VirtualBox

Ticket #14678: VBoxStartup.log

File VBoxStartup.log, 316.0 KB (added by yanfu, 9 years ago)

VBoxStartup log

Line 
14f8.3dc: Log file opened: 5.0.0r101573 g_hStartupLog=00000010 g_uNtVerCombined=0x611db110
24f8.3dc: \SystemRoot\System32\ntdll.dll:
34f8.3dc: CreationTime: 2015-09-08T21:40:30.504482300Z
44f8.3dc: LastWriteTime: 2015-07-22T17:54:12.389582600Z
54f8.3dc: ChangeTime: 2015-09-09T02:22:00.011506800Z
64f8.3dc: FileAttributes: 0x20
74f8.3dc: Size: 0x13f600
84f8.3dc: NT Headers: 0xd0
94f8.3dc: Timestamp: 0x55afd7a8
104f8.3dc: Machine: 0x14c - i386
114f8.3dc: Timestamp: 0x55afd7a8
124f8.3dc: Image Version: 6.1
134f8.3dc: SizeOfImage: 0x141000 (1314816)
144f8.3dc: Resource Dir: 0xe1000 LB 0x5a028
154f8.3dc: ProductName: Microsoft® Windows® Operating System
164f8.3dc: ProductVersion: 6.1.7601.18939
174f8.3dc: FileVersion: 6.1.7601.18939 (win7sp1_gdr.150722-0600)
184f8.3dc: FileDescription: NT Layer DLL
194f8.3dc: \SystemRoot\System32\kernel32.dll:
204f8.3dc: CreationTime: 2015-09-04T02:22:04.190820800Z
214f8.3dc: LastWriteTime: 2015-05-09T03:13:42.222000000Z
224f8.3dc: ChangeTime: 2015-09-05T08:17:55.571543000Z
234f8.3dc: FileAttributes: 0x20
244f8.3dc: Size: 0xd4000
254f8.3dc: NT Headers: 0xf0
264f8.3dc: Timestamp: 0x554d7aff
274f8.3dc: Machine: 0x14c - i386
284f8.3dc: Timestamp: 0x554d7aff
294f8.3dc: Image Version: 6.1
304f8.3dc: SizeOfImage: 0xd4000 (868352)
314f8.3dc: Resource Dir: 0xc7000 LB 0x528
324f8.3dc: ProductName: Microsoft® Windows® Operating System
334f8.3dc: ProductVersion: 6.1.7601.18847
344f8.3dc: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
354f8.3dc: FileDescription: Windows NT BASE API Client DLL
364f8.3dc: \SystemRoot\System32\KernelBase.dll:
374f8.3dc: CreationTime: 2015-09-04T02:22:04.140818000Z
384f8.3dc: LastWriteTime: 2015-05-09T03:13:42.222000000Z
394f8.3dc: ChangeTime: 2015-09-05T08:17:55.592544200Z
404f8.3dc: FileAttributes: 0x20
414f8.3dc: Size: 0x47a00
424f8.3dc: NT Headers: 0xe0
434f8.3dc: Timestamp: 0x554d7b00
444f8.3dc: Machine: 0x14c - i386
454f8.3dc: Timestamp: 0x554d7b00
464f8.3dc: Image Version: 6.1
474f8.3dc: SizeOfImage: 0x4b000 (307200)
484f8.3dc: Resource Dir: 0x47000 LB 0x530
494f8.3dc: ProductName: Microsoft® Windows® Operating System
504f8.3dc: ProductVersion: 6.1.7601.18847
514f8.3dc: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
524f8.3dc: FileDescription: Windows NT BASE API Client DLL
534f8.3dc: \SystemRoot\System32\apisetschema.dll:
544f8.3dc: CreationTime: 2015-09-08T21:40:29.711436900Z
554f8.3dc: LastWriteTime: 2015-07-22T17:42:39.529000000Z
564f8.3dc: ChangeTime: 2015-09-09T02:22:00.013506900Z
574f8.3dc: FileAttributes: 0x20
584f8.3dc: Size: 0x1a00
594f8.3dc: NT Headers: 0xc0
604f8.3dc: Timestamp: 0x55afd647
614f8.3dc: Machine: 0x14c - i386
624f8.3dc: Timestamp: 0x55afd647
634f8.3dc: Image Version: 6.1
644f8.3dc: SizeOfImage: 0x50000 (327680)
654f8.3dc: Resource Dir: 0x30000 LB 0x3f8
664f8.3dc: ProductName: Microsoft® Windows® Operating System
674f8.3dc: ProductVersion: 6.1.7601.18939
684f8.3dc: FileVersion: 6.1.7601.18939 (win7sp1_gdr.150722-0600)
694f8.3dc: FileDescription: ApiSet Schema DLL
704f8.3dc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
714f8.3dc: supR3HardenedWinFindAdversaries: 0x0
724f8.3dc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
734f8.3dc: Calling main()
744f8.3dc: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
754f8.3dc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
764f8.3dc: SUPR3HardenedMain: Respawn #1
774f8.3dc: System32: \Device\HarddiskVolume2\Windows\System32
784f8.3dc: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
794f8.3dc: KnownDllPath: C:\Windows\system32
804f8.3dc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
814f8.3dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
824f8.3dc: supR3HardNtEnableThreadCreation:
834f8.3dc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77173911 pvNtTerminateThread=771569c0
844f8.3dc: supR3HardenedWinDoReSpawn(1): New child 898.89c [kernel32].
854f8.3dc: supR3HardNtChildGatherData: PebBaseAddress=7ffd4000 cbPeb=0x248
864f8.3dc: supR3HardNtPuChFindNtdll: uNtDllParentAddr=77110000 uNtDllChildAddr=77110000
874f8.3dc: supR3HardenedWinSetupChildInit: uLdrInitThunk=77173911
884f8.3dc: supR3HardenedWinSetupChildInit: Start child.
894f8.3dc: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 2 ms.
904f8.3dc: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 0 sleeps
914f8.3dc: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
924f8.3dc: *00000000-fffeffff 0x0001/0x0000 0x0000000
934f8.3dc: *00010000-fffeffff 0x0004/0x0004 0x0020000
944f8.3dc: *00030000-0002bfff 0x0002/0x0002 0x0040000
954f8.3dc: 00034000-00027fff 0x0001/0x0000 0x0000000
964f8.3dc: *00040000-0003efff 0x0004/0x0004 0x0020000
974f8.3dc: 00041000-ffec1fff 0x0001/0x0000 0x0000000
984f8.3dc: *001c0000-000c2fff 0x0000/0x0004 0x0020000
994f8.3dc: 002bd000-002bafff 0x0104/0x0004 0x0020000
1004f8.3dc: 002bf000-002bdfff 0x0004/0x0004 0x0020000
1014f8.3dc: 002c0000-ff6dffff 0x0001/0x0000 0x0000000
1024f8.3dc: *00ea0000-00ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1034f8.3dc: 00ea1000-00f16fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1044f8.3dc: 00f17000-00f17fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1054f8.3dc: 00f18000-00f51fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1064f8.3dc: 00f52000-00f52fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1074f8.3dc: 00f53000-00f53fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1084f8.3dc: 00f54000-00f54fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1094f8.3dc: 00f55000-00f55fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1104f8.3dc: 00f56000-00f57fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1114f8.3dc: 00f58000-00f5afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1124f8.3dc: 00f5b000-00f9efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
1134f8.3dc: 00f9f000-8ae2dfff 0x0001/0x0000 0x0000000
1144f8.3dc: *77110000-77110fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1154f8.3dc: 77111000-771e7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1164f8.3dc: 771e8000-771edfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1174f8.3dc: 771ee000-771eefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1184f8.3dc: 771ef000-771f0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1194f8.3dc: 771f1000-77250fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1204f8.3dc: 77251000-77131fff 0x0001/0x0000 0x0000000
1214f8.3dc: *77370000-77370fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
1224f8.3dc: 77371000-6e731fff 0x0001/0x0000 0x0000000
1234f8.3dc: *7ffb0000-7ff8cfff 0x0002/0x0002 0x0040000
1244f8.3dc: 7ffd3000-7ffd1fff 0x0001/0x0000 0x0000000
1254f8.3dc: *7ffd4000-7ffd2fff 0x0004/0x0004 0x0020000
1264f8.3dc: 7ffd5000-7ffcafff 0x0001/0x0000 0x0000000
1274f8.3dc: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
1284f8.3dc: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
1294f8.3dc: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
1304f8.3dc: apisetschema.dll: timestamp 0x55afd647 (rc=VINF_SUCCESS)
1314f8.3dc: VirtualBox.exe: timestamp 0x559e4a2c (rc=VINF_SUCCESS)
1324f8.3dc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1334f8.3dc: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
1344f8.3dc: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
1354f8.3dc: supR3HardNtChildPurify: Done after 304 ms and 0 fixes (loop #0).
136898.89c: Log file opened: 5.0.0r101573 g_hStartupLog=00000004 g_uNtVerCombined=0x611db110
137898.89c: supR3HardenedVmProcessInit: uNtDllAddr=77110000
138898.89c: ntdll.dll: timestamp 0x55afd7a8 (rc=VINF_SUCCESS)
139898.89c: New simple heap: #1 002c0000 LB 0x400000 (for 1314816 allocation)
1404f8.3dc: supR3HardNtEnableThreadCreation:
141898.89c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
142898.89c: System32: \Device\HarddiskVolume2\Windows\System32
143898.89c: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
144898.89c: KnownDllPath: C:\Windows\system32
145898.89c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
146898.89c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
147898.89c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
148898.89c: Registered Dll notification callback with NTDLL.
149898.89c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
150898.89c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
151898.89c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00000000:<flags> [calling]
152898.89c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
153898.89c: supR3HardenedDllNotificationCallback: load 75ae0000 LB 0x000d4000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
154898.89c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
155898.89c: supR3HardenedDllNotificationCallback: load 75120000 LB 0x0004b000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
156898.89c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
157898.89c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
158898.89c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ae0000 'C:\Windows\system32\kernel32.dll'
159898.89c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77173911 pvNtTerminateThread=771569c0
1604f8.3dc: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 37 ms.
161898.89c: \SystemRoot\System32\ntdll.dll:
162898.89c: CreationTime: 2015-09-08T21:40:30.504482300Z
163898.89c: LastWriteTime: 2015-07-22T17:54:12.389582600Z
164898.89c: ChangeTime: 2015-09-09T02:22:00.011506800Z
165898.89c: FileAttributes: 0x20
166898.89c: Size: 0x13f600
167898.89c: NT Headers: 0xd0
168898.89c: Timestamp: 0x55afd7a8
169898.89c: Machine: 0x14c - i386
170898.89c: Timestamp: 0x55afd7a8
171898.89c: Image Version: 6.1
172898.89c: SizeOfImage: 0x141000 (1314816)
173898.89c: Resource Dir: 0xe1000 LB 0x5a028
174898.89c: ProductName: Microsoft® Windows® Operating System
175898.89c: ProductVersion: 6.1.7601.18939
176898.89c: FileVersion: 6.1.7601.18939 (win7sp1_gdr.150722-0600)
177898.89c: FileDescription: NT Layer DLL
178898.89c: \SystemRoot\System32\kernel32.dll:
179898.89c: CreationTime: 2015-09-04T02:22:04.190820800Z
180898.89c: LastWriteTime: 2015-05-09T03:13:42.222000000Z
181898.89c: ChangeTime: 2015-09-05T08:17:55.571543000Z
182898.89c: FileAttributes: 0x20
183898.89c: Size: 0xd4000
184898.89c: NT Headers: 0xf0
185898.89c: Timestamp: 0x554d7aff
186898.89c: Machine: 0x14c - i386
187898.89c: Timestamp: 0x554d7aff
188898.89c: Image Version: 6.1
189898.89c: SizeOfImage: 0xd4000 (868352)
190898.89c: Resource Dir: 0xc7000 LB 0x528
191898.89c: ProductName: Microsoft® Windows® Operating System
192898.89c: ProductVersion: 6.1.7601.18847
193898.89c: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
194898.89c: FileDescription: Windows NT BASE API Client DLL
195898.89c: \SystemRoot\System32\KernelBase.dll:
196898.89c: CreationTime: 2015-09-04T02:22:04.140818000Z
197898.89c: LastWriteTime: 2015-05-09T03:13:42.222000000Z
198898.89c: ChangeTime: 2015-09-05T08:17:55.592544200Z
199898.89c: FileAttributes: 0x20
200898.89c: Size: 0x47a00
201898.89c: NT Headers: 0xe0
202898.89c: Timestamp: 0x554d7b00
203898.89c: Machine: 0x14c - i386
204898.89c: Timestamp: 0x554d7b00
205898.89c: Image Version: 6.1
206898.89c: SizeOfImage: 0x4b000 (307200)
207898.89c: Resource Dir: 0x47000 LB 0x530
208898.89c: ProductName: Microsoft® Windows® Operating System
209898.89c: ProductVersion: 6.1.7601.18847
210898.89c: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
211898.89c: FileDescription: Windows NT BASE API Client DLL
212898.89c: \SystemRoot\System32\apisetschema.dll:
213898.89c: CreationTime: 2015-09-08T21:40:29.711436900Z
214898.89c: LastWriteTime: 2015-07-22T17:42:39.529000000Z
215898.89c: ChangeTime: 2015-09-09T02:22:00.013506900Z
216898.89c: FileAttributes: 0x20
217898.89c: Size: 0x1a00
218898.89c: NT Headers: 0xc0
219898.89c: Timestamp: 0x55afd647
220898.89c: Machine: 0x14c - i386
221898.89c: Timestamp: 0x55afd647
222898.89c: Image Version: 6.1
223898.89c: SizeOfImage: 0x50000 (327680)
224898.89c: Resource Dir: 0x30000 LB 0x3f8
225898.89c: ProductName: Microsoft® Windows® Operating System
226898.89c: ProductVersion: 6.1.7601.18939
227898.89c: FileVersion: 6.1.7601.18939 (win7sp1_gdr.150722-0600)
228898.89c: FileDescription: ApiSet Schema DLL
229898.89c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
230898.89c: supR3HardenedWinFindAdversaries: 0x0
231898.89c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
232898.89c: Calling main()
233898.89c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
234898.89c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
235898.89c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
236898.89c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
237898.89c: SUPR3HardenedMain: Respawn #2
238898.89c: supR3HardNtEnableThreadCreation:
239898.89c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)
240898.89c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
241898.89c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00000000:<flags> [calling]
242898.89c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
243898.89c: supR3HardenedDllNotificationCallback: load 74fc0000 LB 0x0004c000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
244898.89c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
245898.89c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74fc0000 'C:\Windows\system32\apphelp.dll'
246898.89c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77173911 pvNtTerminateThread=771569c0
247898.89c: supR3HardenedWinDoReSpawn(2): New child cac.82c [kernel32].
248898.89c: supR3HardNtChildGatherData: PebBaseAddress=7ffd4000 cbPeb=0x248
249898.89c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=77110000 uNtDllChildAddr=77110000
250898.89c: supR3HardenedWinSetupChildInit: uLdrInitThunk=77173911
251898.89c: supR3HardenedWinSetupChildInit: Start child.
252898.89c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 3 ms.
253898.89c: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 0 sleeps
254898.89c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
255898.89c: *00000000-fffeffff 0x0001/0x0000 0x0000000
256898.89c: *00010000-fffeffff 0x0004/0x0004 0x0020000
257898.89c: *00030000-0002bfff 0x0002/0x0002 0x0040000
258898.89c: 00034000-00027fff 0x0001/0x0000 0x0000000
259898.89c: *00040000-0003efff 0x0004/0x0004 0x0020000
260898.89c: 00041000-fff61fff 0x0001/0x0000 0x0000000
261898.89c: *00120000-00022fff 0x0000/0x0004 0x0020000
262898.89c: 0021d000-0021afff 0x0104/0x0004 0x0020000
263898.89c: 0021f000-0021dfff 0x0004/0x0004 0x0020000
264898.89c: 00220000-ff59ffff 0x0001/0x0000 0x0000000
265898.89c: *00ea0000-00ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
266898.89c: 00ea1000-00f16fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
267898.89c: 00f17000-00f17fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
268898.89c: 00f18000-00f51fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
269898.89c: 00f52000-00f52fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
270898.89c: 00f53000-00f53fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
271898.89c: 00f54000-00f54fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
272898.89c: 00f55000-00f55fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
273898.89c: 00f56000-00f57fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
274898.89c: 00f58000-00f5afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
275898.89c: 00f5b000-00f9efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
276898.89c: 00f9f000-8ae2dfff 0x0001/0x0000 0x0000000
277898.89c: *77110000-77110fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
278898.89c: 77111000-771e7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
279898.89c: 771e8000-771edfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
280898.89c: 771ee000-771eefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
281898.89c: 771ef000-771f0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
282898.89c: 771f1000-77250fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
283898.89c: 77251000-77131fff 0x0001/0x0000 0x0000000
284898.89c: *77370000-77370fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
285898.89c: 77371000-6e731fff 0x0001/0x0000 0x0000000
286898.89c: *7ffb0000-7ff8cfff 0x0002/0x0002 0x0040000
287898.89c: 7ffd3000-7ffd1fff 0x0001/0x0000 0x0000000
288898.89c: *7ffd4000-7ffd2fff 0x0004/0x0004 0x0020000
289898.89c: 7ffd5000-7ffcafff 0x0001/0x0000 0x0000000
290898.89c: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
291898.89c: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
292898.89c: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
293898.89c: apisetschema.dll: timestamp 0x55afd647 (rc=VINF_SUCCESS)
294898.89c: VirtualBox.exe: timestamp 0x559e4a2c (rc=VINF_SUCCESS)
295898.89c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
296898.89c: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
297898.89c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
298898.89c: supR3HardNtChildPurify: Done after 303 ms and 0 fixes (loop #0).
299cac.82c: Log file opened: 5.0.0r101573 g_hStartupLog=00000004 g_uNtVerCombined=0x611db110
300cac.82c: supR3HardenedVmProcessInit: uNtDllAddr=77110000
301cac.82c: ntdll.dll: timestamp 0x55afd7a8 (rc=VINF_SUCCESS)
302cac.82c: New simple heap: #1 00320000 LB 0x400000 (for 1314816 allocation)
303898.89c: supR3HardenedEarlyCompact: Removed heap 1 (0x2c0000 LB 0x400000)
304898.89c: supR3HardNtEnableThreadCreation:
305cac.82c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
306cac.82c: System32: \Device\HarddiskVolume2\Windows\System32
307cac.82c: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
308cac.82c: KnownDllPath: C:\Windows\system32
309cac.82c: supR3HardenedVmProcessInit: Opening vboxdrv...
310cac.82c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
311cac.82c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
312cac.82c: Registered Dll notification callback with NTDLL.
313cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
314cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
315cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00000000:<flags> [calling]
316cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
317cac.82c: supR3HardenedDllNotificationCallback: load 75ae0000 LB 0x000d4000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
318cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
319cac.82c: supR3HardenedDllNotificationCallback: load 75120000 LB 0x0004b000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
320cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
321cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
322cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ae0000 'C:\Windows\system32\kernel32.dll'
323cac.82c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77173911 pvNtTerminateThread=771569c0
324898.89c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 39 ms.
325cac.82c: \SystemRoot\System32\ntdll.dll:
326cac.82c: CreationTime: 2015-09-08T21:40:30.504482300Z
327cac.82c: LastWriteTime: 2015-07-22T17:54:12.389582600Z
328cac.82c: ChangeTime: 2015-09-09T02:22:00.011506800Z
329cac.82c: FileAttributes: 0x20
330cac.82c: Size: 0x13f600
331cac.82c: NT Headers: 0xd0
332cac.82c: Timestamp: 0x55afd7a8
333cac.82c: Machine: 0x14c - i386
334cac.82c: Timestamp: 0x55afd7a8
335cac.82c: Image Version: 6.1
336cac.82c: SizeOfImage: 0x141000 (1314816)
337cac.82c: Resource Dir: 0xe1000 LB 0x5a028
338cac.82c: ProductName: Microsoft® Windows® Operating System
339cac.82c: ProductVersion: 6.1.7601.18939
340cac.82c: FileVersion: 6.1.7601.18939 (win7sp1_gdr.150722-0600)
341cac.82c: FileDescription: NT Layer DLL
342cac.82c: \SystemRoot\System32\kernel32.dll:
343cac.82c: CreationTime: 2015-09-04T02:22:04.190820800Z
344cac.82c: LastWriteTime: 2015-05-09T03:13:42.222000000Z
345cac.82c: ChangeTime: 2015-09-05T08:17:55.571543000Z
346cac.82c: FileAttributes: 0x20
347cac.82c: Size: 0xd4000
348cac.82c: NT Headers: 0xf0
349cac.82c: Timestamp: 0x554d7aff
350cac.82c: Machine: 0x14c - i386
351cac.82c: Timestamp: 0x554d7aff
352cac.82c: Image Version: 6.1
353cac.82c: SizeOfImage: 0xd4000 (868352)
354cac.82c: Resource Dir: 0xc7000 LB 0x528
355cac.82c: ProductName: Microsoft® Windows® Operating System
356cac.82c: ProductVersion: 6.1.7601.18847
357cac.82c: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
358cac.82c: FileDescription: Windows NT BASE API Client DLL
359cac.82c: \SystemRoot\System32\KernelBase.dll:
360cac.82c: CreationTime: 2015-09-04T02:22:04.140818000Z
361cac.82c: LastWriteTime: 2015-05-09T03:13:42.222000000Z
362cac.82c: ChangeTime: 2015-09-05T08:17:55.592544200Z
363cac.82c: FileAttributes: 0x20
364cac.82c: Size: 0x47a00
365cac.82c: NT Headers: 0xe0
366cac.82c: Timestamp: 0x554d7b00
367cac.82c: Machine: 0x14c - i386
368cac.82c: Timestamp: 0x554d7b00
369cac.82c: Image Version: 6.1
370cac.82c: SizeOfImage: 0x4b000 (307200)
371cac.82c: Resource Dir: 0x47000 LB 0x530
372cac.82c: ProductName: Microsoft® Windows® Operating System
373cac.82c: ProductVersion: 6.1.7601.18847
374cac.82c: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
375cac.82c: FileDescription: Windows NT BASE API Client DLL
376cac.82c: \SystemRoot\System32\apisetschema.dll:
377cac.82c: CreationTime: 2015-09-08T21:40:29.711436900Z
378cac.82c: LastWriteTime: 2015-07-22T17:42:39.529000000Z
379cac.82c: ChangeTime: 2015-09-09T02:22:00.013506900Z
380cac.82c: FileAttributes: 0x20
381cac.82c: Size: 0x1a00
382cac.82c: NT Headers: 0xc0
383cac.82c: Timestamp: 0x55afd647
384cac.82c: Machine: 0x14c - i386
385cac.82c: Timestamp: 0x55afd647
386cac.82c: Image Version: 6.1
387cac.82c: SizeOfImage: 0x50000 (327680)
388cac.82c: Resource Dir: 0x30000 LB 0x3f8
389cac.82c: ProductName: Microsoft® Windows® Operating System
390cac.82c: ProductVersion: 6.1.7601.18939
391cac.82c: FileVersion: 6.1.7601.18939 (win7sp1_gdr.150722-0600)
392cac.82c: FileDescription: ApiSet Schema DLL
393cac.82c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
394cac.82c: supR3HardenedWinFindAdversaries: 0x0
395cac.82c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
396cac.82c: Calling main()
397cac.82c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
398cac.82c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
399cac.82c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
400cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
401cac.82c: SUPR3HardenedMain: Final process, opening VBoxDrv...
402cac.82c: supR3HardenedEarlyCompact: Removed heap 1 (0x320000 LB 0x400000)
403cac.82c: supR3HardNtEnableThreadCreation:
404cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
405cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
406cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00812c5c:C:\Windows\system32 [calling]
407cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
408cac.82c: supR3HardenedDllNotificationCallback: load 6d660000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
409cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
410cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
411cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
412cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6d660000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
413cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
414cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
415cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6d660000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
416cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6d660000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
417cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
418cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'.
419cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
420cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
421cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
422cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
423cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
424cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
425cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
426cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
427cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
428cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
429cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
430cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
431cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
432cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
433cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
434cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
435cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
436cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
437cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
438cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
439cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
440cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
441cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
442cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
443cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
444cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
445cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
446cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
447cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00812c5c:C:\Windows\system32 [calling]
448cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
449cac.82c: supR3HardenedDllNotificationCallback: load 75320000 LB 0x0002f000 C:\Windows\system32\Wintrust.dll [fFlags=0x0]
450cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
451cac.82c: supR3HardenedDllNotificationCallback: load 76f10000 LB 0x000ac000 C:\Windows\system32\msvcrt.dll [fFlags=0x0]
452cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
453cac.82c: supR3HardenedDllNotificationCallback: load 75190000 LB 0x00121000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0]
454cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
455cac.82c: supR3HardenedDllNotificationCallback: load 750f0000 LB 0x0000c000 C:\Windows\system32\MSASN1.dll [fFlags=0x0]
456cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
457cac.82c: supR3HardenedDllNotificationCallback: load 761c0000 LB 0x000a2000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0]
458cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
459cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75320000 'C:\Windows\system32\Wintrust.dll'
460cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
461cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
462cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00812c5c:C:\Windows\system32 [calling]
463cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
464cac.82c: supR3HardenedDllNotificationCallback: load 74c40000 LB 0x00017000 C:\Windows\system32\bcrypt.dll [fFlags=0x0]
465cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
466cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74c40000 'C:\Windows\system32\bcrypt.dll'
467cac.82c: bcrypt.dll loaded at 74c40000, BCryptOpenAlgorithmProvider at 74c42cda, preloading providers:
468cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
469cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'bcrypt.dll'.
470cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
471cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
472cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
473cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
474cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
475cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
476cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
477cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
478cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
479cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
480cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
481cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
482cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
483cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
484cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
485cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
486cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
487cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
488cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
489cac.82c: supR3HardenedDllNotificationCallback: load 74810000 LB 0x0003d000 C:\Windows\system32\bcryptprimitives.dll [fFlags=0x0]
490cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
491cac.82c: supR3HardenedDllNotificationCallback: load 76110000 LB 0x000a1000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0]
492cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
493cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
494cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
495cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
496cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
497cac.82c: supR3HardenedDllNotificationCallback: load 77270000 LB 0x00019000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0]
498cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
499cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74810000 'C:\Windows\system32\bcryptprimitives.dll'
500cac.82c: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0083d998)
501cac.82c: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0083e0a8)
502cac.82c: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0083ee00)
503cac.82c: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0083d8f0)
504cac.82c: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0083ef50)
505cac.82c: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=0083eff0)
506cac.82c: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0083eea0)
507cac.82c: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0083f160)
508cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
509cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
510cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
511cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
512cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
513cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
514cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
515cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
516cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
517cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
518cac.82c: supR3HardenedDllNotificationCallback: load 74b10000 LB 0x00017000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0]
519cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
520cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74b10000 'C:\Windows\system32\CRYPTSP.dll'
521cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
522cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
523cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
524cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
525cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
526cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
527cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
528cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
529cac.82c: supR3HardenedDllNotificationCallback: load 748b0000 LB 0x0003b000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
530cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
531cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=748b0000 'C:\Windows\system32\rsaenh.dll'
532cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
533cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
534cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76110000 'C:\Windows\system32\ADVAPI32.dll'
535cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
536cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
537cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
538cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
539cac.82c: supR3HardenedDllNotificationCallback: load 75010000 LB 0x0000c000 C:\Windows\system32\CRYPTBASE.dll [fFlags=0x0]
540cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
541cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75010000 'C:\Windows\system32\CRYPTBASE.dll'
542cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
543cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
544cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ae0000 'C:\Windows\system32\kernel32.dll'
545cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
546cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
547cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75320000 'C:\Windows\system32\WINTRUST.DLL'
548cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
549cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
550cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75190000 'C:\Windows\system32\CRYPT32.dll'
551cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
552cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'advapi32.dll'.
553cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
554cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
555cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
556cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
557cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
558cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
559cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
560cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
561cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imagehlp.dll (Input=imagehlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
562cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
563cac.82c: supR3HardenedDllNotificationCallback: load 772a0000 LB 0x0002b000 C:\Windows\system32\imagehlp.dll [fFlags=0x0]
564cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
565cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=772a0000 'C:\Windows\system32\imagehlp.dll'
566cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
567cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
568cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74b10000 'C:\Windows\system32\CRYPTSP.dll'
569cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
570cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
571cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
572cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
573cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
574cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
575cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
576cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
577cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
578cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'...
579cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume2\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008]
580cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
581cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
582cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'.
583cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\lpk.dll)
584cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\lpk.dll
585cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
586cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
587cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
588cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'...
589cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume2\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008]
590cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
591cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
592cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
593cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\usp10.dll)
594cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\usp10.dll
595cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
596cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
597cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
598cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
599cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
600cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
601cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
602cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
603cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
604cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
605cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
606cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
607cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
608cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
609cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
610cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USER32.dll (Input=USER32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
611cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
612cac.82c: supR3HardenedDllNotificationCallback: load 75c10000 LB 0x000c9000 C:\Windows\system32\USER32.dll [fFlags=0x0]
613cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
614cac.82c: supR3HardenedDllNotificationCallback: load 75bc0000 LB 0x0004e000 C:\Windows\system32\GDI32.dll [fFlags=0x0]
615cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
616cac.82c: supR3HardenedDllNotificationCallback: load 77260000 LB 0x0000a000 C:\Windows\system32\LPK.dll [fFlags=0x0]
617cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\lpk.dll [lacks WinVerifyTrust]
618cac.82c: supR3HardenedDllNotificationCallback: load 75e80000 LB 0x0009d000 C:\Windows\system32\USP10.dll [fFlags=0x0]
619cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\usp10.dll [lacks WinVerifyTrust]
620cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
621cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
622cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75bc0000 'C:\Windows\system32\gdi32.dll'
623cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
624cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
625cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
626cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
627cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
628cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
629cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
630cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
631cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
632cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
633cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'.
634cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
635cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
636cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
637cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
638cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
639cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
640cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
641cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
642cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
643cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
644cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
645cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
646cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
647cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
648cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
649cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
650cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
651cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
652cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
653cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
654cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
655cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
656cac.82c: supR3HardenedDllNotificationCallback: load 75840000 LB 0x0001f000 C:\Windows\system32\IMM32.DLL [fFlags=0x0]
657cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
658cac.82c: supR3HardenedDllNotificationCallback: load 75610000 LB 0x000cc000 C:\Windows\system32\MSCTF.dll [fFlags=0x0]
659cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
660cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75840000 'C:\Windows\system32\IMM32.DLL'
661cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75c10000 'C:\Windows\system32\USER32.dll'
662cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'bcrypt.dll'.
663cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
664cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'.
665cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ncrypt.dll)
666cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ncrypt.dll
667cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
668cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
669cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
670cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
671cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
672cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
673cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
674cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
675cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
676cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ncrypt.dll (Input=ncrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
677cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
678cac.82c: supR3HardenedDllNotificationCallback: load 74c60000 LB 0x00038000 C:\Windows\system32\ncrypt.dll [fFlags=0x0]
679cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
680cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74c60000 'C:\Windows\system32\ncrypt.dll'
681cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
682cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (Input=bcrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
683cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74c40000 'C:\Windows\system32\bcrypt.dll'
684cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
685cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'rpcrt4.dll'.
686cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'profapi.dll'.
687cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\userenv.dll)
688cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
689cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
690cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
691cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
692cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
693cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
694cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
695cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
696cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
697cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
698cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
699cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
700cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
701cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
702cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
703cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USERENV.dll (Input=USERENV.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
704cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\userenv.dll [lacks WinVerifyTrust]
705cac.82c: supR3HardenedDllNotificationCallback: load 75170000 LB 0x00017000 C:\Windows\system32\USERENV.dll [fFlags=0x0]
706cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\userenv.dll [lacks WinVerifyTrust]
707cac.82c: supR3HardenedDllNotificationCallback: load 75100000 LB 0x0000b000 C:\Windows\system32\profapi.dll [fFlags=0x0]
708cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
709cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75170000 'C:\Windows\system32\USERENV.dll'
710cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
711cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
712cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
713cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
714cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
715cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
716cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
717cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
718cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
719cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
720cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
721cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
722cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
723cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
724cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\GPAPI.dll (Input=GPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
725cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
726cac.82c: supR3HardenedDllNotificationCallback: load 746e0000 LB 0x00016000 C:\Windows\system32\GPAPI.dll [fFlags=0x0]
727cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
728cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=746e0000 'C:\Windows\system32\GPAPI.dll'
729cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
730cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-WIN-Service-Management-L1-1-0.dll'
731cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
732cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
733cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=761c0000 'C:\Windows\system32\rpcrt4.dll'
734cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L2-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
735cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-WIN-Service-Management-L2-1-0.dll'
736cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
737cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
738cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
739cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
740cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'crypt32.dll'.
741cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'wldap32.dll'.
742cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
743cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
744cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
745cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume2\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
746cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
747cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\Wldap32.dll)
748cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\Wldap32.dll
749cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
750cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
751cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
752cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
753cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
754cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
755cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
756cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
757cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
758cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
759cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
760cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
761cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
762cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
763cac.82c: supR3HardenedDllNotificationCallback: load 719f0000 LB 0x0001c000 C:\Windows\system32\cryptnet.dll [fFlags=0x0]
764cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
765cac.82c: supR3HardenedDllNotificationCallback: load 76ec0000 LB 0x00045000 C:\Windows\system32\WLDAP32.dll [fFlags=0x0]
766cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
767cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
768cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
769cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
770cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
771cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
772cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
773cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
774cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
775cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
776cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
777cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
778cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
779cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
780cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
781cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
782cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
783cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
784cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
785cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
786cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
787cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
788cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
789cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
790cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
791cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
792cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
793cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
794cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
795cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
796cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
797cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=719f0000 'C:\Windows\system32\cryptnet.dll'
798cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
799cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
800cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
801cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
802cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75100000 'C:\Windows\system32\profapi.dll'
803cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
804cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
805cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
806cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
807cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
808cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
809cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
810cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
811cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
812cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
813cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
814cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
815cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
816cac.82c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
817cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
818cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
819cac.82c: supR3HardenedDllNotificationCallback: load 757d0000 LB 0x00057000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0]
820cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
821cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=757d0000 'C:\Windows\system32\SHLWAPI.dll'
822cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000 pwszName=\SystemRoot\System32\ntdll.dll
823cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: New context 00859048
824cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
825cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=797DE7D64B279941F36B4164A65E2CD127C0B562
826cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
827cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
828cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
829cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-WIN-Service-Management-L1-1-0.dll'
830cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
831cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
832cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
833cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
834cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76110000 'C:\Windows\system32\ADVAPI32.dll'
835cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
836cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
837cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
838cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
839cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB3080149~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\SystemRoot\System32\ntdll.dll'
840cac.82c: g_pfnWinVerifyTrust=7532273a
841cac.82c: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
842cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000e4 pwszName=\Device\HarddiskVolume2\Windows\System32\crypt32.dll
843cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
844cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
845cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B3332A3BF9E00E9C36DC9749A20DEA999CEBDE77
846cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB3040272~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
847cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
848cac.82c: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
849cac.82c: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
850cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000d8 pwszName=\Device\HarddiskVolume2\Windows\System32\wintrust.dll
851cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
852cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
853cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F2FD7D98679ED68B7C258E60C35F3BA425D140B9
854cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB3040272~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
855cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
856cac.82c: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
857cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000390 pwszName=\Device\HarddiskVolume2\Windows\System32\shlwapi.dll
858cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
859cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
860cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5A97620B38393821964747185BD0CFB4FF244F0A
861cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
862cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
863cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
864cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000384 pwszName=\Device\HarddiskVolume2\Windows\System32\Wldap32.dll
865cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
866cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
867cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4274E678F4A09F0955B304F45CFA0547B0F86BC7
868cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\Wldap32.dll'
869cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
870cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\Wldap32.dll'
871cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000380 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
872cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
873cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
874cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E8D8B40354DD1B3F6FAF80893807AE138984C3EB
875cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB3040272~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
876cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
877cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
878cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000025c pwszName=\Device\HarddiskVolume2\Windows\System32\gpapi.dll
879cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
880cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
881cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BD66D8D7C0A43466AD80C34E81C083C3C69E195B
882cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
883cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
884cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
885cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000001c8 pwszName=\Device\HarddiskVolume2\Windows\System32\profapi.dll
886cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
887cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
888cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D9A4C90615FC5B5674208A5401C018FEA2A04A4B
889cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\profapi.dll'
890cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
891cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
892cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000001c4 pwszName=\Device\HarddiskVolume2\Windows\System32\userenv.dll
893cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
894cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
895cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=21925C895DA97CB66CCC5FBA910D9ABD265AA276
896cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\userenv.dll'
897cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
898cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\userenv.dll'
899cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000001b0 pwszName=\Device\HarddiskVolume2\Windows\System32\ncrypt.dll
900cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
901cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
902cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4B5BEBF97FF65A23D3139E219B277DA89AB8ACE3
903cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB3080149~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\ncrypt.dll'
904cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
905cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ncrypt.dll'
906cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000198 pwszName=\Device\HarddiskVolume2\Windows\System32\msctf.dll
907cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
908cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
909cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=21CC868DE3508F5C6F6D348B324C1E8AB2969CC6
910cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3033889~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\msctf.dll'
911cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
912cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msctf.dll'
913cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000194 pwszName=\Device\HarddiskVolume2\Windows\System32\imm32.dll
914cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
915cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
916cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CB8862BB29C3F539B9BF3A9E49EBC509A515AC5C
917cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\imm32.dll'
918cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
919cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
920cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000190 pwszName=\Device\HarddiskVolume2\Windows\System32\usp10.dll
921cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
922cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
923cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=43A12765C9BE008AD8F89DD9D8ADE42781F3CECF
924cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2957509~31bf3856ad364e35~x86~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\usp10.dll'
925cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
926cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\usp10.dll'
927cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000018c pwszName=\Device\HarddiskVolume2\Windows\System32\lpk.dll
928cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
929cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
930cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5B69BB5E518E30563D5F105F9F5A9A0774CF902E
931cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3087039~31bf3856ad364e35~x86~~6.1.1.4.cat'; file='\Device\HarddiskVolume2\Windows\System32\lpk.dll'
932cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
933cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\lpk.dll'
934cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000188 pwszName=\Device\HarddiskVolume2\Windows\System32\gdi32.dll
935cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
936cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
937cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F22A2FC845420DBD44B017133D50DFF33EE6D03F
938cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3069392~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
939cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
940cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
941cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000184 pwszName=\Device\HarddiskVolume2\Windows\System32\user32.dll
942cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
943cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
944cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=46D722AD9F66278A8EBC0D192855961CE6A21050
945cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\user32.dll'
946cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
947cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\user32.dll'
948cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000180 pwszName=\Device\HarddiskVolume2\Windows\System32\imagehlp.dll
949cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
950cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
951cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D59F877FD4F27652A01B1936874AFAF3A55572A8
952cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2893294~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
953cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
954cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
955cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000134 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptbase.dll
956cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
957cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
958cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0CC6E2436B6021BD1DF3A802644DECB3BD7DDAF7
959cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB3080149~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
960cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
961cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
962cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
963cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000130 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptsp.dll
964cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
965cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
966cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EFE6B29BE955FB2D869F3B57909DF90693FBBCEB
967cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB3033929~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
968cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
969cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
970cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000124 pwszName=\Device\HarddiskVolume2\Windows\System32\sechost.dll
971cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
972cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
973cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=27AAFBF501C7D0BDB48FEA759DB4257783E5749A
974cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB3068708~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\sechost.dll'
975cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
976cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
977cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000120 pwszName=\Device\HarddiskVolume2\Windows\System32\advapi32.dll
978cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
979cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
980cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F9B5837102D5550DADB15CDBE6874779C095378D
981cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB3080149~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
982cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
983cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
984cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
985cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000108 pwszName=\Device\HarddiskVolume2\Windows\System32\bcrypt.dll
986cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
987cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
988cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F0BAB1EFD5C685AC53B020519B5A6984B19E5071
989cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
990cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
991cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
992cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000e8 pwszName=\Device\HarddiskVolume2\Windows\System32\msvcrt.dll
993cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
994cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
995cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=50B466D5DDEDD2D1A524F20B8873F187B62AA69F
996cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2654428~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
997cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
998cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
999cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000e0 pwszName=\Device\HarddiskVolume2\Windows\System32\msasn1.dll
1000cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1001cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1002cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7068F2E1634BBD478D1FBCF4C463626913EA7285
1003cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
1004cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1005cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
1006cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000dc pwszName=\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
1007cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1008cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1009cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0E5A9D760AA73025900222BCDCAA8BB5E4A077E2
1010cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB3080149~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
1011cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1012cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
1013cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
1014cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000024 pwszName=\Device\HarddiskVolume2\Windows\System32\KernelBase.dll
1015cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1016cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1017cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=992AF4E9EBEC265515EC875F6F2F14055D1D491D
1018cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3063858~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
1019cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1020cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
1021cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000001c pwszName=\Device\HarddiskVolume2\Windows\System32\kernel32.dll
1022cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1023cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1024cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=84623A9DB7C87F822F9F509ECBD6D4DC753E6405
1025cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3063858~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
1026cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1027cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
1028cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
1029cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00872114:C:\Windows\system32 [calling]
1030cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75190000 'C:\Windows\system32\crypt32.dll'
1031cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xbc1fb7a1121da7d1 CN=MyTestCertificate
1032cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
1033cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
1034cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
1035cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
1036cac.82c: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
1037cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
1038cac.82c: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=GB, ST=Hertfordshire, L=Kings Langley, O=Imagination Technologies, CN=Imagination Technologies
1039cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
1040cac.82c: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
1041cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
1042cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
1043cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
1044cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
1045cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
1046cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
1047cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
1048cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
1049cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
1050cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
1051cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
1052cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
1053cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
1054cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
1055cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
1056cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
1057cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
1058cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
1059cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
1060cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
1061cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
1062cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
1063cac.82c: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
1064cac.82c: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=30
1065cac.82c: SUPR3HardenedMain: Load Runtime...
1066cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
1067cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
1068cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
1069cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
1070cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)WinVerifyTrust
1071cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1072cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1073cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1074cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
1075cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
1076cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
1077cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000418 pwszName=\Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1078cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1079cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1080cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2535224DB54945234E1A0C452639FCBB02F5F364
1081cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\ws2_32.dll'
1082cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1083cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1084cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
1085cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'nsi.dll'.
1086cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)WinVerifyTrust
1087cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1088cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1089cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1090cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
1091cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)WinVerifyTrust
1092cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1093cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1094cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1095cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)WinVerifyTrust
1096cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1097cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1098cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1099cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1100cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
1101cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
1102cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000450 pwszName=\Device\HarddiskVolume2\Windows\System32\nsi.dll
1103cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1104cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1105cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5C25EDD170A1CAACC3D49C508AB6F58BD6DE6E2
1106cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\nsi.dll'
1107cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1108cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)WinVerifyTrust
1109cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
1110cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1111cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1112cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
1113cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1114cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1115cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
1116cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1117cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1118cac.82c: supR3HardenedDllNotificationCallback: load 6cf00000 LB 0x00424000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
1119cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1120cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1121cac.82c: supR3HardenedDllNotificationCallback: load 6ce40000 LB 0x000bf000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
1122cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1123cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1124cac.82c: supR3HardenedDllNotificationCallback: load 6cdd0000 LB 0x00069000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
1125cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1126cac.82c: supR3HardenedDllNotificationCallback: load 75aa0000 LB 0x00035000 C:\Windows\system32\WS2_32.dll [fFlags=0x0]
1127cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1128cac.82c: supR3HardenedDllNotificationCallback: load 77290000 LB 0x00006000 C:\Windows\system32\NSI.dll [fFlags=0x0]
1129cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll
1130cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1131cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1132cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1133cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1134cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1135cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1136cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1137cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1138cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1139cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1140cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1141cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1142cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1143cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1144cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1145cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1146cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1147cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1148cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1149cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1150cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1151cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1152cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1153cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1154cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1155cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1156cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1157cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1158cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1159cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1160cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1161cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1162cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1163cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1164cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1165cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1166cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1167cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1168cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1169cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1170cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1171cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1172cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1173cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1174cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00813304:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Perl\site\bin;C:\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft Windows Performance Toolkit\;C:\VBox\mingw32-3.3.3\bin;C:\VBox\qt-4.7.3\bin;C:\Program Files\Microsoft SDKs\Windows\v7.0A\bin [calling]
1175cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1176cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1177cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1178cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6cf00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1179cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
1180cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00872154:C:\Windows\system32 [calling]
1181cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75320000 'C:\Windows\system32\Wintrust.dll'
1182cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
1183cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00872154:C:\Windows\system32 [calling]
1184cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75190000 'C:\Windows\system32\crypt32.dll'
1185cac.82c: SUPR3HardenedMain: Load TrustedMain...
1186cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
1187cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
1188cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
1189cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
1190cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
1191cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtcorevbox4.dll'.
1192cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtguivbox4.dll'.
1193cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtnetworkvbox4.dll'.
1194cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qtopenglvbox4.dll'.
1195cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
1196cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'gdi32.dll'.
1197cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'advapi32.dll'.
1198cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shell32.dll'.
1199cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'ole32.dll'.
1200cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
1201cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'comdlg32.dll'.
1202cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'winmm.dll'.
1203cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)WinVerifyTrust
1204cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
1205cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1206cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1207cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000048c pwszName=\Device\HarddiskVolume2\Windows\System32\winmm.dll
1208cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1209cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1210cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0907A64D7756C59C69C1DFBD06460EC89D3A8FBD
1211cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\winmm.dll'
1212cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1213cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1214cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1215cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)WinVerifyTrust
1216cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
1217cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
1218cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
1219cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000046c pwszName=\Device\HarddiskVolume2\Windows\System32\comdlg32.dll
1220cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1221cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1222cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1C456ACB19416C5E733133B4582891146F151614
1223cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\comdlg32.dll'
1224cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1225cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1226cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
1227cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1228cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
1229cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
1230cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
1231cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)WinVerifyTrust
1232cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
1233cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1234cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1235cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000498 pwszName=\Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1236cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1237cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1238cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BCE31FDB944BBD2B4E378704B95BEA36085E5ADA
1239cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3020338~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\oleaut32.dll'
1240cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1241cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
1242cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1243cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
1244cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
1245cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'gdi32.dll'.
1246cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)WinVerifyTrust
1247cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1248cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1249cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1250cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000494 pwszName=\Device\HarddiskVolume2\Windows\System32\ole32.dll
1251cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1252cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1253cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FAF1DA7C8C4B3B49A52A2B8999865DEDC4F50EC6
1254cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3072633~31bf3856ad364e35~x86~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\ole32.dll'
1255cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1256cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1257cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
1258cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
1259cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
1260cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)WinVerifyTrust
1261cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
1262cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1263cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1264cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000490 pwszName=\Device\HarddiskVolume2\Windows\System32\shell32.dll
1265cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1266cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1267cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D934624ACB102B5C389F74FDA849C3C1223F2F
1268cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3079757~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\shell32.dll'
1269cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1270cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1271cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
1272cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
1273cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
1274cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)WinVerifyTrust
1275cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
1276cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1277cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1278cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1279cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1280cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1281cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
1282cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1283cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1284cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
1285cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' [rcNtRedir=0xc0150008]
1286cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
1287cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
1288cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1289cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
1290cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
1291cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
1292cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)WinVerifyTrust
1293cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
1294cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
1295cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' [rcNtRedir=0xc0150008]
1296cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
1297cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
1298cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
1299cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)WinVerifyTrust
1300cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
1301cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
1302cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
1303cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1304cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
1305cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
1306cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
1307cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
1308cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
1309cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
1310cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
1311cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
1312cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
1313cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
1314cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
1315cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
1316cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)WinVerifyTrust
1317cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
1318cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
1319cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
1320cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
1321cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
1322cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
1323cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
1324cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
1325cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
1326cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)WinVerifyTrust
1327cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
1328cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1329cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1330cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1331cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1332cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1333cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1334cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
1335cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
1336cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
1337cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
1338cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
1339cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll)WinVerifyTrust
1340cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
1341cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
1342cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
1343cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1344cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1345cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004d0 pwszName=\Device\HarddiskVolume2\Windows\System32\opengl32.dll
1346cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1347cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1348cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4C7570E385B8CF66CB40344231F3E0AA4189574F
1349cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
1350cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1351cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1352cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
1353cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
1354cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
1355cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
1356cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
1357cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)WinVerifyTrust
1358cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1359cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1360cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1361cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
1362cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
1363cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004c8 pwszName=\Device\HarddiskVolume2\Windows\System32\ddraw.dll
1364cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1365cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1366cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6D0AC3B30C2D6C734EBBA3E99BF60B93FDF28E33
1367cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\ddraw.dll'
1368cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1369cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1370cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1371cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
1372cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
1373cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
1374cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
1375cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll)WinVerifyTrust
1376cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll
1377cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
1378cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
1379cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004e0 pwszName=\Device\HarddiskVolume2\Windows\System32\glu32.dll
1380cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1381cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1382cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8AAE7D02045ADA954DBE714C716FEAB98D1A54F0
1383cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\glu32.dll'
1384cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1385cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1386cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
1387cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1388cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)WinVerifyTrust
1389cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
1390cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1391cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1392cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1393cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1394cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1395cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1396cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1397cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
1398cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
1399cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
1400cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
1401cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
1402cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
1403cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
1404cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll)WinVerifyTrust
1405cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
1406cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1407cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1408cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1409cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1410cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1411cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1412cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1413cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1414cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1415cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
1416cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
1417cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1418cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1419cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1420cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1421cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1422cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1423cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1424cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1425cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1426cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1427cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1428cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1429cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1430cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1431cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1432cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
1433cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
1434cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
1435cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1436cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1437cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1438cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1439cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1440cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1441cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1442cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1443cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1444cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1445cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
1446cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
1447cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004d8 pwszName=\Device\HarddiskVolume2\Windows\System32\winspool.drv
1448cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1449cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1450cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B39657B6044CE5C98BB9FC443679CBDE0E6BE222
1451cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\winspool.drv'
1452cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1453cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1454cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
1455cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
1456cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)WinVerifyTrust
1457cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
1458cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1459cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1460cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
1461cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1462cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1463cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
1464cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1465cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1466cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1467cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
1468cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
1469cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
1470cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1471cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1472cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1473cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1474cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1475cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
1476cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
1477cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
1478cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
1479cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
1480cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1481cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1482cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1483cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
1484cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
1485cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
1486cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
1487cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
1488cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
1489cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1490cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1491cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1492cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1493cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1494cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1495cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1496cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1497cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1498cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1499cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1500cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
1501cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
1502cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
1503cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1504cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1505cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1506cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1507cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1508cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1509cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1510cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1511cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1512cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1513cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1514cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1515cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1516cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1517cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
1518cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1519cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1520cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1521cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1522cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1523cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1524cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1525cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1526cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1527cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1528cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
1529cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
1530cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004e8 pwszName=\Device\HarddiskVolume2\Windows\System32\comctl32.dll
1531cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1532cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1533cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6F6BC11030E34EE31C1BFA1892BB38C959ED836D
1534cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3059317~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\comctl32.dll'
1535cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1536cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
1537cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1538cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
1539cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)WinVerifyTrust
1540cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
1541cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1542cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1543cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1544cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1545cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
1546cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
1547cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
1548cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1549cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1550cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1551cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1552cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1553cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1554cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1555cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1556cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1557cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1558cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
1559cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1560cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1561cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1562cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1563cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1564cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1565cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1566cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1567cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
1568cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
1569cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
1570cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
1571cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
1572cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1573cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1574cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1575cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1576cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1577cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1578cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1579cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1580cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1581cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
1582cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
1583cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004dc pwszName=\Device\HarddiskVolume2\Windows\System32\dwmapi.dll
1584cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1585cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1586cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=16BBD8EF93DEB2283AA2548BAF76579D798DC50D
1587cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3078667~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\dwmapi.dll'
1588cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1589cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1590cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1591cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1592cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll)WinVerifyTrust
1593cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
1594cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
1595cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
1596cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004cc pwszName=\Device\HarddiskVolume2\Windows\System32\setupapi.dll
1597cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1598cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1599cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=07B90F6FCFF3E079727E8F6884115307C6E5BA41
1600cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\setupapi.dll'
1601cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1602cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'.
1603cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
1604cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
1605cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
1606cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
1607cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
1608cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'.
1609cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll)WinVerifyTrust
1610cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
1611cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1612cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1613cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
1614cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
1615cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000004ec pwszName=\Device\HarddiskVolume2\Windows\System32\dciman32.dll
1616cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1617cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1618cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0121BFD26E8D5A165F8B76EDF84833D970DB8D96
1619cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3087039~31bf3856ad364e35~x86~~6.1.1.4.cat'; file='\Device\HarddiskVolume2\Windows\System32\dciman32.dll'
1620cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1621cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1622cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1623cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1624cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll)WinVerifyTrust
1625cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll
1626cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1627cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1628cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1629cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1630cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1631cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1632cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1633cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1634cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1635cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1636cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
1637cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
1638cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000050c pwszName=\Device\HarddiskVolume2\Windows\System32\devobj.dll
1639cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1640cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1641cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EE1631BE6E86D9131380E981EC05320E6DF3FD3A
1642cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\devobj.dll'
1643cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1644cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1645cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'cfgmgr32.dll'.
1646cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll)WinVerifyTrust
1647cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
1648cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1649cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1650cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1651cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1652cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1653cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1654cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1655cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1656cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1657cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1658cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1659cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
1660cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
1661cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000500 pwszName=\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
1662cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1663cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1664cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A2D26C675A9F5FB0ABA919E9F71726151CB174F1
1665cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
1666cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1667cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1668cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
1669cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
1670cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)WinVerifyTrust
1671cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
1672cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1673cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1674cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1675cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1676cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1677cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1678cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1679cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1680cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1681cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1682cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1683cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1684cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
1685cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
1686cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
1687cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1688cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1689cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1690cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
1691cac.82c: supR3HardenedDllNotificationCallback: load 6c420000 LB 0x009a2000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
1692cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
1693cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1694cac.82c: supR3HardenedDllNotificationCallback: load 6c350000 LB 0x000c8000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0]
1695cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1696cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\glu32.dll
1697cac.82c: supR3HardenedDllNotificationCallback: load 6c320000 LB 0x00022000 C:\Windows\system32\GLU32.dll [fFlags=0x0]
1698cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\glu32.dll
1699cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll
1700cac.82c: supR3HardenedDllNotificationCallback: load 6c230000 LB 0x000e7000 C:\Windows\system32\DDRAW.dll [fFlags=0x0]
1701cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll
1702cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll
1703cac.82c: supR3HardenedDllNotificationCallback: load 6c220000 LB 0x00006000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0]
1704cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll
1705cac.82c: supR3HardenedDllNotificationCallback: load 75ce0000 LB 0x0019d000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0]
1706cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
1707cac.82c: supR3HardenedDllNotificationCallback: load 75350000 LB 0x00027000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
1708cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
1709cac.82c: supR3HardenedDllNotificationCallback: load 76080000 LB 0x0008f000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
1710cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1711cac.82c: supR3HardenedDllNotificationCallback: load 75f20000 LB 0x0015c000 C:\Windows\system32\ole32.dll [fFlags=0x0]
1712cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1713cac.82c: supR3HardenedDllNotificationCallback: load 752c0000 LB 0x00012000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
1714cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
1715cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
1716cac.82c: supR3HardenedDllNotificationCallback: load 739a0000 LB 0x00013000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
1717cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
1718cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
1719cac.82c: supR3HardenedDllNotificationCallback: load 6c000000 LB 0x0021e000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.dll [fFlags=0x0]
1720cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
1721cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
1722cac.82c: supR3HardenedDllNotificationCallback: load 6bff0000 LB 0x00007000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
1723cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
1724cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
1725cac.82c: supR3HardenedDllNotificationCallback: load 6bd70000 LB 0x00274000 C:\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [fFlags=0x0]
1726cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
1727cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
1728cac.82c: supR3HardenedDllNotificationCallback: load 6b560000 LB 0x00810000 C:\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [fFlags=0x0]
1729cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
1730cac.82c: supR3HardenedDllNotificationCallback: load 756f0000 LB 0x0007b000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0]
1731cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
1732cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
1733cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1734cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
1735cac.82c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll)
1736cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll
1737cac.82c: supR3HardenedDllNotificationCallback: load 6b4d0000 LB 0x00084000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll [fFlags=0x0]
1738cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll [avoiding WinVerifyTrust]
1739cac.82c: supR3HardenedDllNotificationCallback: load 76270000 LB 0x00c4b000 C:\Windows\system32\SHELL32.dll [fFlags=0x0]
1740cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1741cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
1742cac.82c: supR3HardenedDllNotificationCallback: load 71340000 LB 0x00032000 C:\Windows\system32\WINMM.dll [fFlags=0x0]
1743cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
1744cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winspool.drv
1745cac.82c: supR3HardenedDllNotificationCallback: load 70f90000 LB 0x00051000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0]
1746cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winspool.drv
1747cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
1748cac.82c: supR3HardenedDllNotificationCallback: load 6b3e0000 LB 0x000e2000 C:\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll [fFlags=0x0]
1749cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
1750cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
1751cac.82c: supR3HardenedDllNotificationCallback: load 6b310000 LB 0x000c1000 C:\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll [fFlags=0x0]
1752cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
1753cac.82c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll'.
1754cac.82c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll' [rescheduled]
1755cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
1756cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1757cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1758cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1759cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1760cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1761cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1762cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0085836c:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1763cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75840000 'C:\Windows\system32\imm32.dll'
1764cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6c420000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
1765cac.82c: SUPR3HardenedMain: Calling TrustedMain (6c4216f0)...
1766cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
1767cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1768cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=71340000 'C:\Windows\system32\winmm.dll'
1769cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000005a4 pwszName=\Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1770cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1771cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1772cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BCFB3B3EDEC8C54A3B95DACAFC19DCB9EA6969BD
1773cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\uxtheme.dll'
1774cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1775cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1776cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
1777cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
1778cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll)WinVerifyTrust
1779cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1780cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1781cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1782cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1783cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1784cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1785cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1786cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=027751f4:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1787cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1788cac.82c: supR3HardenedDllNotificationCallback: load 73f10000 LB 0x00040000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
1789cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1790cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1791cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1792cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=027751f4:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1793cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1794cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1795cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=027751f4:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1796cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1797cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1798cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=027751f4:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1799cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1800cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
1801cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dwmapi.dll (Input=dwmapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1802cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=739a0000 'C:\Windows\system32\dwmapi.dll'
1803cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
1804cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1805cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75010000 'C:\Windows\system32\CRYPTBASE.dll'
1806cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1807cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1808cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76270000 'C:\Windows\system32\shell32.dll'
1809cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
1810cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1811cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ae0000 'C:\Windows\system32\kernel32.dll'
1812cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1813cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1814cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1815cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1816cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1817cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1818cac.82c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
1819cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1820cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll'
1821cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75c10000 'C:\Windows\system32\user32.dll'
1822cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1823cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1824cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=73f10000 'C:\Windows\system32\uxtheme.dll'
1825cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75c10000 'C:\Windows\system32\user32.dll'
1826cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76110000 'C:\Windows\system32\advapi32.dll'
1827cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
1828cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1829cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75170000 'C:\Windows\system32\userenv.dll'
1830cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
1831cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1832cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75ae0000 'C:\Windows\system32\kernel32.dll'
1833cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000005f8 pwszName=\Device\HarddiskVolume2\Windows\System32\clbcatq.dll
1834cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1835cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1836cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B560B8A95D275325C41DE5897E348BE60192127E
1837cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\clbcatq.dll'
1838cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1839cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1840cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
1841cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1842cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
1843cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1844cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
1845cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)WinVerifyTrust
1846cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
1847cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1848cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1849cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1850cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1851cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1852cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1853cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1854cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1855cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1856cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1857cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1858cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1859cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1860cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1861cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
1862cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CLBCatQ.DLL (Input=CLBCatQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857624:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1863cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
1864cac.82c: supR3HardenedDllNotificationCallback: load 772d0000 LB 0x00083000 C:\Windows\system32\CLBCatQ.DLL [fFlags=0x0]
1865cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
1866cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=772d0000 'C:\Windows\system32\CLBCatQ.DLL'
1867cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76110000 'C:\Windows\system32\ADVAPI32.dll'
1868cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
1869cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0085814c:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1870cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74b10000 'C:\Windows\system32\CRYPTSP.dll'
1871cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000618 pwszName=\Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll
1872cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1873cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1874cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A397FD418538BAA1CB6D18B348447E74938F66EA
1875cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll'
1876cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1877cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
1878cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll)WinVerifyTrust
1879cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll
1880cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1881cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1882cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\RpcRtRemote.dll (Input=RpcRtRemote.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=008580c4:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1883cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll
1884cac.82c: supR3HardenedDllNotificationCallback: load 75080000 LB 0x0000e000 C:\Windows\system32\RpcRtRemote.dll [fFlags=0x0]
1885cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll
1886cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75080000 'C:\Windows\system32\RpcRtRemote.dll'
1887cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
1888cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
1889cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'psapi.dll'.
1890cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxvmm.dll'.
1891cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxrt.dll'.
1892cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
1893cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'version.dll'.
1894cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
1895cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
1896cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
1897cac.a24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll)WinVerifyTrust
1898cac.a24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
1899cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1900cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1901cac.a24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1902cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1903cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1904cac.a24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1905cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
1906cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
1907cac.a24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1908cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
1909cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume2\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
1910cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000660 pwszName=\Device\HarddiskVolume2\Windows\System32\version.dll
1911cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1912cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1913cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=87F58E3B93CDFEB987BC8B5880D3F0366E3D8203
1914cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\version.dll'
1915cac.a24: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1916cac.a24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1917cac.a24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\version.dll)WinVerifyTrust
1918cac.a24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\version.dll
1919cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1920cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1921cac.a24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1922cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
1923cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
1924cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
1925cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
1926cac.a24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
1927cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'psapi.dll'...
1928cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'psapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\psapi.dll' [rcNtRedir=0xc0150008]
1929cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000066c pwszName=\Device\HarddiskVolume2\Windows\System32\psapi.dll
1930cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1931cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1932cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B8C4B546A3AFC4BE73BF28FF4C3BEDCA0C703EA7
1933cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\psapi.dll'
1934cac.a24: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1935cac.a24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\psapi.dll)WinVerifyTrust
1936cac.a24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\psapi.dll
1937cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1938cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1939cac.a24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1940cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1941cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1942cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1943cac.a24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1944cac.a24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0278740c:C:\Program Files\Oracle\VirtualBox;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1945cac.a24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
1946cac.a24: supR3HardenedDllNotificationCallback: load 6ae10000 LB 0x004f1000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
1947cac.a24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
1948cac.a24: supR3HardenedDllNotificationCallback: load 756e0000 LB 0x00005000 C:\Windows\system32\PSAPI.DLL [fFlags=0x0]
1949cac.a24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\psapi.dll
1950cac.a24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\version.dll
1951cac.a24: supR3HardenedDllNotificationCallback: load 745a0000 LB 0x00009000 C:\Windows\system32\VERSION.dll [fFlags=0x0]
1952cac.a24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\version.dll
1953cac.a24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6ae10000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
1954cac.a24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1955cac.a24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=027751f4:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1956cac.a24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76080000 'C:\Windows\system32\oleaut32.dll'
1957cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000065c pwszName=\Device\HarddiskVolume2\Windows\System32\sxs.dll
1958cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
1959cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
1960cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=79CE8A02BDEAE624679BB2A7290B3C61ADC51853
1961cac.a24: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\sxs.dll'
1962cac.a24: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1963cac.a24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sxs.dll)WinVerifyTrust
1964cac.a24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sxs.dll
1965cac.a24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SXS.DLL (Input=SXS.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0085847c:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1966cac.a24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sxs.dll
1967cac.a24: supR3HardenedDllNotificationCallback: load 75020000 LB 0x0005f000 C:\Windows\system32\SXS.DLL [fFlags=0x0]
1968cac.a24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sxs.dll
1969cac.a24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75020000 'C:\Windows\system32\SXS.DLL'
1970cac.a24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76110000 'C:\Windows\system32\ADVAPI32.dll'
1971cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1972cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858724:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1973cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76080000 'C:\Windows\system32\OLEAUT32.dll'
1974cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76110000 'C:\Windows\system32\ADVAPI32.dll'
1975cac.82c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
1976cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0085836c:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1977cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll'
1978cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75bc0000 'C:\Windows\system32\gdi32.dll'
1979cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75c10000 'C:\Windows\system32\user32.dll'
1980cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1981cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858c74:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1982cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76270000 'C:\Windows\system32\shell32.dll'
1983cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1984cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858cfc:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1985cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75f20000 'C:\Windows\system32\ole32.dll'
1986cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1987cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858d84:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1988cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76270000 'C:\Windows\system32\shell32.dll'
1989cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
1990cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858d84:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1991cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76270000 'C:\Windows\system32\shell32.dll'
1992cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1993cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858d84:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1994cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75f20000 'C:\Windows\system32\ole32.dll'
1995cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1996cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858d84:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1997cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76080000 'C:\Windows\system32\OLEAUT32.dll'
1998cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000aa4 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
1999cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2000cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2001cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DFAE9B283A50E4A3D49C9E7E37A89888A2B4A44D
2002cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll'
2003cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2004cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2005cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'wbemcomn.dll'.
2006cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
2007cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
2008cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
2009cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ws2_32.dll'.
2010cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll)WinVerifyTrust
2011cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2012cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2013cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2014cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2015cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2016cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2017cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2018cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2019cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2020cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2021cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
2022cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
2023cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000aac pwszName=\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2024cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2025cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2026cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E79947DA232978EB549EB8D34A29D88973B71D91
2027cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll'
2028cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2029cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2030cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
2031cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
2032cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
2033cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ws2_32.dll'.
2034cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll)WinVerifyTrust
2035cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2036cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2037cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2038cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2039cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2040cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2041cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2042cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2043cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
2044cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2045cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2046cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2047cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2048cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2049cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2050cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02777364:C:\Windows\system32\wbem;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2051cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2052cac.82c: supR3HardenedDllNotificationCallback: load 72680000 LB 0x0000a000 C:\Windows\system32\wbem\wbemprox.dll [fFlags=0x0]
2053cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2054cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2055cac.82c: supR3HardenedDllNotificationCallback: load 73150000 LB 0x0005c000 C:\Windows\system32\wbemcomn.dll [fFlags=0x0]
2056cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2057cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72680000 'C:\Windows\system32\wbem\wbemprox.dll'
2058cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000adc pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2059cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2060cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2061cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3338693857D113001E407F1B201A10C276605B11
2062cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll'
2063cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2064cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2065cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
2066cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll)WinVerifyTrust
2067cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2068cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2069cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2070cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2071cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2072cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02777364:C:\Windows\system32\wbem;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2073cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2074cac.82c: supR3HardenedDllNotificationCallback: load 722b0000 LB 0x0000f000 C:\Windows\system32\wbem\wbemsvc.dll [fFlags=0x0]
2075cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2076cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=722b0000 'C:\Windows\system32\wbem\wbemsvc.dll'
2077cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ae4 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2078cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2079cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2080cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8BC82FF6EDA44F553393099F53D4AED926C6283B
2081cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll'
2082cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2083cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2084cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'wbemcomn.dll'.
2085cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
2086cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
2087cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
2088cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ntdsapi.dll'.
2089cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll)WinVerifyTrust
2090cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2091cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntdsapi.dll'...
2092cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntdsapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\ntdsapi.dll' [rcNtRedir=0xc0150008]
2093cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000ac4 pwszName=\Device\HarddiskVolume2\Windows\System32\ntdsapi.dll
2094cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2095cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2096cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BD41341CF1BA6E0043138C5705ABB177F2ED6AAD
2097cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\ntdsapi.dll'
2098cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2099cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2100cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
2101cac.82c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'ws2_32.dll'.
2102cac.82c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdsapi.dll)WinVerifyTrust
2103cac.82c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdsapi.dll
2104cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2105cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2106cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2107cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2108cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2109cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2110cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
2111cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
2112cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2113cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2114cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2115cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2116cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2117cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2118cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2119cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2120cac.82c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
2121cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2122cac.82c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2123cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=02777364:C:\Windows\system32\wbem;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2124cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2125cac.82c: supR3HardenedDllNotificationCallback: load 72690000 LB 0x00096000 C:\Windows\system32\wbem\fastprox.dll [fFlags=0x0]
2126cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2127cac.82c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntdsapi.dll
2128cac.82c: supR3HardenedDllNotificationCallback: load 73080000 LB 0x00018000 C:\Windows\system32\NTDSAPI.dll [fFlags=0x0]
2129cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntdsapi.dll
2130cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=72690000 'C:\Windows\system32\wbem\fastprox.dll'
2131cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76080000 'C:\Windows\system32\OLEAUT32.dll'
2132cac.82c: supR3HardenedMonitor_LdrLoadDll: 'C:\Windows\system32\comctl32.dll' -> 'C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll' [redir]
2133cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll [redoing WinVerifyTrust]
2134cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000508 pwszName=\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll
2135cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2136cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2137cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6F6BC11030E34EE31C1BFA1892BB38C959ED836D
2138cac.82c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3059317~31bf3856ad364e35~x86~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll'
2139cac.82c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2140cac.82c: supR3HardenedScreenImage/LdrLoadDll: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll'
2141cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll (Input=C:\Windows\system32\comctl32.dll, rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00858834:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2142cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6b4d0000 'C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll'
2143cac.82c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
2144cac.82c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINMM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858834:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2145cac.82c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=71340000 'C:\Windows\system32\WINMM.dll'
2146cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2147cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ndis.sys'.
2148cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'hal.dll'.
2149cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetAdp6.sys)
2150cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetAdp6.sys
2151cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetAdp6.sys [avoiding WinVerifyTrust]
2152cac.730: \Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetLwf.sys: Owner is administrators group.
2153cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2154cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2155cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ndis.sys'.
2156cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'netio.sys'.
2157cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetLwf.sys)
2158cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetLwf.sys
2159cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetLwf.sys [avoiding WinVerifyTrust]
2160cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2161cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2162cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\VBoxUSBMon.sys)
2163cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\VBoxUSBMon.sys
2164cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\VBoxUSBMon.sys [avoiding WinVerifyTrust]
2165cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2166cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2167cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\VBoxDrv.sys)
2168cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\VBoxDrv.sys
2169cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\VBoxDrv.sys [avoiding WinVerifyTrust]
2170cac.c40: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\drivers\VBoxDrv.sys'
2171cac.c40: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\drivers\VBoxUSBMon.sys'
2172cac.c40: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetLwf.sys'
2173cac.c40: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\drivers\VBoxNetAdp6.sys'
2174cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2175cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
2176cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2177cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
2178cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll)WinVerifyTrust
2179cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
2180cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2181cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2182cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2183cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2184cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
2185cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
2186cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2187cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2188cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2189cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2190cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2191cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2192cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'kdcom.dll'.
2193cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'pshed.dll'.
2194cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\hal.dll)WinVerifyTrust
2195cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\hal.dll
2196cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2197cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2198cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'pshed.dll'.
2199cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2200cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'bootvid.dll'.
2201cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'kdcom.dll'.
2202cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'clfs.sys'.
2203cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ci.dll'.
2204cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe)WinVerifyTrust
2205cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2206cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2207cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2208cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2209cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2210cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2211cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2212cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netio.sys'...
2213cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'netio.sys' -> '\Device\HarddiskVolume2\Windows\System32\drivers\netio.sys' [rcNtRedir=0xc0150008]
2214cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2215cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2216cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ndis.sys'.
2217cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msrpc.sys'.
2218cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\netio.sys)WinVerifyTrust
2219cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\netio.sys
2220cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ndis.sys'...
2221cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ndis.sys' -> '\Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys' [rcNtRedir=0xc0150008]
2222cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2223cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2224cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'netio.sys'.
2225cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys)WinVerifyTrust
2226cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys
2227cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2228cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2229cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2230cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2231cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2232cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2233cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2234cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2235cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2236cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ndis.sys'...
2237cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ndis.sys' -> '\Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys' [rcNtRedir=0xc0150008]
2238cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys
2239cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2240cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2241cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2242cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netio.sys'...
2243cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'netio.sys' -> '\Device\HarddiskVolume2\Windows\System32\drivers\netio.sys' [rcNtRedir=0xc0150008]
2244cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\netio.sys
2245cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2246cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2247cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2248cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2249cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2250cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2251cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msrpc.sys'...
2252cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'msrpc.sys' -> '\Device\HarddiskVolume2\Windows\System32\drivers\msrpc.sys' [rcNtRedir=0xc0150008]
2253cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2254cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\drivers\msrpc.sys)WinVerifyTrust
2255cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\drivers\msrpc.sys
2256cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ndis.sys'...
2257cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ndis.sys' -> '\Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys' [rcNtRedir=0xc0150008]
2258cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\drivers\ndis.sys
2259cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2260cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2261cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2262cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2263cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2264cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2265cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ci.dll'...
2266cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ci.dll' -> '\Device\HarddiskVolume2\Windows\System32\ci.dll' [rcNtRedir=0xc0150008]
2267cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2268cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ci.dll)WinVerifyTrust
2269cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ci.dll
2270cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'clfs.sys'...
2271cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'clfs.sys' -> '\Device\HarddiskVolume2\Windows\System32\clfs.sys' [rcNtRedir=0xc0150008]
2272cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2273cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2274cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clfs.sys)WinVerifyTrust
2275cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clfs.sys
2276cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'kdcom.dll'...
2277cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'kdcom.dll' -> '\Device\HarddiskVolume2\Windows\System32\kdcom.dll' [rcNtRedir=0xc0150008]
2278cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2279cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2280cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kdcom.dll)WinVerifyTrust
2281cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kdcom.dll
2282cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bootvid.dll'...
2283cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'bootvid.dll' -> '\Device\HarddiskVolume2\Windows\System32\bootvid.dll' [rcNtRedir=0xc0150008]
2284cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2285cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2286cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\BOOTVID.DLL)WinVerifyTrust
2287cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\BOOTVID.DLL
2288cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2289cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2290cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2291cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'pshed.dll'...
2292cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'pshed.dll' -> '\Device\HarddiskVolume2\Windows\System32\pshed.dll' [rcNtRedir=0xc0150008]
2293cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ntoskrnl.exe'.
2294cac.c40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'hal.dll'.
2295cac.c40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\PSHED.DLL)WinVerifyTrust
2296cac.c40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\PSHED.DLL
2297cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'pshed.dll'...
2298cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'pshed.dll' -> '\Device\HarddiskVolume2\Windows\System32\pshed.dll' [rcNtRedir=0xc0150008]
2299cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\PSHED.DLL
2300cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'kdcom.dll'...
2301cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'kdcom.dll' -> '\Device\HarddiskVolume2\Windows\System32\kdcom.dll' [rcNtRedir=0xc0150008]
2302cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kdcom.dll
2303cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2304cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2305cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2306cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2307cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2308cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2309cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2310cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2311cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2312cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2313cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2314cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\hal.dll
2315cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2316cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2317cac.c40: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe
2318cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2319cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2320cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2321cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2322cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'hal.dll'...
2323cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'hal.dll' -> '\Device\HarddiskVolume2\Windows\System32\hal.dll' [rcNtRedir=0xc0150008]
2324cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2325cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2326cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2327cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2328cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntoskrnl.exe'...
2329cac.c40: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntoskrnl.exe' -> '\Device\HarddiskVolume2\Windows\System32\ntoskrnl.exe' [rcNtRedir=0xc0150008]
2330cac.c40: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2331cac.c40: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
2332cac.c40: supR3HardenedDllNotificationCallback: load 6aab0000 LB 0x00009000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
2333cac.c40: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
2334cac.c40: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6aab0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
2335cac.57c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2336cac.57c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
2337cac.57c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2338cac.57c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll)WinVerifyTrust
2339cac.57c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
2340cac.57c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2341cac.57c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2342cac.57c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
2343cac.57c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
2344cac.57c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
2345cac.57c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2346cac.57c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2347cac.57c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2348cac.57c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
2349cac.57c: supR3HardenedDllNotificationCallback: load 6aa70000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
2350cac.57c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
2351cac.57c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6aa70000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
2352cac.b74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2353cac.b74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
2354cac.b74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2355cac.b74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll)WinVerifyTrust
2356cac.b74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
2357cac.b74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2358cac.b74: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2359cac.b74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
2360cac.b74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
2361cac.b74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
2362cac.b74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2363cac.b74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2364cac.b74: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2365cac.b74: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
2366cac.b74: supR3HardenedDllNotificationCallback: load 69580000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
2367cac.b74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
2368cac.b74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=69580000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
2369cac.be4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2370cac.be4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
2371cac.be4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2372cac.be4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll)WinVerifyTrust
2373cac.be4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
2374cac.be4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2375cac.be4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2376cac.be4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
2377cac.be4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
2378cac.be4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2379cac.be4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2380cac.be4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2381cac.be4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
2382cac.be4: supR3HardenedDllNotificationCallback: load 69520000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
2383cac.be4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
2384cac.be4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=69520000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
2385cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
2386cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32/Shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2387cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76270000 'C:\Windows\system32/Shell32.dll'
2388cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75f20000 'C:\Windows\system32\ole32.dll'
2389cac.730: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2390cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
2391cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
2392cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2393cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75100000 'C:\Windows\system32\profapi.dll'
2394cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
2395cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
2396cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
2397cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
2398cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM64.dll)WinVerifyTrust
2399cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM64.dll
2400cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2401cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2402cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2403cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2404cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
2405cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
2406cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2407cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2408cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2409cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxREM64.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2410cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM64.dll
2411cac.730: supR3HardenedDllNotificationCallback: load 68ec0000 LB 0x0014c000 C:\Program Files\Oracle\VirtualBox\VBoxREM64.DLL [fFlags=0x0]
2412cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM64.dll
2413cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=68ec0000 'C:\Program Files\Oracle\VirtualBox\VBoxREM64.DLL'
2414cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2415cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'dsound.dll'.
2416cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
2417cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
2418cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxddu.dll'.
2419cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'vboxdd2.dll'.
2420cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
2421cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'setupapi.dll'.
2422cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ws2_32.dll'.
2423cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'ole32.dll'.
2424cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'iphlpapi.dll'.
2425cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll)WinVerifyTrust
2426cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
2427cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
2428cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
2429cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d24 pwszName=\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
2430cac.730: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2431cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2432cac.730: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FAD8C6B06A9984F1082FA7D63E0B3AAABCA210F6
2433cac.730: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL'
2434cac.730: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2435cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2436cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'nsi.dll'.
2437cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winnsi.dll'.
2438cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
2439cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL)WinVerifyTrust
2440cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
2441cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2442cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2443cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2444cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2445cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2446cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
2447cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
2448cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
2449cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2450cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2451cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
2452cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
2453cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2454cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
2455cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2456cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll)WinVerifyTrust
2457cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2458cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
2459cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
2460cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2461cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
2462cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
2463cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
2464cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'newdev.dll'.
2465cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
2466cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll)WinVerifyTrust
2467cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
2468cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2469cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2470cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
2471cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
2472cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2473cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dsound.dll'...
2474cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'dsound.dll' -> '\Device\HarddiskVolume2\Windows\System32\dsound.dll' [rcNtRedir=0xc0150008]
2475cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d3c pwszName=\Device\HarddiskVolume2\Windows\System32\dsound.dll
2476cac.730: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2477cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2478cac.730: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=21B33CF8A06799AF36E2D0016F2A5AC0D97B1C05
2479cac.730: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\dsound.dll'
2480cac.730: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2481cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2482cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
2483cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
2484cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
2485cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winmm.dll'.
2486cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'powrprof.dll'.
2487cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dsound.dll)WinVerifyTrust
2488cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dsound.dll
2489cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2490cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2491cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
2492cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'powrprof.dll'...
2493cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'powrprof.dll' -> '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rcNtRedir=0xc0150008]
2494cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d18 pwszName=\Device\HarddiskVolume2\Windows\System32\powrprof.dll
2495cac.730: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2496cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2497cac.730: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7DE33595D32B0157063D86824D96D15D1D9B85F8
2498cac.730: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\powrprof.dll'
2499cac.730: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2500cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2501cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
2502cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
2503cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)WinVerifyTrust
2504cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
2505cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
2506cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
2507cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
2508cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2509cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2510cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2511cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2512cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2513cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2514cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2515cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2516cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2517cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2518cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'newdev.dll'...
2519cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'newdev.dll' -> '\Device\HarddiskVolume2\Windows\System32\newdev.dll' [rcNtRedir=0xc0150008]
2520cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d40 pwszName=\Device\HarddiskVolume2\Windows\System32\newdev.dll
2521cac.730: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2522cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2523cac.730: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A76062289DF8B2E5D6ADEB5E71265D9C24321CC3
2524cac.730: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat'; file='\Device\HarddiskVolume2\Windows\System32\newdev.dll'
2525cac.730: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2526cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2527cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
2528cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
2529cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
2530cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'uxtheme.dll'.
2531cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'cfgmgr32.dll'.
2532cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'setupapi.dll'.
2533cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\newdev.dll)WinVerifyTrust
2534cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\newdev.dll
2535cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
2536cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
2537cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
2538cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2539cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2540cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2541cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2542cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2543cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2544cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2545cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2546cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
2547cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
2548cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2549cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2550cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2551cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2552cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2553cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
2554cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
2555cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000d34 pwszName=\Device\HarddiskVolume2\Windows\System32\winnsi.dll
2556cac.730: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00859048
2557cac.730: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00859048
2558cac.730: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=83FA279A149B092654B141C0063E129F0A8FF628
2559cac.730: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\winnsi.dll'
2560cac.730: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2561cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2562cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
2563cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'nsi.dll'.
2564cac.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winnsi.dll)WinVerifyTrust
2565cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winnsi.dll
2566cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
2567cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
2568cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll
2569cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2570cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2571cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
2572cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
2573cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll
2574cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2575cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2576cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2577cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2578cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
2579cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
2580cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
2581cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
2582cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
2583cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
2584cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uxtheme.dll'...
2585cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'uxtheme.dll' -> '\Device\HarddiskVolume2\Windows\System32\uxtheme.dll' [rcNtRedir=0xc0150008]
2586cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
2587cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2588cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2589cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2590cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2591cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2592cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2593cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2594cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
2595cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
2596cac.730: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
2597cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2598cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2599cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2600cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2601cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2602cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
2603cac.730: supR3HardenedDllNotificationCallback: load 68660000 LB 0x0085a000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
2604cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
2605cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
2606cac.730: supR3HardenedDllNotificationCallback: load 691b0000 LB 0x00072000 C:\Windows\system32\DSOUND.dll [fFlags=0x0]
2607cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
2608cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\powrprof.dll
2609cac.730: supR3HardenedDllNotificationCallback: load 74460000 LB 0x00025000 C:\Windows\system32\POWRPROF.dll [fFlags=0x0]
2610cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\powrprof.dll
2611cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
2612cac.730: supR3HardenedDllNotificationCallback: load 6ad70000 LB 0x0004f000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
2613cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
2614cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\newdev.dll
2615cac.730: supR3HardenedDllNotificationCallback: load 6adc0000 LB 0x0004f000 C:\Windows\system32\newdev.dll [fFlags=0x0]
2616cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\newdev.dll
2617cac.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2618cac.730: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\devrtl.dll)
2619cac.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devrtl.dll
2620cac.730: supR3HardenedDllNotificationCallback: load 74c20000 LB 0x0000e000 C:\Windows\system32\devrtl.DLL [fFlags=0x0]
2621cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll [avoiding WinVerifyTrust]
2622cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2623cac.730: supR3HardenedDllNotificationCallback: load 69170000 LB 0x00032000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
2624cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2625cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
2626cac.730: supR3HardenedDllNotificationCallback: load 73250000 LB 0x0001c000 C:\Windows\system32\IPHLPAPI.DLL [fFlags=0x0]
2627cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
2628cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll
2629cac.730: supR3HardenedDllNotificationCallback: load 73240000 LB 0x00007000 C:\Windows\system32\WINNSI.DLL [fFlags=0x0]
2630cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll
2631cac.730: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\devrtl.dll'.
2632cac.730: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\devrtl.dll' [rescheduled]
2633cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
2634cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2635cac.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2636cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\DSOUND.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00857d0c:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2637cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=691b0000 'C:\Windows\system32\DSOUND.dll'
2638cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=68660000 'C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL'
2639cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
2640cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2641cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
2642cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6ae10000 'C:\Program Files\Oracle\VirtualBox/VBoxC.DLL'
2643cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2644cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00858614:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2645cac.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2646cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=69170000 'C:\Program Files\Oracle\VirtualBox/VBoxDD2.DLL'
2647cac.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
2648cac.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0085836c:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
2649cac.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=75190000 'C:\Windows\system32\crypt32.dll'
2650cac.f04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=76080000 'C:\Windows\system32\OLEAUT32.dll'
2651cac.730: supR3HardenedDllNotificationCallback: Unload 68660000 LB 0x0085a000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
2652cac.730: supR3HardenedDllNotificationCallback: Unload 73250000 LB 0x0001c000 C:\Windows\system32\IPHLPAPI.DLL [flags=0x0]
2653cac.730: supR3HardenedDllNotificationCallback: Unload 73240000 LB 0x00007000 C:\Windows\system32\WINNSI.DLL [flags=0x0]
2654cac.730: supR3HardenedDllNotificationCallback: Unload 69170000 LB 0x00032000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
2655cac.730: supR3HardenedDllNotificationCallback: Unload 6ad70000 LB 0x0004f000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
2656cac.730: supR3HardenedDllNotificationCallback: Unload 6adc0000 LB 0x0004f000 C:\Windows\system32\newdev.dll [flags=0x0]
2657cac.730: supR3HardenedDllNotificationCallback: Unload 68ec0000 LB 0x0014c000 C:\Program Files\Oracle\VirtualBox\VBoxREM64.DLL [flags=0x0]
2658cac.be4: supR3HardenedDllNotificationCallback: Unload 69520000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
2659cac.b74: supR3HardenedDllNotificationCallback: Unload 69580000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
2660cac.57c: supR3HardenedDllNotificationCallback: Unload 6aa70000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
2661cac.c40: supR3HardenedDllNotificationCallback: Unload 6aab0000 LB 0x00009000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
2662cac.82c: Terminating the normal way: rcExit=1
2663898.89c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 3130 ms, the end);
26644f8.3dc: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 3495 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy