotificationCallback: load 000000006ec50000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
11131f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
11141f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefda20000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0]
11151f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
11161f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff3b0000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0]
11171f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll
11181f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11191f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11201f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11211f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11231f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11241f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11251f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11261f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11271f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11281f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11291f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11301f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11311f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11321f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11331f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11341f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11351f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11361f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11371f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11381f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11391f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11401f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11411f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11421f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11431f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11441f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11451f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11461f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11471f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11481f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11491f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11501f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11511f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11521f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11531f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11541f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11551f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11561f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11571f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11581f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11591f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11601f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11611f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
11621f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006748a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\ImageMagick-6.8.9-Q16;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\PC Connectivity Solution\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Integrad.3\MIV;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Windows Imaging\ [calling]
11631f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11641f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11651f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11661f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee5bc0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11671f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll
11681f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000767a40:C:\Windows\system32 [calling]
11691f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\Wintrust.dll'
11701f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll
11711f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000768200:C:\Windows\system32 [calling]
11721f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd860000 'C:\Windows\system32\crypt32.dll'
11731f4c.18d4: SUPR3HardenedMain: Load TrustedMain...
11741f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11751f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
11761f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
11771f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
11781f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
11791f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtguivbox4.dll'.
11801f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtnetworkvbox4.dll'.
11811f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtopenglvbox4.dll'.
11821f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'user32.dll'.
11831f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'gdi32.dll'.
11841f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
11851f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
11861f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
11871f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
11881f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'comdlg32.dll'.
11891f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'winmm.dll'.
11901f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll)WinVerifyTrust
11911f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll
11921f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11931f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
11941f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004b8 pwszName=\Device\HarddiskVolume8\Windows\System32\winmm.dll
11951f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
11961f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
11971f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=82E2B2A7826F88BEB98FFF0540C9BDB0A12F001A
11981f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\winmm.dll'
11991f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
12001f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
12011f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
12021f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winmm.dll)WinVerifyTrust
12031f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winmm.dll
12041f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
12051f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume8\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
12061f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000498 pwszName=\Device\HarddiskVolume8\Windows\System32\comdlg32.dll
12071f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
12081f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
12091f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=66EE5BDFFA413AEA9E1FE7838A08646E94136DA5
12101f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\comdlg32.dll'
12111f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
12121f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12131f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
12141f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
12151f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
12161f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
12171f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
12181f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\comdlg32.dll)WinVerifyTrust
12191f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\comdlg32.dll
12201f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12211f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12221f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004ac pwszName=\Device\HarddiskVolume8\Windows\System32\oleaut32.dll
12231f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
12241f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
12251f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=59C9A3379D97CB80EFB9D9152AF4E0240DDF8B29
12261f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3006226~31bf3856ad364e35~amd64~~6.1.1.4.cat'; file='\Device\HarddiskVolume8\Windows\System32\oleaut32.dll'
12271f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
12281f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
12291f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
12301f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
12311f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
12321f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
12331f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\oleaut32.dll)WinVerifyTrust
12341f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
12351f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12361f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12371f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004c4 pwszName=\Device\HarddiskVolume8\Windows\System32\ole32.dll
12381f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
12391f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
12401f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2E64AE329BD5124592BC8CB0B327AA3B95DC65B7
12411f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\ole32.dll'
12421f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
12431f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12441f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
12451f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
12461f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
12471f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ole32.dll)WinVerifyTrust
12481f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ole32.dll
12491f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12501f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12511f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004bc pwszName=\Device\HarddiskVolume8\Windows\System32\shell32.dll
12521f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
12531f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
12541f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8D11B9B481EE916E64C94F8ECA71C2995A2999B7
12551f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2980245~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume8\Windows\System32\shell32.dll'
12561f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
12571f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12581f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
12591f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
12601f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
12611f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\shell32.dll)WinVerifyTrust
12621f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\shell32.dll
12631f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12641f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12651f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
12661f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12671f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12681f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll
12691f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12701f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12711f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
12721f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' [rcNtRedir=0xc0150008]
12731f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
12741f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
12751f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
12761f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
12771f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
12781f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
12791f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)WinVerifyTrust
12801f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
12811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
12821f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' [rcNtRedir=0xc0150008]
12831f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
12841f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
12851f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
12861f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)WinVerifyTrust
12871f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
12881f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
12891f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
12901f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12911f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
12921f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
12931f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
12941f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
12951f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
12961f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
12971f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
12981f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
12991f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
13001f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
13011f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
13021f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
13031f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)WinVerifyTrust
13041f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
13051f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
13061f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
13071f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13081f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
13091f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
13101f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
13111f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13121f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13131f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)WinVerifyTrust
13141f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
13151f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13161f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13171f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
13181f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13191f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13201f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
13211f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13221f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13231f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13241f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13251f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000500 pwszName=\Device\HarddiskVolume8\Windows\System32\opengl32.dll
13261f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
13271f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
13281f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=608AC397FCC42B9FBAE25CB8C25EAF4C19AA384D
13291f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\opengl32.dll'
13301f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13311f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13321f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
13331f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
13341f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
13351f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
13361f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
13371f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\opengl32.dll)WinVerifyTrust
13381f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\opengl32.dll
13391f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
13421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume8\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
13431f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004f4 pwszName=\Device\HarddiskVolume8\Windows\System32\ddraw.dll
13441f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
13451f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
13461f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=24C763EA54CD792A0F1618411061DC356EE31FF6
13471f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\ddraw.dll'
13481f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13491f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13501f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13511f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
13521f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
13531f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
13541f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
13551f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ddraw.dll)WinVerifyTrust
13561f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ddraw.dll
13571f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
13581f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume8\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
13591f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004f0 pwszName=\Device\HarddiskVolume8\Windows\System32\glu32.dll
13601f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
13611f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
13621f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=60E45AB914E06A11F44EA76C6EF750AF892F9EA2
13631f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\glu32.dll'
13641f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13651f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13661f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13671f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13681f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\glu32.dll)WinVerifyTrust
13691f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\glu32.dll
13701f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13711f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13721f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13731f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13741f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
13751f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13761f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13771f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13781f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13791f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
13801f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13821f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
13831f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
13841f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
13851f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
13861f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13871f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13881f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13891f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13901f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
13911f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13921f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13931f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13941f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13951f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
13961f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13971f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13981f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
13991f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
14001f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
14011f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
14021f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14031f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14041f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
14051f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14061f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14071f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14081f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14091f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14101f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14111f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
14121f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
14131f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume8\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
14141f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004e4 pwszName=\Device\HarddiskVolume8\Windows\System32\winspool.drv
14151f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
14161f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
14171f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C89A2ED7B99A056D78CA6BAC9CCAB8B1FF119A14
14181f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\winspool.drv'
14191f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
14201f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14211f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
14221f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
14231f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winspool.drv)WinVerifyTrust
14241f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winspool.drv
14251f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
14261f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
14271f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
14281f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
14291f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume8\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
14301f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll
14311f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
14321f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
14331f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
14341f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
14351f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume8\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
14361f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\comdlg32.dll
14371f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14381f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14391f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14411f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
14421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
14431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
14441f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
14451f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
14461f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
14471f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
14481f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14491f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14501f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
14511f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
14521f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
14531f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
14541f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
14551f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
14561f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
14571f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14581f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14591f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14601f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14611f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14621f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14631f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
14641f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14651f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14661f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14671f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14681f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
14691f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
14701f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
14711f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14721f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14731f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14741f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14751f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14761f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14771f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14781f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14791f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14801f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14821f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14831f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14841f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14851f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
14861f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14871f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14881f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14891f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14901f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14911f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14921f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
14931f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14941f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14951f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
14961f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
14971f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
14981f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000510 pwszName=\Device\HarddiskVolume8\Windows\System32\comctl32.dll
14991f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
15001f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
15011f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5A2FB6B10717AFC03CD9FE6E8F1337A8EA94BF9B
15021f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2864058~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume8\Windows\System32\comctl32.dll'
15031f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15041f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
15051f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
15061f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
15071f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\comctl32.dll)WinVerifyTrust
15081f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\comctl32.dll
15091f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15101f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15111f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15121f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15131f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
15141f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
15151f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
15161f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15171f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15181f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15191f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15201f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15211f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15221f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15231f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15241f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15251f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15261f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll
15271f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15281f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15291f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15301f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15311f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15321f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15331f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15341f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15351f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15361f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15371f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15381f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15391f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
15401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
15431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
15441f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004d4 pwszName=\Device\HarddiskVolume8\Windows\System32\dwmapi.dll
15451f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
15461f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
15471f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B79EE7B5AD74EF51A849809202E043183A2C727E
15481f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\dwmapi.dll'
15491f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15501f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15511f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
15521f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
15531f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\dwmapi.dll)WinVerifyTrust
15541f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dwmapi.dll
15551f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
15561f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
15571f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000518 pwszName=\Device\HarddiskVolume8\Windows\System32\setupapi.dll
15581f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
15591f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
15601f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1499C4FEA6E143F9BEC35B4FFA098917D3A6EBF2
15611f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\setupapi.dll'
15621f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15631f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'.
15641f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
15651f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
15661f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
15671f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
15681f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15691f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'.
15701f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\setupapi.dll)WinVerifyTrust
15711f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\setupapi.dll
15721f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15731f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15741f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
15751f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume8\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
15761f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000508 pwszName=\Device\HarddiskVolume8\Windows\System32\dciman32.dll
15771f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
15781f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
15791f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F097BF0B081F54722F0A01EF1CC13AECA64B12F0
15801f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2847311~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume8\Windows\System32\dciman32.dll'
15811f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15821f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15831f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
15841f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
15851f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\dciman32.dll)WinVerifyTrust
15861f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dciman32.dll
15871f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15881f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15891f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15901f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15911f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15921f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15931f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15941f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15951f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15961f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15971f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
15981f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume8\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
15991f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000524 pwszName=\Device\HarddiskVolume8\Windows\System32\devobj.dll
16001f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
16011f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
16021f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B410A095222E69F0ECE7D66E4AC27A7125D2EB5A
16031f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\devobj.dll'
16041f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
16051f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16061f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'.
16071f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\devobj.dll)WinVerifyTrust
16081f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\devobj.dll
16091f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16101f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16111f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
16121f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16131f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16141f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16151f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16161f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16171f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16181f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16191f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16201f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
16211f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
16221f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000052c pwszName=\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
16231f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
16241f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
16251f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8F731777EFC4BC982C1E1467FBF29A74CC14D93A
16261f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll'
16271f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
16281f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16291f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
16301f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
16311f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll)WinVerifyTrust
16321f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
16331f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16341f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16351f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16361f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16371f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16381f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16391f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
16401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
16411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16441f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16451f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
16461f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
16471f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
16481f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16491f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16501f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
16511f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll
16521f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fee4aa0000 LB 0x00873000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
16531f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll
16541f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
16551f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef2a50000 LB 0x0011d000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0]
16561f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
16571f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\glu32.dll
16581f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefa170000 LB 0x0002d000 C:\Windows\system32\GLU32.dll [fFlags=0x0]
16591f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\glu32.dll
16601f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ddraw.dll
16611f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef2640000 LB 0x000f1000 C:\Windows\system32\DDRAW.dll [fFlags=0x0]
16621f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ddraw.dll
16631f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dciman32.dll
16641f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefae50000 LB 0x00008000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0]
16651f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dciman32.dll
16661f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff910000 LB 0x001d7000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0]
16671f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
16681f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd680000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
16691f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
16701f4c.18d4: supR3HardenedDllNotificationCallback: load 000007feff720000 LB 0x000d7000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
16711f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
16721f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefddd0000 LB 0x00203000 C:\Windows\system32\ole32.dll [fFlags=0x0]
16731f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
16741f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd720000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
16751f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\devobj.dll
16761f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dwmapi.dll
16771f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefbb20000 LB 0x00018000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
16781f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dwmapi.dll
16791f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
16801f4c.18d4: supR3HardenedDllNotificationCallback: load 0000000069dd0000 LB 0x002de000 C:\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [fFlags=0x0]
16811f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
16821f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
16831f4c.18d4: supR3HardenedDllNotificationCallback: load 0000000067f90000 LB 0x00969000 C:\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [fFlags=0x0]
16841f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
16851f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefdba0000 LB 0x00097000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0]
16861f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\comdlg32.dll
16871f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
16881f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
16891f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
16901f4c.18d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll)
16911f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll
16921f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef7bd0000 LB 0x000a0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\COMCTL32.dll [fFlags=0x0]
16931f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll [avoiding WinVerifyTrust]
16941f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefe180000 LB 0x00d88000 C:\Windows\system32\SHELL32.dll [fFlags=0x0]
16951f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
16961f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
16971f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefb3e0000 LB 0x0003b000 C:\Windows\system32\WINMM.dll [fFlags=0x0]
16981f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
16991f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winspool.drv
17001f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef94b0000 LB 0x00071000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0]
17011f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winspool.drv
17021f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
17031f4c.18d4: supR3HardenedDllNotificationCallback: load 000000006e480000 LB 0x00105000 C:\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll [fFlags=0x0]
17041f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
17051f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
17061f4c.18d4: supR3HardenedDllNotificationCallback: load 000000006e3a0000 LB 0x000dc000 C:\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll [fFlags=0x0]
17071f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
17081f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000051c pwszName=\Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll
17091f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
17101f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
17111f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5A2FB6B10717AFC03CD9FE6E8F1337A8EA94BF9B
17121f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2864058~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll'
17131f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17141f4c.18d4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll'
17151f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll
17161f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17171f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17181f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17191f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17201f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
17211f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
17221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000717050:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17231f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff380000 'C:\Windows\system32\imm32.dll'
17241f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee4aa0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
17251f4c.18d4: SUPR3HardenedMain: Calling TrustedMain (000007fee4aa1ca0)...
17261f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
17271f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17281f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
17291f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000005bc pwszName=\Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17301f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
17311f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
17321f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=936D45CC7026757A151F62882B557DD75D5FCB21
17331f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\uxtheme.dll'
17341f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17351f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17361f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
17371f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
17381f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\uxtheme.dll)WinVerifyTrust
17391f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17401f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17441f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17451f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17461f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000030bf510:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17471f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17481f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefbbd0000 LB 0x00056000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
17491f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17501f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17511f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17521f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000030bf510:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17531f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17541f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17551f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000030bf460:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17561f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17571f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17581f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000030bf460:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17591f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17601f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dwmapi.dll
17611f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dwmapi.dll (Input=dwmapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17621f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbb20000 'C:\Windows\system32\dwmapi.dll'
17631f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cryptbase.dll
17641f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17651f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd4e0000 'C:\Windows\system32\CRYPTBASE.dll'
17661f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
17671f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17681f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
17691f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll
17701f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17711f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077660000 'C:\Windows\system32\kernel32.dll'
17721f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17731f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17741f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17751f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17761f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17771f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17781f4c.18d4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll)
17791f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17801f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll'
17811f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077780000 'C:\Windows\system32\user32.dll'
17821f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
17831f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17841f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbbd0000 'C:\Windows\system32\uxtheme.dll'
17851f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077780000 'C:\Windows\system32\user32.dll'
17861f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\advapi32.dll'
17871f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\userenv.dll
17881f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17891f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd9e0000 'C:\Windows\system32\userenv.dll'
17901f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll
17911f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
17921f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077660000 'C:\Windows\system32\kernel32.dll'
17931f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000610 pwszName=\Device\HarddiskVolume8\Windows\System32\clbcatq.dll
17941f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
17951f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
17961f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B01469787CE9D8C6FEE98FB207652B88B8494526
17971f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\clbcatq.dll'
17981f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17991f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18001f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
18011f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
18021f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
18031f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
18041f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
18051f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\clbcatq.dll)WinVerifyTrust
18061f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\clbcatq.dll
18071f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18081f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
18091f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18101f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18111f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
18121f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
18131f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
18141f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18151f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
18161f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
18171f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
18181f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
18191f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18201f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18211f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
18221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CLBCatQ.DLL (Input=CLBCatQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000716c60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18231f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\clbcatq.dll
18241f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefeff0000 LB 0x00099000 C:\Windows\system32\CLBCatQ.DLL [fFlags=0x0]
18251f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\clbcatq.dll
18261f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefeff0000 'C:\Windows\system32\CLBCatQ.DLL'
18271f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
18281f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007173b0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18291f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\ADVAPI32.dll'
18301f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cryptsp.dll
18311f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000717290:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18321f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd020000 'C:\Windows\system32\CRYPTSP.dll'
18331f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000630 pwszName=\Device\HarddiskVolume8\Windows\System32\RpcRtRemote.dll
18341f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
18351f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
18361f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DFC4A7C7E103D324218E6EF5D219B953746D6EC1
18371f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\RpcRtRemote.dll'
18381f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18391f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
18401f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\RpcRtRemote.dll)WinVerifyTrust
18411f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\RpcRtRemote.dll
18421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
18441f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\RpcRtRemote.dll (Input=RpcRtRemote.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000717290:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18451f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\RpcRtRemote.dll
18461f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd590000 LB 0x00014000 C:\Windows\system32\RpcRtRemote.dll [fFlags=0x0]
18471f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\RpcRtRemote.dll
18481f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd590000 'C:\Windows\system32\RpcRtRemote.dll'
18491f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
18501f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000030bf5c0:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18511f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff720000 'C:\Windows\system32\oleaut32.dll'
18521f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000654 pwszName=\Device\HarddiskVolume8\Windows\System32\sxs.dll
18531f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
18541f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
18551f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FCAC019C19F878C2B628662A84ECE75A01818BC9
18561f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\sxs.dll'
18571f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18581f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\sxs.dll)WinVerifyTrust
18591f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\sxs.dll
18601f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SXS.DLL (Input=SXS.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000717440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18611f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\sxs.dll
18621f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fefd4f0000 LB 0x00091000 C:\Windows\system32\SXS.DLL [fFlags=0x0]
18631f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\sxs.dll
18641f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd4f0000 'C:\Windows\system32\SXS.DLL'
18651f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\ADVAPI32.dll'
18661f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
18671f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007179e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18681f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff720000 'C:\Windows\system32\OLEAUT32.dll'
18691f4c.18d4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll)
18701f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007177a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
18711f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll'
18721f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdfe0000 'C:\Windows\system32\gdi32.dll'
18731f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
18741f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
18751f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
18761f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
18771f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
18781f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
18791f4c.1780: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
18801f4c.1780: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll)WinVerifyTrust
18811f4c.1780: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
18821f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18831f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18841f4c.1780: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
18851f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
18861f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
18871f4c.1780: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
18881f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
18891f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
18901f4c.1780: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
18911f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
18921f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
18931f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18941f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18951f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
18961f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
18971f4c.1780: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
18981f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
18991f4c.1780: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19001f4c.1780: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007422c0:C:\Program Files\Oracle\VirtualBox;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19011f4c.1780: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
19021f4c.1780: supR3HardenedDllNotificationCallback: load 000007fee4070000 LB 0x004f6000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
19031f4c.1780: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
19041f4c.1780: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee4070000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
19051f4c.1aa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19061f4c.1aa0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
19071f4c.1aa0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll)WinVerifyTrust
19081f4c.1aa0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll
19091f4c.1aa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19101f4c.1aa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19111f4c.1aa0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19121f4c.1aa0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19131f4c.1aa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxPuelMain.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603150:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19141f4c.1aa0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll
19151f4c.1aa0: supR3HardenedDllNotificationCallback: load 000007fefac50000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.DLL [fFlags=0x0]
19161f4c.1aa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.dll
19171f4c.1aa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac50000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxPuelMain.DLL'
19181f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077780000 'C:\Windows\system32\user32.dll'
19191f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
19201f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046031e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19211f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
19221f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\ADVAPI32.dll'
19231f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
19241f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046031e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19251f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefddd0000 'C:\Windows\system32\ole32.dll'
19261f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msctf.dll
19271f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046024b0:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19281f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff800000 'C:\Windows\system32\MSCTF.dll'
19291f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
19301f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046038a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19311f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefddd0000 'C:\Windows\system32\ole32.dll'
19321f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
19331f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046038a0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19341f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff720000 'C:\Windows\system32\OLEAUT32.dll'
19351f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009fc pwszName=\Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
19361f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
19371f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
19381f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=41D7AA7A9ECA84ABF6801478BA3134174B21C472
19391f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll'
19401f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19411f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19421f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'wbemcomn.dll'.
19431f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
19441f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
19451f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
19461f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ws2_32.dll'.
19471f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll)WinVerifyTrust
19481f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
19491f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
19501f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
19511f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
19521f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
19531f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
19541f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19551f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19561f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
19571f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
19581f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
19591f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
19601f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a1c pwszName=\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
19611f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
19621f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
19631f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=03D0A77E5195AA70198FDE6C2FAC2C76FF200674
19641f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll'
19651f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19661f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19671f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
19681f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
19691f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
19701f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ws2_32.dll'.
19711f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll)WinVerifyTrust
19721f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
19731f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19741f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19751f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
19761f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
19771f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
19781f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
19791f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
19801f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
19811f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
19821f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
19831f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19841f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19851f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19861f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19871f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000045ecb30:C:\Windows\system32\wbem;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
19881f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
19891f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef90f0000 LB 0x0000f000 C:\Windows\system32\wbem\wbemprox.dll [fFlags=0x0]
19901f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
19911f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
19921f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef93e0000 LB 0x00086000 C:\Windows\system32\wbemcomn.dll [fFlags=0x0]
19931f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
19941f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef90f0000 'C:\Windows\system32\wbem\wbemprox.dll'
19951f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a44 pwszName=\Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
19961f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
19971f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
19981f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=83AB88529BF28CFF670EA617E0B9C376CFE28B0F
19991f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll'
20001f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20011f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20021f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
20031f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll)WinVerifyTrust
20041f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
20051f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20061f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20071f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20081f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20091f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000045ecb30:C:\Windows\system32\wbem;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
20101f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
20111f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef8b30000 LB 0x00014000 C:\Windows\system32\wbem\wbemsvc.dll [fFlags=0x0]
20121f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
20131f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef8b30000 'C:\Windows\system32\wbem\wbemsvc.dll'
20141f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a48 pwszName=\Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
20151f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
20161f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
20171f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=391AD7580DBA8EA6A4190F5A010E834B8C320D79
20181f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll'
20191f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20201f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20211f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'wbemcomn.dll'.
20221f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
20231f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
20241f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
20251f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ntdsapi.dll'.
20261f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll)WinVerifyTrust
20271f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
20281f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntdsapi.dll'...
20291f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntdsapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\ntdsapi.dll' [rcNtRedir=0xc0150008]
20301f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a18 pwszName=\Device\HarddiskVolume8\Windows\System32\ntdsapi.dll
20311f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
20321f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
20331f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=67C74E045820FCAB3FC8AD5C180928A20C1F11CE
20341f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\ntdsapi.dll'
20351f4c.18d4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20361f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20371f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
20381f4c.18d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ws2_32.dll'.
20391f4c.18d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ntdsapi.dll)WinVerifyTrust
20401f4c.18d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ntdsapi.dll
20411f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20421f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
20431f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
20441f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
20451f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
20461f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
20471f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
20481f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
20491f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
20501f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20511f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20521f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
20531f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
20541f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
20551f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20561f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20571f4c.18d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
20581f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20591f4c.18d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20601f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000045ecb30:C:\Windows\system32\wbem;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
20611f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
20621f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef9210000 LB 0x000e2000 C:\Windows\system32\wbem\fastprox.dll [fFlags=0x0]
20631f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
20641f4c.18d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ntdsapi.dll
20651f4c.18d4: supR3HardenedDllNotificationCallback: load 000007fef91a0000 LB 0x00027000 C:\Windows\system32\NTDSAPI.dll [fFlags=0x0]
20661f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ntdsapi.dll
20671f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef9210000 'C:\Windows\system32\wbem\fastprox.dll'
20681f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff720000 'C:\Windows\system32\OLEAUT32.dll'
20691f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff720000 'C:\Windows\system32\OLEAUT32.DLL'
20701f4c.1c94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
20711f4c.1c94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
20721f4c.1c94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
20731f4c.1c94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll)WinVerifyTrust
20741f4c.1c94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
20751f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
20761f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
20771f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
20781f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
20791f4c.1c94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
20801f4c.1c94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
20811f4c.1c94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
20821f4c.1c94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll)WinVerifyTrust
20831f4c.1c94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll
20841f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20851f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20861f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20871f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20881f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
20891f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
20901f4c.1c94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
20911f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
20921f4c.1c94: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
20931f4c.1c94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
20941f4c.1c94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
20951f4c.1c94: supR3HardenedDllNotificationCallback: load 000007fef21b0000 LB 0x00260000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
20961f4c.1c94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
20971f4c.1c94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll
20981f4c.1c94: supR3HardenedDllNotificationCallback: load 00000000679e0000 LB 0x00109000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
20991f4c.1c94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll
21001f4c.1c94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef21b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
21011f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b14 pwszName=\Device\HarddiskVolume8\Windows\System32\netcfgx.dll
21021f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
21031f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
21041f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B2E2834BA132AEF0C1091DED23D983BBB0CDB980
21051f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\netcfgx.dll'
21061f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21071f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shlwapi.dll'.
21081f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
21091f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
21101f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
21111f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
21121f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
21131f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'nsi.dll'.
21141f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'iphlpapi.dll'.
21151f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\netcfgx.dll)WinVerifyTrust
21161f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\netcfgx.dll
21171f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
21181f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
21191f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b04 pwszName=\Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
21201f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
21211f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
21221f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3BDC72529DA09BA841BE702C4C902C8AA1242642
21231f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL'
21241f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21251f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21261f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'nsi.dll'.
21271f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winnsi.dll'.
21281f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
21291f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL)WinVerifyTrust
21301f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
21311f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
21321f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
21331f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll
21341f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
21351f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
21361f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
21371f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
21381f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
21391f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
21401f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
21411f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
21421f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
21431f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
21441f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
21451f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
21461f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
21471f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21481f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21491f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
21501f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
21511f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000af0 pwszName=\Device\HarddiskVolume8\Windows\System32\winnsi.dll
21521f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
21531f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
21541f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B28F3E0DF5586B9FB3AEAC48E4ECCA0AFB6ABD91
21551f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\winnsi.dll'
21561f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21571f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21581f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
21591f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
21601f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winnsi.dll)WinVerifyTrust
21611f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winnsi.dll
21621f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
21631f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
21641f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll
21651f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21661f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21671f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
21681f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
21691f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll
21701f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21711f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21721f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21731f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21741f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\netcfgx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046fd2d0:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
21751f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\netcfgx.dll
21761f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef5070000 LB 0x00084000 C:\Windows\system32\netcfgx.dll [fFlags=0x0]
21771f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\netcfgx.dll
21781f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
21791f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefa0b0000 LB 0x00027000 C:\Windows\system32\IPHLPAPI.DLL [fFlags=0x0]
21801f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
21811f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winnsi.dll
21821f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefa0a0000 LB 0x0000b000 C:\Windows\system32\WINNSI.DLL [fFlags=0x0]
21831f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winnsi.dll
21841f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef5070000 'C:\Windows\system32\netcfgx.dll'
21851f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
21861f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SETUPAPI.dll (Input=SETUPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
21871f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff910000 'C:\Windows\system32\SETUPAPI.dll'
21881f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21891f4c.2150: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\devrtl.dll)
21901f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\devrtl.dll
21911f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefcab0000 LB 0x00012000 C:\Windows\system32\devrtl.DLL [fFlags=0x0]
21921f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\devrtl.dll [avoiding WinVerifyTrust]
21931f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b24 pwszName=\Device\HarddiskVolume8\Windows\System32\devrtl.dll
21941f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
21951f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
21961f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=445E5B0E9F43B5D56A5B9C4BC3369E3D076ACA1A
21971f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\devrtl.dll'
21981f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21991f4c.2150: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\devrtl.dll'
22001f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll
22011f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22021f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22031f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.dll (Input=WINTRUST.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22041f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\WINTRUST.dll'
22051f4c.e34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22061f4c.e34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
22071f4c.e34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22081f4c.e34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
22091f4c.e34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll)WinVerifyTrust
22101f4c.e34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
22111f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22121f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22131f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22141f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22151f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
22161f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
22171f4c.e34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22181f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22191f4c.e34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22201f4c.e34: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22211f4c.e34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
22221f4c.e34: supR3HardenedDllNotificationCallback: load 000007fefbc60000 LB 0x00009000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
22231f4c.e34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
22241f4c.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbc60000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
22251f4c.22bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22261f4c.22bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22271f4c.22bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll)WinVerifyTrust
22281f4c.22bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
22291f4c.22bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22301f4c.22bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22311f4c.22bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22321f4c.22bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22331f4c.22bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22341f4c.22bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
22351f4c.22bc: supR3HardenedDllNotificationCallback: load 000007fefaa50000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
22361f4c.22bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
22371f4c.22bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaa50000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
22381f4c.2110: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22391f4c.2110: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
22401f4c.2110: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22411f4c.2110: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll)WinVerifyTrust
22421f4c.2110: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
22431f4c.2110: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22441f4c.2110: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22451f4c.2110: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
22461f4c.2110: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
22471f4c.2110: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
22481f4c.2110: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22491f4c.2110: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22501f4c.2110: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22511f4c.2110: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
22521f4c.2110: supR3HardenedDllNotificationCallback: load 000007fefa980000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
22531f4c.2110: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
22541f4c.2110: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa980000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
22551f4c.1ed0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22561f4c.1ed0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
22571f4c.1ed0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22581f4c.1ed0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll)WinVerifyTrust
22591f4c.1ed0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
22601f4c.1ed0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22611f4c.1ed0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22621f4c.1ed0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
22631f4c.1ed0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
22641f4c.1ed0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
22651f4c.1ed0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22661f4c.1ed0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22671f4c.1ed0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22681f4c.1ed0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
22691f4c.1ed0: supR3HardenedDllNotificationCallback: load 000007fefa970000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
22701f4c.1ed0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
22711f4c.1ed0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa970000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
22721f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22731f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22741f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef21b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
22751f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22761f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22771f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
22781f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
22791f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
22801f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll)WinVerifyTrust
22811f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
22821f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22831f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22841f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
22851f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
22861f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22871f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22881f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22891f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22901f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22911f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22921f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
22931f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
22941f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
22951f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef84c0000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
22961f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
22971f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef84c0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL'
22981f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef84c0000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
22991f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23001f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23011f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23021f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
23031f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
23041f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
23051f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
23061f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
23071f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
23081f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
23091f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll)WinVerifyTrust
23101f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll
23111f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
23121f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
23131f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
23141f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23151f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23161f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23171f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
23181f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
23191f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
23201f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
23211f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
23221f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23231f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23241f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
23251f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
23261f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23271f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23281f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23291f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll)WinVerifyTrust
23301f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
23311f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
23321f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
23331f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23341f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23351f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
23361f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
23371f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'newdev.dll'.
23381f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
23391f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll)WinVerifyTrust
23401f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll
23411f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23421f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23431f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
23441f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
23451f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23461f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23471f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23481f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23491f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23501f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'newdev.dll'...
23511f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'newdev.dll' -> '\Device\HarddiskVolume8\Windows\System32\newdev.dll' [rcNtRedir=0xc0150008]
23521f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c90 pwszName=\Device\HarddiskVolume8\Windows\System32\newdev.dll
23531f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
23541f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
23551f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2F4B2CF91DA6B4233E3BF5D2EC9677240BFF983C
23561f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat'; file='\Device\HarddiskVolume8\Windows\System32\newdev.dll'
23571f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
23581f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23591f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
23601f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
23611f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
23621f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'uxtheme.dll'.
23631f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'cfgmgr32.dll'.
23641f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'setupapi.dll'.
23651f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\newdev.dll)WinVerifyTrust
23661f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\newdev.dll
23671f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
23681f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
23691f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
23701f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23711f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23721f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23731f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23741f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23751f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23761f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23771f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23781f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
23791f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
23801f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23811f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23821f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23831f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
23841f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
23851f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
23861f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
23871f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
23881f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
23891f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uxtheme.dll'...
23901f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'uxtheme.dll' -> '\Device\HarddiskVolume8\Windows\System32\uxtheme.dll' [rcNtRedir=0xc0150008]
23911f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23921f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23931f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23941f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23951f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23961f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23971f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23981f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23991f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24001f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll
24011f4c.2150: supR3HardenedDllNotificationCallback: load 000007fee12a0000 LB 0x008ca000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
24021f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll
24031f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll
24041f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef2cd0000 LB 0x0005f000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
24051f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll
24061f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\newdev.dll
24071f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef6400000 LB 0x00051000 C:\Windows\system32\newdev.dll [fFlags=0x0]
24081f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\newdev.dll
24091f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24101f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef8e70000 LB 0x00034000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
24111f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24121f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee12a0000 'C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL'
24131f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24141f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24151f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24161f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef8120000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
24171f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24181f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef8120000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxHostWebcam.DLL'
24191f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
24201f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24211f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
24221f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee4070000 'C:\Program Files\Oracle\VirtualBox/VBoxC.DLL'
24231f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24241f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24251f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24261f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef8e70000 'C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL'
24271f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24281f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24291f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll)WinVerifyTrust
24301f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
24311f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24321f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24331f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24341f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24351f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24361f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
24371f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef84e0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
24381f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
24391f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef84e0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxEhciR3.DLL'
24401f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24411f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24421f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll)WinVerifyTrust
24431f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
24441f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24451f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24461f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24471f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24481f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24491f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
24501f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef84c0000 LB 0x00016000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
24511f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
24521f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef84c0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbCardReaderR3.DLL'
24531f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24541f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24551f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll)WinVerifyTrust
24561f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
24571f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24581f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24591f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24601f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24611f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24621f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
24631f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef77b0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
24641f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
24651f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef77b0000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VBoxUsbWebcamR3.DLL'
24661f4c.21ac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24671f4c.21ac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
24681f4c.21ac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24691f4c.21ac: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll)WinVerifyTrust
24701f4c.21ac: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
24711f4c.21ac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24721f4c.21ac: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24731f4c.21ac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
24741f4c.21ac: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
24751f4c.21ac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
24761f4c.21ac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24771f4c.21ac: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24781f4c.21ac: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24791f4c.21ac: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
24801f4c.21ac: supR3HardenedDllNotificationCallback: load 000007fefa370000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
24811f4c.21ac: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
24821f4c.21ac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa370000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
24831f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24841f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24851f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll)WinVerifyTrust
24861f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
24871f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24881f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24891f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24901f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24911f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
24921f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
24931f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefaa30000 LB 0x00008000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
24941f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
24951f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaa30000 'C:\Program Files\Oracle\VirtualBox/ExtensionPacks/Oracle_VM_VirtualBox_Extension_Pack/win.amd64/VDPluginCrypt.DLL'
24961f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000da0 pwszName=\Device\HarddiskVolume8\Windows\System32\dsound.dll
24971f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
24981f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
24991f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F6C3E3D9F8B48D816E52C31576FFFD4AF86AB813
25001f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\dsound.dll'
25011f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25021f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25031f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
25041f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
25051f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
25061f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winmm.dll'.
25071f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'powrprof.dll'.
25081f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\dsound.dll)WinVerifyTrust
25091f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dsound.dll
25101f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'powrprof.dll'...
25111f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'powrprof.dll' -> '\Device\HarddiskVolume8\Windows\System32\powrprof.dll' [rcNtRedir=0xc0150008]
25121f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000da4 pwszName=\Device\HarddiskVolume8\Windows\System32\powrprof.dll
25131f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
25141f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
25151f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E0B7DE18787DB24DAD3580634869A9A8FF4AB48F
25161f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\powrprof.dll'
25171f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25181f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25191f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
25201f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
25211f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\powrprof.dll)WinVerifyTrust
25221f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\powrprof.dll
25231f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
25241f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
25251f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
25261f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
25271f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
25281f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25291f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25301f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25311f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25321f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25331f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25341f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
25351f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
25361f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
25371f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25381f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25391f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25401f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25411f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046aed30:C:\Windows\System32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
25421f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
25431f4c.2150: supR3HardenedDllNotificationCallback: load 000007fef2ee0000 LB 0x00088000 C:\Windows\System32\dsound.dll [fFlags=0x0]
25441f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
25451f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\powrprof.dll
25461f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefbf70000 LB 0x0002c000 C:\Windows\System32\POWRPROF.dll [fFlags=0x0]
25471f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\powrprof.dll
25481f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
25491f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603f60:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
25501f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef2ee0000 'C:\Windows\System32\dsound.dll'
25511f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef2ee0000 'C:\Windows\System32\dsound.dll'
25521f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000dc4 pwszName=\Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
25531f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
25541f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
25551f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=704F97298D44B8146C54067788F597E0BF365197
25561f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll'
25571f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25581f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25591f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
25601f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
25611f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'propsys.dll'.
25621f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll)WinVerifyTrust
25631f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
25641f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
25651f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume8\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
25661f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000dd4 pwszName=\Device\HarddiskVolume8\Windows\System32\propsys.dll
25671f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
25681f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
25691f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6A1594E841359779EF7EA7EBCF775D89F55388D3
25701f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\propsys.dll'
25711f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25721f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25731f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
25741f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'.
25751f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
25761f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
25771f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\propsys.dll)WinVerifyTrust
25781f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\propsys.dll
25791f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25801f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25811f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25821f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25831f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25841f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25851f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25861f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25871f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25881f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25891f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
25901f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
25911f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
25921f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
25931f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
25941f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
25951f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25961f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25971f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046aebd0:C:\Windows\System32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
25981f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
25991f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefbf20000 LB 0x0004b000 C:\Windows\System32\MMDevApi.dll [fFlags=0x0]
26001f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
26011f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\propsys.dll
26021f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefbc80000 LB 0x0012c000 C:\Windows\System32\PROPSYS.dll [fFlags=0x0]
26031f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\propsys.dll
26041f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef10000 'C:\Windows\system32\ADVAPI32.dll'
26051f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbf20000 'C:\Windows\System32\MMDevApi.dll'
26061f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefddd0000 'C:\Windows\system32\ole32.dll'
26071f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
26081f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SETUPAPI.dll (Input=SETUPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603ae0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26091f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff910000 'C:\Windows\system32\SETUPAPI.dll'
26101f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
26111f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26121f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff690000 'C:\Windows\system32\SHLWAPI.dll'
26131f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
26141f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26151f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbf20000 'C:\Windows\system32\MMDEVAPI.DLL'
26161f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefddd0000 'C:\Windows\system32\ole32.dll'
26171f4c.1df4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
26181f4c.1df4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CFGMGR32.dll (Input=CFGMGR32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26191f4c.1df4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd680000 'C:\Windows\system32\CFGMGR32.dll'
26201f4c.2390: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e1c pwszName=\Device\HarddiskVolume8\Windows\System32\AudioSes.dll
26211f4c.2390: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
26221f4c.2390: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
26231f4c.2390: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E7B264B3670B74C7A34AEDBA5E942385CDC0D1C9
26241f4c.2390: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB3005607~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume8\Windows\System32\AudioSes.dll'
26251f4c.2390: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26261f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26271f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
26281f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
26291f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
26301f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
26311f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
26321f4c.2390: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'.
26331f4c.2390: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\AudioSes.dll)WinVerifyTrust
26341f4c.2390: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
26351f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
26361f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
26371f4c.2390: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
26381f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26391f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26401f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26411f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
26421f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
26431f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
26441f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
26451f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
26461f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
26471f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
26481f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26491f4c.2390: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26501f4c.2390: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26511f4c.2390: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
26521f4c.2390: supR3HardenedDllNotificationCallback: load 000007fefb0f0000 LB 0x0004f000 C:\Windows\system32\AUDIOSES.DLL [fFlags=0x0]
26531f4c.2390: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
26541f4c.2390: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0f0000 'C:\Windows\system32\AUDIOSES.DLL'
26551f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
26561f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26571f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
26581f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26591f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-WIN-Service-Management-L1-1-0.dll'
26601f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26611f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda00000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
26621f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe050000 'C:\Windows\system32\RPCRT4.dll'
26631f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
26641f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MMDevAPI.DLL (Input=MMDevAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
26651f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbf20000 'C:\Windows\system32\MMDevAPI.DLL'
26661f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e6c pwszName=\Device\HarddiskVolume8\Windows\System32\wdmaud.drv
26671f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
26681f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
26691f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4B64306F5558D2DEC53CF11AAF17F02438929FDD
26701f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\wdmaud.drv'
26711f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26721f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26731f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
26741f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
26751f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
26761f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'.
26771f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ksuser.dll'.
26781f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'.
26791f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'avrt.dll'.
26801f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wdmaud.drv)WinVerifyTrust
26811f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
26821f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
26831f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
26841f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e70 pwszName=\Device\HarddiskVolume8\Windows\System32\avrt.dll
26851f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
26861f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
26871f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1362C343929DD08AB918B38DE195D1A11B1D1365
26881f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\avrt.dll'
26891f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26901f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\avrt.dll)WinVerifyTrust
26911f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\avrt.dll
26921f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
26931f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
26941f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
26951f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
26961f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume8\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
26971f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e74 pwszName=\Device\HarddiskVolume8\Windows\System32\ksuser.dll
26981f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
26991f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
27001f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EC3873F9ACBE279185D3540F02128F42D21D0856
27011f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume8\Windows\System32\ksuser.dll'
27021f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27031f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27041f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ksuser.dll)WinVerifyTrust
27051f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ksuser.dll
27061f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
27071f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
27081f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
27091f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27101f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27111f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
27121f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
27131f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
27141f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
27151f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27161f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27171f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27181f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27191f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27201f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27211f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefb390000 LB 0x0003b000 C:\Windows\system32\wdmaud.drv [fFlags=0x0]
27221f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27231f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ksuser.dll
27241f4c.2150: supR3HardenedDllNotificationCallback: load 0000000075250000 LB 0x00006000 C:\Windows\system32\ksuser.dll [fFlags=0x0]
27251f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ksuser.dll
27261f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\avrt.dll
27271f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefbef0000 LB 0x00009000 C:\Windows\system32\AVRT.dll [fFlags=0x0]
27281f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\avrt.dll
27291f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27301f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27311f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27321f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27331f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27341f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603e40:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27351f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27361f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27371f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603db0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27381f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27391f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27401f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603db0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27411f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27421f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27431f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603db0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27441f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27451f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
27461f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603a50:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
27471f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27481f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27491f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27501f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27511f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb390000 'C:\Windows\system32\wdmaud.drv'
27521f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e78 pwszName=\Device\HarddiskVolume8\Windows\System32\msacm32.drv
27531f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
27541f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
27551f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=522563F5384AD4C93CF5CF4EEA899D3267552328
27561f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\msacm32.drv'
27571f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27581f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27591f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
27601f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
27611f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msacm32.dll'.
27621f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'mmdevapi.dll'.
27631f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msacm32.drv)WinVerifyTrust
27641f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msacm32.drv
27651f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
27661f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
27671f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
27681f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
27691f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume8\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
27701f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e90 pwszName=\Device\HarddiskVolume8\Windows\System32\msacm32.dll
27711f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
27721f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
27731f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DCA0A8AEE81B82C402AA72A300B2C8D2DC17C1DA
27741f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume8\Windows\System32\msacm32.dll'
27751f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27761f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27771f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
27781f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
27791f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
27801f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'.
27811f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msacm32.dll)WinVerifyTrust
27821f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msacm32.dll
27831f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
27841f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
27851f4c.2150: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
27861f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27871f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27881f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27891f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27901f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
27911f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
27921f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
27931f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
27941f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27951f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27961f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
27971f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
27981f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27991f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28001f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28011f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28021f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefaf80000 LB 0x0000a000 C:\Windows\system32\msacm32.drv [fFlags=0x0]
28031f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28041f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.dll
28051f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefaf60000 LB 0x00018000 C:\Windows\system32\MSACM32.dll [fFlags=0x0]
28061f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.dll
28071f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28081f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28091f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28101f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28111f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28121f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28131f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28141f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28151f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28161f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28171f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28181f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28191f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28201f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28211f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28221f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28231f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
28241f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28251f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28261f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28271f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28281f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf80000 'C:\Windows\system32\msacm32.drv'
28291f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e80 pwszName=\Device\HarddiskVolume8\Windows\System32\midimap.dll
28301f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000006e5980
28311f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000006e5980
28321f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=43116C5C719A4751DA70B12932084D73D7AACEA3
28331f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume8\Windows\System32\midimap.dll'
28341f4c.2150: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28351f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28361f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
28371f4c.2150: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
28381f4c.2150: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\midimap.dll)WinVerifyTrust
28391f4c.2150: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\midimap.dll
28401f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
28411f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
28421f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
28431f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
28441f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28451f4c.2150: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28461f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28471f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
28481f4c.2150: supR3HardenedDllNotificationCallback: load 000007fefaf50000 LB 0x00009000 C:\Windows\system32\midimap.dll [fFlags=0x0]
28491f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
28501f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf50000 'C:\Windows\system32\midimap.dll'
28511f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
28521f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28531f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf50000 'C:\Windows\system32\midimap.dll'
28541f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
28551f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28561f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf50000 'C:\Windows\system32\midimap.dll'
28571f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
28581f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28591f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefaf50000 'C:\Windows\system32\midimap.dll'
28601f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28611f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28621f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28631f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28641f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefddd0000 'C:\Windows\system32\ole32.dll'
28651f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28661f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
28671f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28681f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28691f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28701f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb3e0000 'C:\Windows\system32\winmm.dll'
28711f4c.b24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
28721f4c.b24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\audioses.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000046fe1f0:C:\Windows\System32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28731f4c.b24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0f0000 'C:\Windows\System32\audioses.dll'
28741f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef21b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
28751f4c.2150: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll
28761f4c.2150: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32/kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004603b70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28771f4c.2150: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll
28781f4c.2150: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077660000 'C:\Windows\system32/kernel32.dll'
28791f4c.1c94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff720000 'C:\Windows\system32\OLEAUT32.dll'
28801f4c.18d4: supR3HardenedMonitor_LdrLoadDll: 'C:\Windows\system32\comctl32.dll' -> 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll' [redir]
28811f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll
28821f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll (Input=C:\Windows\system32\comctl32.dll, rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000007179e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28831f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7bd0000 'C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll'
28841f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
28851f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007179e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28861f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28871f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
28881f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007179e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28891f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28901f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
28911f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007179e0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
28921f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28931f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28941f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28951f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28961f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28971f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28981f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
28991f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
29001f4c.18d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
29011f4c.18d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000717830:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
29021f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
29031f4c.18d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe180000 'C:\Windows\system32\shell32.dll'
29041f4c.21ac: supR3HardenedDllNotificationCallback: Unload 000007fefa370000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
29051f4c.1ed0: supR3HardenedDllNotificationCallback: Unload 000007fefa970000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
29061f4c.2110: supR3HardenedDllNotificationCallback: Unload 000007fefa980000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
29071f4c.22bc: supR3HardenedDllNotificationCallback: Unload 000007fefaa50000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
29081f4c.e34: supR3HardenedDllNotificationCallback: Unload 000007fefbc60000 LB 0x00009000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
29091f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef77b0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
29101f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef84c0000 LB 0x00016000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
29111f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef84e0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
29121f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef8120000 LB 0x00031000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
29131f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fee12a0000 LB 0x008ca000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
29141f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef8e70000 LB 0x00034000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
29151f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef2cd0000 LB 0x0005f000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
29161f4c.2150: supR3HardenedDllNotificationCallback: Unload 000007fef6400000 LB 0x00051000 C:\Windows\system32\newdev.dll [flags=0x0]
29171f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fefac50000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMain.DLL [flags=0x0]
29181f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fef5070000 LB 0x00084000 C:\Windows\system32\netcfgx.dll [flags=0x0]
29191f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fefa0b0000 LB 0x00027000 C:\Windows\system32\IPHLPAPI.DLL [flags=0x0]
29201f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fefa0a0000 LB 0x0000b000 C:\Windows\system32\WINNSI.DLL [flags=0x0]
29211f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fef9210000 LB 0x000e2000 C:\Windows\system32\wbem\fastprox.dll [flags=0x0]
29221f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fef91a0000 LB 0x00027000 C:\Windows\system32\NTDSAPI.dll [flags=0x0]
29231f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fef8b30000 LB 0x00014000 C:\Windows\system32\wbem\wbemsvc.dll [flags=0x0]
29241f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fef90f0000 LB 0x0000f000 C:\Windows\system32\wbem\wbemprox.dll [flags=0x0]
29251f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fef93e0000 LB 0x00086000 C:\Windows\system32\wbemcomn.dll [flags=0x0]
29261f4c.18d4: supR3HardenedDllNotificationCallback: Unload 000007fee4070000 LB 0x004f6000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
29271f4c.18d4: Terminating the normal way: rcExit=0
29281e20.1ae4: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 96290 ms, the end);
29292088.17e0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 96629 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy