VirtualBox

Ticket #17667: hio-2018-04-05-19-57-04.log

File hio-2018-04-05-19-57-04.log, 346.8 KB (added by yrup, 6 years ago)
Line 
19dc.654: Log file opened: 5.2.8r121009 g_hStartupLog=0000000000000010 g_uNtVerCombined=0x63258000
29dc.654: \SystemRoot\System32\ntdll.dll:
39dc.654: CreationTime: 2017-10-16T19:54:07.157208400Z
49dc.654: LastWriteTime: 2017-09-14T19:30:03.323018300Z
59dc.654: ChangeTime: 2017-10-17T19:05:32.070419900Z
69dc.654: FileAttributes: 0x20
79dc.654: Size: 0x1a8380
89dc.654: NT Headers: 0xd8
99dc.654: Timestamp: 0x59ba86db
109dc.654: Machine: 0x8664 - amd64
119dc.654: Timestamp: 0x59ba86db
129dc.654: Image Version: 6.3
139dc.654: SizeOfImage: 0x1ad000 (1757184)
149dc.654: Resource Dir: 0x149000 LB 0x62558
159dc.654: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
169dc.654: [Raw version resource data: 0x1490f0 LB 0x380, codepage 0x0 (reserved 0x0)]
179dc.654: ProductName: Microsoft® Windows® Operating System
189dc.654: ProductVersion: 6.3.9600.18821
199dc.654: FileVersion: 6.3.9600.18821 (winblue_ltsb.170914-0600)
209dc.654: FileDescription: NT Layer DLL
219dc.654: \SystemRoot\System32\kernel32.dll:
229dc.654: CreationTime: 2015-03-11T19:04:06.740954300Z
239dc.654: LastWriteTime: 2014-10-29T04:09:24.572407200Z
249dc.654: ChangeTime: 2017-05-20T15:41:01.234277000Z
259dc.654: FileAttributes: 0x20
269dc.654: Size: 0x13fc30
279dc.654: NT Headers: 0xf8
289dc.654: Timestamp: 0x545054ca
299dc.654: Machine: 0x8664 - amd64
309dc.654: Timestamp: 0x545054ca
319dc.654: Image Version: 6.3
329dc.654: SizeOfImage: 0x13e000 (1302528)
339dc.654: Resource Dir: 0x12e000 LB 0x518
349dc.654: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
359dc.654: [Raw version resource data: 0x12e0b0 LB 0x3a0, codepage 0x0 (reserved 0x0)]
369dc.654: ProductName: Microsoft® Windows® Operating System
379dc.654: ProductVersion: 6.3.9600.17415
389dc.654: FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
399dc.654: FileDescription: Windows NT BASE API Client DLL
409dc.654: \SystemRoot\System32\KernelBase.dll:
419dc.654: CreationTime: 2017-05-13T16:29:20.554917700Z
429dc.654: LastWriteTime: 2017-04-16T10:18:18.410948600Z
439dc.654: ChangeTime: 2017-05-20T15:41:01.674536800Z
449dc.654: FileAttributes: 0x20
459dc.654: Size: 0x1152b8
469dc.654: NT Headers: 0xf0
479dc.654: Timestamp: 0x58f33794
489dc.654: Machine: 0x8664 - amd64
499dc.654: Timestamp: 0x58f33794
509dc.654: Image Version: 6.3
519dc.654: SizeOfImage: 0x115000 (1134592)
529dc.654: Resource Dir: 0x110000 LB 0x3530
539dc.654: [Version info resource found at 0x108! (ID/Name: 0x1; SubID/SubName: 0x409)]
549dc.654: [Raw version resource data: 0x110120 LB 0x3bc, codepage 0x0 (reserved 0x0)]
559dc.654: ProductName: Microsoft® Windows® Operating System
569dc.654: ProductVersion: 6.3.9600.18666
579dc.654: FileVersion: 6.3.9600.18666 (winblue_ltsb.170415-2040)
589dc.654: FileDescription: Windows NT BASE API Client DLL
599dc.654: \SystemRoot\System32\apisetschema.dll:
609dc.654: CreationTime: 2016-12-14T00:59:37.997134300Z
619dc.654: LastWriteTime: 2016-10-10T18:18:15.035158100Z
629dc.654: ChangeTime: 2016-12-21T13:12:20.294745300Z
639dc.654: FileAttributes: 0x20
649dc.654: Size: 0x11158
659dc.654: NT Headers: 0xd0
669dc.654: Timestamp: 0x57fa67ee
679dc.654: Machine: 0x8664 - amd64
689dc.654: Timestamp: 0x57fa67ee
699dc.654: Image Version: 6.3
709dc.654: SizeOfImage: 0x12000 (73728)
719dc.654: Resource Dir: 0x11000 LB 0x3f8
729dc.654: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
739dc.654: [Raw version resource data: 0x11060 LB 0x398, codepage 0x0 (reserved 0x0)]
749dc.654: ProductName: Microsoft® Windows® Operating System
759dc.654: ProductVersion: 6.3.9600.18513
769dc.654: FileVersion: 6.3.9600.18513 (winblue_ltsb.161009-0600)
779dc.654: FileDescription: ApiSet Schema DLL
789dc.654: NtOpenDirectoryObject failed on \Driver: 0xc0000022
799dc.654: supR3HardenedWinFindAdversaries: 0x0
809dc.654: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
819dc.654: Calling main()
829dc.654: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
839dc.654: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
849dc.654: SUPR3HardenedMain: Respawn #1
859dc.654: System32: \Device\HarddiskVolume8\Windows\System32
869dc.654: WinSxS: \Device\HarddiskVolume8\Windows\WinSxS
879dc.654: KnownDllPath: C:\WINDOWS\system32
889dc.654: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
899dc.654: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
909dc.654: supR3HardNtEnableThreadCreation:
919dc.654: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9f6ad8c90 pvNtTerminateThread=00007ff9f6b50c00
929dc.654: supR3HardenedWinDoReSpawn(1): New child 324.1500 [kernel32].
939dc.654: supR3HardNtChildGatherData: PebBaseAddress=00007ff6b0e48000 cbPeb=0x388
949dc.654: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9f6ac0000 uNtDllChildAddr=00007ff9f6ac0000
959dc.654: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9f6ad8c90
969dc.654: supR3HardenedWinSetupChildInit: Start child.
979dc.654: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
989dc.654: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 31 sleeps
999dc.654: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1009dc.654: *0000000000000000-0000000000fbffff 0x0001/0x0000 0x0000000
1019dc.654: *0000000000fc0000-0000000000fdffff 0x0004/0x0004 0x0020000
1029dc.654: *0000000000fe0000-0000000000feefff 0x0002/0x0002 0x0040000
1039dc.654: 0000000000fef000-0000000000feffff 0x0001/0x0000 0x0000000
1049dc.654: *0000000000ff0000-00000000010eafff 0x0000/0x0004 0x0020000
1059dc.654: 00000000010eb000-00000000010edfff 0x0104/0x0004 0x0020000
1069dc.654: 00000000010ee000-00000000010effff 0x0004/0x0004 0x0020000
1079dc.654: *00000000010f0000-00000000010f3fff 0x0002/0x0002 0x0040000
1089dc.654: 00000000010f4000-00000000010fffff 0x0001/0x0000 0x0000000
1099dc.654: *0000000001100000-0000000001101fff 0x0004/0x0004 0x0020000
1109dc.654: 0000000001102000-000000007ffdffff 0x0001/0x0000 0x0000000
1119dc.654: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1129dc.654: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
1139dc.654: 000000007fff0000-00007ff6b0e1ffff 0x0001/0x0000 0x0000000
1149dc.654: *00007ff6b0e20000-00007ff6b0e42fff 0x0002/0x0002 0x0040000
1159dc.654: 00007ff6b0e43000-00007ff6b0e47fff 0x0001/0x0000 0x0000000
1169dc.654: *00007ff6b0e48000-00007ff6b0e48fff 0x0004/0x0004 0x0020000
1179dc.654: 00007ff6b0e49000-00007ff6b0e4dfff 0x0001/0x0000 0x0000000
1189dc.654: *00007ff6b0e4e000-00007ff6b0e4ffff 0x0004/0x0004 0x0020000
1199dc.654: 00007ff6b0e50000-00007ff6b124ffff 0x0001/0x0000 0x0000000
1209dc.654: *00007ff6b1250000-00007ff6b1250fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1219dc.654: 00007ff6b1251000-00007ff6b12c1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1229dc.654: 00007ff6b12c2000-00007ff6b12c2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1239dc.654: 00007ff6b12c3000-00007ff6b1308fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1249dc.654: 00007ff6b1309000-00007ff6b1309fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1259dc.654: 00007ff6b130a000-00007ff6b130afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1269dc.654: 00007ff6b130b000-00007ff6b130ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1279dc.654: 00007ff6b1310000-00007ff6b1310fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1289dc.654: 00007ff6b1311000-00007ff6b1311fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1299dc.654: 00007ff6b1312000-00007ff6b1315fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1309dc.654: 00007ff6b1316000-00007ff6b135dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
1319dc.654: 00007ff6b135e000-00007ff9f6abffff 0x0001/0x0000 0x0000000
1329dc.654: *00007ff9f6ac0000-00007ff9f6ac0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1339dc.654: 00007ff9f6ac1000-00007ff9f6bedfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1349dc.654: 00007ff9f6bee000-00007ff9f6bf3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1359dc.654: 00007ff9f6bf4000-00007ff9f6c00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1369dc.654: 00007ff9f6c01000-00007ff9f6c01fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1379dc.654: 00007ff9f6c02000-00007ff9f6c04fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1389dc.654: 00007ff9f6c05000-00007ff9f6c05fff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1399dc.654: 00007ff9f6c06000-00007ff9f6c6cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
1409dc.654: 00007ff9f6c6d000-00007ffffffdffff 0x0001/0x0000 0x0000000
1419dc.654: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
1429dc.654: VirtualBox.exe: timestamp 0x5a942b95 (rc=VINF_SUCCESS)
1439dc.654: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1449dc.654: '\Device\HarddiskVolume8\Windows\System32\ntdll.dll' has no imports
1459dc.654: supR3HardNtChildPurify: Done after 315 ms and 0 fixes (loop #0).
146324.1500: Log file opened: 5.2.8r121009 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x63258000
147324.1500: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9f6ac0000 g_uNtVerCombined=0x63258000
1489dc.654: supR3HardNtEnableThreadCreation:
149324.1500: ntdll.dll: timestamp 0x59ba86db (rc=VINF_SUCCESS)
150324.1500: New simple heap: #1 0000000001210000 LB 0x400000 (for 1757184 allocation)
151324.1500: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
152324.1500: System32: \Device\HarddiskVolume8\Windows\System32
153324.1500: WinSxS: \Device\HarddiskVolume8\Windows\WinSxS
154324.1500: KnownDllPath: C:\WINDOWS\system32
155324.1500: supR3HardenedVmProcessInit: Opening vboxdrv stub...
156324.1500: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
157324.1500: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
158324.1500: Registered Dll notification callback with NTDLL.
159324.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\kernel32.dll)
160324.1500: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\kernel32.dll
161324.1500: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
162324.1500: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
163324.1500: supR3HardenedDllNotificationCallback: load 00007ff9f3d20000 LB 0x00115000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
164324.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\KernelBase.dll)
165324.1500: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\KernelBase.dll
166324.1500: supR3HardenedDllNotificationCallback: load 00007ff9f6970000 LB 0x0013e000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
167324.1500: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
168324.1500: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f6970000 'C:\WINDOWS\system32\KERNEL32.DLL'
169324.1500: supR3HardenedDllNotificationCallback: load 00007ff6b1250000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
170324.1500: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
171324.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
172324.1500: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
173324.1500: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9f6ad8c90 pvNtTerminateThread=00007ff9f6b50c00
1749dc.654: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 64 ms.
175324.1500: \SystemRoot\System32\ntdll.dll:
176324.1500: CreationTime: 2017-10-16T19:54:07.157208400Z
177324.1500: LastWriteTime: 2017-09-14T19:30:03.323018300Z
178324.1500: ChangeTime: 2017-10-17T19:05:32.070419900Z
179324.1500: FileAttributes: 0x20
180324.1500: Size: 0x1a8380
181324.1500: NT Headers: 0xd8
182324.1500: Timestamp: 0x59ba86db
183324.1500: Machine: 0x8664 - amd64
184324.1500: Timestamp: 0x59ba86db
185324.1500: Image Version: 6.3
186324.1500: SizeOfImage: 0x1ad000 (1757184)
187324.1500: Resource Dir: 0x149000 LB 0x62558
188324.1500: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
189324.1500: [Raw version resource data: 0x1490f0 LB 0x380, codepage 0x0 (reserved 0x0)]
190324.1500: ProductName: Microsoft® Windows® Operating System
191324.1500: ProductVersion: 6.3.9600.18821
192324.1500: FileVersion: 6.3.9600.18821 (winblue_ltsb.170914-0600)
193324.1500: FileDescription: NT Layer DLL
194324.1500: \SystemRoot\System32\kernel32.dll:
195324.1500: CreationTime: 2015-03-11T19:04:06.740954300Z
196324.1500: LastWriteTime: 2014-10-29T04:09:24.572407200Z
197324.1500: ChangeTime: 2017-05-20T15:41:01.234277000Z
198324.1500: FileAttributes: 0x20
199324.1500: Size: 0x13fc30
200324.1500: NT Headers: 0xf8
201324.1500: Timestamp: 0x545054ca
202324.1500: Machine: 0x8664 - amd64
203324.1500: Timestamp: 0x545054ca
204324.1500: Image Version: 6.3
205324.1500: SizeOfImage: 0x13e000 (1302528)
206324.1500: Resource Dir: 0x12e000 LB 0x518
207324.1500: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
208324.1500: [Raw version resource data: 0x12e0b0 LB 0x3a0, codepage 0x0 (reserved 0x0)]
209324.1500: ProductName: Microsoft® Windows® Operating System
210324.1500: ProductVersion: 6.3.9600.17415
211324.1500: FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
212324.1500: FileDescription: Windows NT BASE API Client DLL
213324.1500: \SystemRoot\System32\KernelBase.dll:
214324.1500: CreationTime: 2017-05-13T16:29:20.554917700Z
215324.1500: LastWriteTime: 2017-04-16T10:18:18.410948600Z
216324.1500: ChangeTime: 2017-05-20T15:41:01.674536800Z
217324.1500: FileAttributes: 0x20
218324.1500: Size: 0x1152b8
219324.1500: NT Headers: 0xf0
220324.1500: Timestamp: 0x58f33794
221324.1500: Machine: 0x8664 - amd64
222324.1500: Timestamp: 0x58f33794
223324.1500: Image Version: 6.3
224324.1500: SizeOfImage: 0x115000 (1134592)
225324.1500: Resource Dir: 0x110000 LB 0x3530
226324.1500: [Version info resource found at 0x108! (ID/Name: 0x1; SubID/SubName: 0x409)]
227324.1500: [Raw version resource data: 0x110120 LB 0x3bc, codepage 0x0 (reserved 0x0)]
228324.1500: ProductName: Microsoft® Windows® Operating System
229324.1500: ProductVersion: 6.3.9600.18666
230324.1500: FileVersion: 6.3.9600.18666 (winblue_ltsb.170415-2040)
231324.1500: FileDescription: Windows NT BASE API Client DLL
232324.1500: \SystemRoot\System32\apisetschema.dll:
233324.1500: CreationTime: 2016-12-14T00:59:37.997134300Z
234324.1500: LastWriteTime: 2016-10-10T18:18:15.035158100Z
235324.1500: ChangeTime: 2016-12-21T13:12:20.294745300Z
236324.1500: FileAttributes: 0x20
237324.1500: Size: 0x11158
238324.1500: NT Headers: 0xd0
239324.1500: Timestamp: 0x57fa67ee
240324.1500: Machine: 0x8664 - amd64
241324.1500: Timestamp: 0x57fa67ee
242324.1500: Image Version: 6.3
243324.1500: SizeOfImage: 0x12000 (73728)
244324.1500: Resource Dir: 0x11000 LB 0x3f8
245324.1500: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
246324.1500: [Raw version resource data: 0x11060 LB 0x398, codepage 0x0 (reserved 0x0)]
247324.1500: ProductName: Microsoft® Windows® Operating System
248324.1500: ProductVersion: 6.3.9600.18513
249324.1500: FileVersion: 6.3.9600.18513 (winblue_ltsb.161009-0600)
250324.1500: FileDescription: ApiSet Schema DLL
251324.1500: NtOpenDirectoryObject failed on \Driver: 0xc0000022
252324.1500: supR3HardenedWinFindAdversaries: 0x0
253324.1500: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
254324.1500: Calling main()
255324.1500: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
256324.1500: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
257324.1500: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
258324.1500: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
259324.1500: SUPR3HardenedMain: Respawn #2
260324.1500: supR3HardNtEnableThreadCreation:
261324.1500: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9f6ad8c90 pvNtTerminateThread=00007ff9f6b50c00
262324.1500: supR3HardenedWinDoReSpawn(2): New child 19bc.b2c [kernel32].
263324.1500: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
264324.1500: supR3HardNtChildGatherData: PebBaseAddress=00007ff6b102f000 cbPeb=0x388
265324.1500: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9f6ac0000 uNtDllChildAddr=00007ff9f6ac0000
266324.1500: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9f6ad8c90
267324.1500: supR3HardenedWinSetupChildInit: Start child.
268324.1500: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
269324.1500: supR3HardNtChildPurify: Startup delay kludge #1/0: 269 ms, 26 sleeps
270324.1500: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
271324.1500: *0000000000000000-0000000000f2ffff 0x0001/0x0000 0x0000000
272324.1500: *0000000000f30000-0000000000f4ffff 0x0004/0x0004 0x0020000
273324.1500: *0000000000f50000-0000000000f5efff 0x0002/0x0002 0x0040000
274324.1500: 0000000000f5f000-0000000000f5ffff 0x0001/0x0000 0x0000000
275324.1500: *0000000000f60000-000000000105afff 0x0000/0x0004 0x0020000
276324.1500: 000000000105b000-000000000105dfff 0x0104/0x0004 0x0020000
277324.1500: 000000000105e000-000000000105ffff 0x0004/0x0004 0x0020000
278324.1500: *0000000001060000-0000000001063fff 0x0002/0x0002 0x0040000
279324.1500: 0000000001064000-000000000106ffff 0x0001/0x0000 0x0000000
280324.1500: *0000000001070000-0000000001071fff 0x0004/0x0004 0x0020000
281324.1500: 0000000001072000-000000007ffdffff 0x0001/0x0000 0x0000000
282324.1500: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
283324.1500: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
284324.1500: 000000007fff0000-00007ff6b0ffffff 0x0001/0x0000 0x0000000
285324.1500: *00007ff6b1000000-00007ff6b1022fff 0x0002/0x0002 0x0040000
286324.1500: 00007ff6b1023000-00007ff6b102cfff 0x0001/0x0000 0x0000000
287324.1500: *00007ff6b102d000-00007ff6b102efff 0x0004/0x0004 0x0020000
288324.1500: *00007ff6b102f000-00007ff6b102ffff 0x0004/0x0004 0x0020000
289324.1500: 00007ff6b1030000-00007ff6b124ffff 0x0001/0x0000 0x0000000
290324.1500: *00007ff6b1250000-00007ff6b1250fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
291324.1500: 00007ff6b1251000-00007ff6b12c1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
292324.1500: 00007ff6b12c2000-00007ff6b12c2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
293324.1500: 00007ff6b12c3000-00007ff6b1308fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
294324.1500: 00007ff6b1309000-00007ff6b1309fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
295324.1500: 00007ff6b130a000-00007ff6b130afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
296324.1500: 00007ff6b130b000-00007ff6b130ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
297324.1500: 00007ff6b1310000-00007ff6b1310fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
298324.1500: 00007ff6b1311000-00007ff6b1311fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
299324.1500: 00007ff6b1312000-00007ff6b1315fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
300324.1500: 00007ff6b1316000-00007ff6b135dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
301324.1500: 00007ff6b135e000-00007ff9f6abffff 0x0001/0x0000 0x0000000
302324.1500: *00007ff9f6ac0000-00007ff9f6ac0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
303324.1500: 00007ff9f6ac1000-00007ff9f6bedfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
304324.1500: 00007ff9f6bee000-00007ff9f6bf3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
305324.1500: 00007ff9f6bf4000-00007ff9f6c00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
306324.1500: 00007ff9f6c01000-00007ff9f6c01fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
307324.1500: 00007ff9f6c02000-00007ff9f6c04fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
308324.1500: 00007ff9f6c05000-00007ff9f6c05fff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
309324.1500: 00007ff9f6c06000-00007ff9f6c6cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume8\Windows\System32\ntdll.dll
310324.1500: 00007ff9f6c6d000-00007ffffffdffff 0x0001/0x0000 0x0000000
311324.1500: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
312324.1500: VirtualBox.exe: timestamp 0x5a942b95 (rc=VINF_SUCCESS)
313324.1500: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
314324.1500: '\Device\HarddiskVolume8\Windows\System32\ntdll.dll' has no imports
315324.1500: supR3HardNtChildPurify: Done after 316 ms and 0 fixes (loop #0).
31619bc.b2c: Log file opened: 5.2.8r121009 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x63258000
31719bc.b2c: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9f6ac0000 g_uNtVerCombined=0x63258000
31819bc.b2c: ntdll.dll: timestamp 0x59ba86db (rc=VINF_SUCCESS)
31919bc.b2c: New simple heap: #1 0000000001180000 LB 0x400000 (for 1757184 allocation)
320324.1500: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001210000 LB 0x400000)
321324.1500: supR3HardNtEnableThreadCreation:
32219bc.b2c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
32319bc.b2c: System32: \Device\HarddiskVolume8\Windows\System32
32419bc.b2c: WinSxS: \Device\HarddiskVolume8\Windows\WinSxS
32519bc.b2c: KnownDllPath: C:\WINDOWS\system32
32619bc.b2c: supR3HardenedVmProcessInit: Opening vboxdrv...
32719bc.b2c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
32819bc.b2c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
32919bc.b2c: Registered Dll notification callback with NTDLL.
33019bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\kernel32.dll)
33119bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\kernel32.dll
33219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
33319bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
33419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3d20000 LB 0x00115000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
33519bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\KernelBase.dll)
33619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\KernelBase.dll
33719bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f6970000 LB 0x0013e000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
33819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
33919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f6970000 'C:\WINDOWS\system32\KERNEL32.DLL'
34019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff6b1250000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
34119bc.b2c: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
34219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
34319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe
34419bc.b2c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9f6ad8c90 pvNtTerminateThread=00007ff9f6b50c00
345324.1500: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 62 ms.
34619bc.b2c: \SystemRoot\System32\ntdll.dll:
34719bc.b2c: CreationTime: 2017-10-16T19:54:07.157208400Z
34819bc.b2c: LastWriteTime: 2017-09-14T19:30:03.323018300Z
34919bc.b2c: ChangeTime: 2017-10-17T19:05:32.070419900Z
35019bc.b2c: FileAttributes: 0x20
35119bc.b2c: Size: 0x1a8380
35219bc.b2c: NT Headers: 0xd8
35319bc.b2c: Timestamp: 0x59ba86db
35419bc.b2c: Machine: 0x8664 - amd64
35519bc.b2c: Timestamp: 0x59ba86db
35619bc.b2c: Image Version: 6.3
35719bc.b2c: SizeOfImage: 0x1ad000 (1757184)
35819bc.b2c: Resource Dir: 0x149000 LB 0x62558
35919bc.b2c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
36019bc.b2c: [Raw version resource data: 0x1490f0 LB 0x380, codepage 0x0 (reserved 0x0)]
36119bc.b2c: ProductName: Microsoft® Windows® Operating System
36219bc.b2c: ProductVersion: 6.3.9600.18821
36319bc.b2c: FileVersion: 6.3.9600.18821 (winblue_ltsb.170914-0600)
36419bc.b2c: FileDescription: NT Layer DLL
36519bc.b2c: \SystemRoot\System32\kernel32.dll:
36619bc.b2c: CreationTime: 2015-03-11T19:04:06.740954300Z
36719bc.b2c: LastWriteTime: 2014-10-29T04:09:24.572407200Z
36819bc.b2c: ChangeTime: 2017-05-20T15:41:01.234277000Z
36919bc.b2c: FileAttributes: 0x20
37019bc.b2c: Size: 0x13fc30
37119bc.b2c: NT Headers: 0xf8
37219bc.b2c: Timestamp: 0x545054ca
37319bc.b2c: Machine: 0x8664 - amd64
37419bc.b2c: Timestamp: 0x545054ca
37519bc.b2c: Image Version: 6.3
37619bc.b2c: SizeOfImage: 0x13e000 (1302528)
37719bc.b2c: Resource Dir: 0x12e000 LB 0x518
37819bc.b2c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
37919bc.b2c: [Raw version resource data: 0x12e0b0 LB 0x3a0, codepage 0x0 (reserved 0x0)]
38019bc.b2c: ProductName: Microsoft® Windows® Operating System
38119bc.b2c: ProductVersion: 6.3.9600.17415
38219bc.b2c: FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
38319bc.b2c: FileDescription: Windows NT BASE API Client DLL
38419bc.b2c: \SystemRoot\System32\KernelBase.dll:
38519bc.b2c: CreationTime: 2017-05-13T16:29:20.554917700Z
38619bc.b2c: LastWriteTime: 2017-04-16T10:18:18.410948600Z
38719bc.b2c: ChangeTime: 2017-05-20T15:41:01.674536800Z
38819bc.b2c: FileAttributes: 0x20
38919bc.b2c: Size: 0x1152b8
39019bc.b2c: NT Headers: 0xf0
39119bc.b2c: Timestamp: 0x58f33794
39219bc.b2c: Machine: 0x8664 - amd64
39319bc.b2c: Timestamp: 0x58f33794
39419bc.b2c: Image Version: 6.3
39519bc.b2c: SizeOfImage: 0x115000 (1134592)
39619bc.b2c: Resource Dir: 0x110000 LB 0x3530
39719bc.b2c: [Version info resource found at 0x108! (ID/Name: 0x1; SubID/SubName: 0x409)]
39819bc.b2c: [Raw version resource data: 0x110120 LB 0x3bc, codepage 0x0 (reserved 0x0)]
39919bc.b2c: ProductName: Microsoft® Windows® Operating System
40019bc.b2c: ProductVersion: 6.3.9600.18666
40119bc.b2c: FileVersion: 6.3.9600.18666 (winblue_ltsb.170415-2040)
40219bc.b2c: FileDescription: Windows NT BASE API Client DLL
40319bc.b2c: \SystemRoot\System32\apisetschema.dll:
40419bc.b2c: CreationTime: 2016-12-14T00:59:37.997134300Z
40519bc.b2c: LastWriteTime: 2016-10-10T18:18:15.035158100Z
40619bc.b2c: ChangeTime: 2016-12-21T13:12:20.294745300Z
40719bc.b2c: FileAttributes: 0x20
40819bc.b2c: Size: 0x11158
40919bc.b2c: NT Headers: 0xd0
41019bc.b2c: Timestamp: 0x57fa67ee
41119bc.b2c: Machine: 0x8664 - amd64
41219bc.b2c: Timestamp: 0x57fa67ee
41319bc.b2c: Image Version: 6.3
41419bc.b2c: SizeOfImage: 0x12000 (73728)
41519bc.b2c: Resource Dir: 0x11000 LB 0x3f8
41619bc.b2c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
41719bc.b2c: [Raw version resource data: 0x11060 LB 0x398, codepage 0x0 (reserved 0x0)]
41819bc.b2c: ProductName: Microsoft® Windows® Operating System
41919bc.b2c: ProductVersion: 6.3.9600.18513
42019bc.b2c: FileVersion: 6.3.9600.18513 (winblue_ltsb.161009-0600)
42119bc.b2c: FileDescription: ApiSet Schema DLL
42219bc.b2c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
42319bc.b2c: supR3HardenedWinFindAdversaries: 0x0
42419bc.b2c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
42519bc.b2c: Calling main()
42619bc.b2c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
42719bc.b2c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox'
42819bc.b2c: '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
42919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe)
43019bc.b2c: SUPR3HardenedMain: Final process, opening VBoxDrv...
43119bc.b2c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001180000 LB 0x400000)
43219bc.b2c: supR3HardNtEnableThreadCreation:
43319bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
43419bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
43519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
43619bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
43719bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e9990000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
43819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
43919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
44019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
44119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e9990000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
44219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
44319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
44419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e9990000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
44519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e9990000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
44619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
44719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'crypt32.dll'.
44819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'msasn1.dll'.
44919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
45019bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wintrust.dll)
45119bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wintrust.dll
45219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
45319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
45419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'sspicli.dll'.
45519bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll)
45619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
45719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
45819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume8\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
45919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msasn1.dll)
46019bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msasn1.dll
46119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
46219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume8\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
46319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
46419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'msasn1.dll'.
46519bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\crypt32.dll)
46619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\crypt32.dll
46719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
46819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
46919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msvcrt.dll)
47019bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
47119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
47219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume8\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
47319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
47419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
47519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
47619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
47719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sspicli.dll'...
47819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sspicli.dll' -> '\Device\HarddiskVolume8\Windows\System32\sspicli.dll' [rcNtRedir=0xc0150008]
47919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
48019bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\sspicli.dll)
48119bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\sspicli.dll
48219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
48319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
48419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
48519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
48619bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
48719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
48819bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\sechost.dll)
48919bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\sechost.dll
49019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4ca0000 LB 0x000aa000 C:\WINDOWS\system32\msvcrt.dll [fFlags=0x0]
49119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
49219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3ca0000 LB 0x00011000 C:\WINDOWS\system32\MSASN1.dll [fFlags=0x0]
49319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
49419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3e70000 LB 0x001df000 C:\WINDOWS\system32\CRYPT32.dll [fFlags=0x0]
49519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
49619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f45b0000 LB 0x00059000 C:\WINDOWS\SYSTEM32\sechost.dll [fFlags=0x0]
49719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\sechost.dll [lacks WinVerifyTrust]
49819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3e40000 LB 0x0002e000 C:\WINDOWS\system32\SspiCli.dll [fFlags=0x0]
49919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\sspicli.dll [lacks WinVerifyTrust]
50019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f67d0000 LB 0x00140000 C:\WINDOWS\system32\RPCRT4.dll [fFlags=0x0]
50119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
50219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3cc0000 LB 0x00051000 C:\WINDOWS\system32\Wintrust.dll [fFlags=0x0]
50319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
50419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\WINDOWS\system32\Wintrust.dll'
50519bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\bcrypt.dll)
50619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\bcrypt.dll
50719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
50819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
50919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
51019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
51119bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
51219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f37a0000 LB 0x00026000 C:\WINDOWS\system32\bcrypt.dll [fFlags=0x0]
51319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
51419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f37a0000 'C:\WINDOWS\system32\bcrypt.dll'
51519bc.b2c: bcrypt.dll loaded at 00007ff9f37a0000, BCryptOpenAlgorithmProvider at 00007ff9f37a3490, preloading providers:
51619bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll)
51719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll
51819bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
51919bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
52019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3ac0000 LB 0x00063000 C:\WINDOWS\system32\bcryptprimitives.dll [fFlags=0x0]
52119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
52219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3ac0000 'C:\WINDOWS\system32\bcryptprimitives.dll'
52319bc.b2c: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000016d8f80)
52419bc.b2c: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000016d9af0)
52519bc.b2c: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000016d9c20)
52619bc.b2c: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000016d9e80)
52719bc.b2c: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000016d9fb0)
52819bc.b2c: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000016da0e0)
52919bc.b2c: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000016da330)
53019bc.b2c: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000016da460)
53119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
53219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
53319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
53419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
53519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
53619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
53719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
53819bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
53919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
54019bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
54119bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
54219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
54319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
54419bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
54519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
54619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
54719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
54819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
54919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
55019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
55119bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\cryptsp.dll)
55219bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cryptsp.dll
55319bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3550000 LB 0x00020000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
55419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
55519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcrypt.dll'.
55619bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\rsaenh.dll)
55719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\rsaenh.dll
55819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
55919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
56019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
56119bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
56219bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
56319bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3120000 LB 0x00036000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
56419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
56519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
56619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
56719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\cryptbase.dll)
56819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cryptbase.dll
56919bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3b30000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
57019bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
57119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
57219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
57319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
57419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
57519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
57619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f6970000 'C:\WINDOWS\system32\kernel32.dll'
57719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
57819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
57919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
58019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
58119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\CRYPT32.dll'
58219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4c70000 LB 0x00016000 C:\WINDOWS\system32\imagehlp.dll [fFlags=0x0]
58319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
58419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\imagehlp.dll)
58519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\imagehlp.dll
58619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
58719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
58819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
58919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
59019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
59119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
59219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'bcrypt.dll'.
59319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ntasn1.dll'.
59419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ncrypt.dll)
59519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ncrypt.dll
59619bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ntasn1.dll)
59719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ntasn1.dll
59819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3760000 LB 0x00037000 C:\WINDOWS\SYSTEM32\NTASN1.dll [fFlags=0x0]
59919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ntasn1.dll [lacks WinVerifyTrust]
60019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3730000 LB 0x00025000 C:\WINDOWS\SYSTEM32\ncrypt.dll [fFlags=0x0]
60119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
60219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
60319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
60419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\gpapi.dll)
60519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\gpapi.dll
60619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f2da0000 LB 0x00024000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
60719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
60819bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\profapi.dll)
60919bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\profapi.dll
61019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3bf0000 LB 0x00015000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0]
61119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\profapi.dll [lacks WinVerifyTrust]
61219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
61319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'crypt32.dll'.
61419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'wldap32.dll'.
61519bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\cryptnet.dll)
61619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cryptnet.dll
61719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
61819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume8\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
61919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
62019bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\Wldap32.dll)
62119bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\Wldap32.dll
62219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
62319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume8\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
62419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
62519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
62619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
62719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
62819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
62919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
63019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
63119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
63219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
63319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
63419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ntasn1.dll'...
63519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ntasn1.dll' -> '\Device\HarddiskVolume8\Windows\System32\ntasn1.dll' [rcNtRedir=0xc0150008]
63619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ntasn1.dll [lacks WinVerifyTrust]
63719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
63819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
63919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
64019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
64119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
64219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
64319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
64419bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
64519bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f49f0000 LB 0x0005c000 C:\WINDOWS\system32\WLDAP32.dll [fFlags=0x0]
64619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
64719bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f08a0000 LB 0x00039000 C:\WINDOWS\system32\cryptnet.dll [fFlags=0x0]
64819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
64919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
65019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
65119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
65219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
65319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
65419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
65519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
65619bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
65719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
65819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
65919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
66019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
66119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
66219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
66319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
66419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
66519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
66619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
66719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
66819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
66919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
67019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
67119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
67219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
67319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
67419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
67519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
67619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
67719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\WINDOWS\system32\cryptnet.dll'
67819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
67919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f08a0000 'C:\Windows\System32\cryptnet.dll'
68019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
68119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
68219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'rpcrt4.dll'.
68319bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\advapi32.dll)
68419bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\advapi32.dll
68519bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4150000 LB 0x000aa000 C:\WINDOWS\SYSTEM32\advapi32.dll [fFlags=0x0]
68619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
68719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
68819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
68919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
69019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
69119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
69219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume8\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
69319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\sechost.dll [lacks WinVerifyTrust]
69419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
69519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
69619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
69719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
69819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
69919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
70019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
70119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
70219bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
70319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000001708410
70419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
70519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62911B6BE226E360DD55942FD0B014C94CF1AECB
70619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
70719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
70819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f67d0000 'C:\WINDOWS\system32\rpcrt4.dll'
70919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
71019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
71119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
71219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
71319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
71419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
71519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
71619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
71719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
71819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
71919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
72019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
72119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
72219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
72319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\Windows\System32\WINTRUST.DLL'
72419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
72519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
72619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
72719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
72819bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
72919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
73019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_856_for_KB4054519~31bf3856ad364e35~amd64~~6.3.1.4.cat'; file='\SystemRoot\System32\ntdll.dll'
73119bc.b2c: g_pfnWinVerifyTrust=00007ff9f3cc1050
73219bc.b2c: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
73319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
73419bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
73519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
73619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
73719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
73819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
73919bc.b2c: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\crypt32.dll'
74019bc.b2c: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
74119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
74219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
74319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
74419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll
74519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
74619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
74719bc.b2c: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\wintrust.dll'
74819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
74919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
75019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
75119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
75219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\advapi32.dll'
75319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000388 pwszName=\Device\HarddiskVolume8\Windows\System32\Wldap32.dll
75419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
75519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
75619bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=94F7EB39360A785180B3F3D1F7F71564D27B0713
75719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
75819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
75919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
76019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1236_for_KB4054519~31bf3856ad364e35~amd64~~6.3.1.4.cat'; file='\Device\HarddiskVolume8\Windows\System32\Wldap32.dll'
76119bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
76219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\Wldap32.dll'
76319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000384 pwszName=\Device\HarddiskVolume8\Windows\System32\cryptnet.dll
76419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
76519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
76619bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CFA081F787F20E906CEFF5631F4EC1F5B874BBA5
76719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
76819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
76919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
77019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1991_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\cryptnet.dll'
77119bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
77219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cryptnet.dll'
77319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
77419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
77519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
77619bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\profapi.dll'
77719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
77819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
77919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
78019bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\gpapi.dll'
78119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
78219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
78319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
78419bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\ntasn1.dll'
78519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
78619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
78719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
78819bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\ncrypt.dll'
78919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
79019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
79119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll
79219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
79319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
79419bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\imagehlp.dll'
79519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
79619bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
79719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
79819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
79919bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cryptbase.dll'
80019bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
80119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
80219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
80319bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\rsaenh.dll'
80419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
80519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
80619bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cryptsp.dll'
80719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
80819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
80919bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\bcryptprimitives.dll'
81019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
81119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
81219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll'
81319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
81419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
81519bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\sechost.dll'
81619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
81719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
81819bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\sspicli.dll'
81919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
82019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
82119bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll'
82219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
82319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
82419bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\msasn1.dll'
82519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
82619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
82719bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll'
82819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
82919bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
83019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
83119bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.exe'
83219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
83319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
83419bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\KernelBase.dll'
83519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
83619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
83719bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\kernel32.dll'
83819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
83919bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
84019bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
84119bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
84219bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
84319bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
84419bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x27ad0cee9dbf4d42 C=FR, CN=Default CA
84519bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
84619bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
84719bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
84819bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
84919bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
85019bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
85119bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
85219bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
85319bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
85419bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
85519bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
85619bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
85719bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
85819bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
85919bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
86019bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xb3d6d6c9f168c800 C=FR, O=Dhimyotis, CN=Certigna
86119bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
86219bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
86319bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
86419bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x923f2c0a09ccd400 C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Root CA
86519bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
86619bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
86719bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
86819bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
86919bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
87019bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
87119bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA
87219bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
87319bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
87419bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
87519bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
87619bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
87719bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
87819bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
87919bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
88019bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
88119bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
88219bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xac1e0fca7ad3c900 C=ES, O=IZENPE S.A., CN=Izenpe.com
88319bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
88419bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
88519bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
88619bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
88719bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
88819bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
88919bc.b2c: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
89019bc.b2c: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=51
89119bc.b2c: SUPR3HardenedMain: Load Runtime...
89219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
89319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
89419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
89519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
89619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
89719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
89819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
89919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
90019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
90119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
90219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
90319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
90419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
90519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
90619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'nsi.dll'.
90719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
90819bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ws2_32.dll) WinVerifyTrust
90919bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
91019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
91119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
91219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll
91319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
91419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
91519bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
91619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
91719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
91819bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\nsi.dll'.
91919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\nsi.dll)
92019bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\nsi.dll
92119bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
92219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
92319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
92419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
92519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
92619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
92719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
92819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
92919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
93019bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll'.
93119bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll)
93219bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
93319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
93419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
93519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
93619bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
93719bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
93819bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
93919bc.b2c: supR3HardenedDllNotificationCallback: load 00000000571d0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
94019bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
94119bc.b2c: supR3HardenedDllNotificationCallback: load 0000000057130000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
94219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
94319bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4c90000 LB 0x00009000 C:\WINDOWS\system32\NSI.dll [fFlags=0x0]
94419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll [avoiding WinVerifyTrust]
94519bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f6910000 LB 0x0005a000 C:\WINDOWS\system32\WS2_32.dll [fFlags=0x0]
94619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
94719bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9dd0e0000 LB 0x00590000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
94819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
94919bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll'.
95019bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
95119bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\nsi.dll'.
95219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rescheduled]
95319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
95419bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
95519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
95619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
95719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
95819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
95919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
96019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
96119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
96219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
96319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
96419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
96519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
96619bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
96719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
96819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
96919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
97019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
97819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
97919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
98019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxRT.dll
99719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
99819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
100019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
100119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dd0e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
100219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3cc0000 'C:\WINDOWS\system32\Wintrust.dll'
100319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
100419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
100519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
100619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll
100719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
100819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
100919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
101019bc.b2c: SUPR3HardenedMain: Load TrustedMain...
101119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
101219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
101319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
101419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
101519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
101619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
101719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
101819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
101919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
102019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
102119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
102219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
102319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
102419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
102519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
102619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
102719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll) WinVerifyTrust
102819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll
102919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
103019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
103119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
103219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
103319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
103419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
103519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'user32.dll'.
103619bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winmm.dll) WinVerifyTrust
103719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winmm.dll
103819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
103919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
104019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
104119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
104219bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\user32.dll'.
104319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'gdi32.dll'.
104419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\user32.dll)
104519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\user32.dll
104619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
104719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
104819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
104919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
105019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
105119bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\winmmbase.dll'.
105219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
105319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'devobj.dll'.
105419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winmmbase.dll)
105519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winmmbase.dll
105619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
105719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume8\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
105819bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\devobj.dll'.
105919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
106019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'cfgmgr32.dll'.
106119bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\devobj.dll)
106219bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\devobj.dll
106319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
106419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
106519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
106619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
106719bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\gdi32.dll'.
106819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'user32.dll'.
106919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\gdi32.dll)
107019bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\gdi32.dll
107119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
107219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
107319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
107419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
107519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
107619bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll'.
107719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll)
107819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll
107919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
108019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
108119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
108219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
108319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
108419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
108519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
108619bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\oleaut32.dll) WinVerifyTrust
108719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
108819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
108919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
109019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
109119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
109219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
109319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume8\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
109419bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\combase.dll'.
109519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
109619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
109719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\combase.dll)
109819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\combase.dll
109919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
110019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
110119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
110219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
110319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
110419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
110519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
110619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
110719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
110819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
110919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'gdi32.dll'.
111019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
111119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
111219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ole32.dll) WinVerifyTrust
111319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ole32.dll
111419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
111519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
111619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
111719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume8\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
111819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\combase.dll [lacks WinVerifyTrust]
111919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
112019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
112119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
112219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
112319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
112419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
112519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
112619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
112719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
112819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
112919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
113019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
113119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
113219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'user32.dll'.
113319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'shlwapi.dll'.
113419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #59 'gdi32.dll'.
113519bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\shell32.dll) WinVerifyTrust
113619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\shell32.dll
113719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
113819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
113919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
114019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
114119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
114219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll [redoing WinVerifyTrust]
114319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
114419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
114519bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
114619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
114719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
114819bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll'.
114919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
115019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
115119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
115219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\shlwapi.dll)
115319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
115419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
115519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
115619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
115719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
115819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
115919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
116019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
116119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
116219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
116319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
116419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll [lacks WinVerifyTrust]
116519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
116619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
116719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
116819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
116919bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\user32.dll'
117019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
117119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
117219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
117319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
117419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
117519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
117619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
117719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
117819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
117919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
118019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
118119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
118219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
118319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
118419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
118519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
118619bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
118719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
118819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
118919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
119019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
119119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
119219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
119319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
119419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
119519bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
119619bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
119719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
119819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
119919bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
120019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
120119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
120219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
120319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
120419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
120519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
120619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
120719bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
120819bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
120919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
121019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
121119bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
121219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
121319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
121419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
121519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
121619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
121719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
121819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
121919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
122019bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
122119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
122219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
122319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
122419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
122519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
122619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
122719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
122819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
122919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
123019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
123119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
123219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
123319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
123419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
123519bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
123619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
123719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
123819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
123919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
124019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
124119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
124219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
124319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
124419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
124519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
124619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
124719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
124819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
124919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
125019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
125119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
125219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
125319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
125419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
125519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
125619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
125719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
125819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
125919bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\opengl32.dll'.
126019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
126119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
126219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
126319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
126419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
126519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
126619bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\opengl32.dll)
126719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\opengl32.dll
126819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
126919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
127019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
127119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
127219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
127319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
127419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
127519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
127619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
127719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
127819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume8\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
127919bc.b2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\mpr.dll'.
128019bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\mpr.dll)
128119bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\mpr.dll
128219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
128319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
128419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
128519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
128619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
128719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
128819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
128919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
129019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
129119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
129219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
129319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
129419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
129519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
129619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
129719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
129819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
129919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
130019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume8\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
130119bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\ddraw.dll'.
130219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
130319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'user32.dll'.
130419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'gdi32.dll'.
130519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'dciman32.dll'.
130619bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\ddraw.dll)
130719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ddraw.dll
130819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
130919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume8\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
131019bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\glu32.dll'.
131119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
131219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
131319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
131419bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\glu32.dll)
131519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\glu32.dll
131619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
131719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
131819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
131919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
132019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
132119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
132219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
132319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
132419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
132519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
132619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
132719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
132819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
132919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
133019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
133119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
133219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
133319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume8\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
133419bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\dciman32.dll'.
133519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
133619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
133719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
133819bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\dciman32.dll)
133919bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dciman32.dll
134019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
134119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
134219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
134319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
134419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
134519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
134619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
134719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
134819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
134919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
135019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
135119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
135219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
135319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
135419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
135519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
135619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
135719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
135819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
135919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
136019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
136119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
136219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
136319bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) WinVerifyTrust
136419bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
136519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
136619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
136719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [redoing WinVerifyTrust]
136819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
136919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
137019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
137119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
137219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume8\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
137319bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\comdlg32.dll'.
137419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
137519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
137619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
137719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
137819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
137919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
138019bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\comdlg32.dll)
138119bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\comdlg32.dll
138219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
138319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume8\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
138419bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\winspool.drv'.
138519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
138619bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\winspool.drv)
138719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winspool.drv
138819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
138919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
139019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
139119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
139219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
139319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
139419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
139519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
139619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
139719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
139819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
139919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
140019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
140119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
140219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
140319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
140419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
140519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
140619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
140719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
140819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
140919bc.b2c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\comctl32.dll'.
141019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
141119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
141219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
141319bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\comctl32.dll)
141419bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\comctl32.dll
141519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
141619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
141719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
141819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
141919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
142019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
142119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
142219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
142319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
142419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
142519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
142619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
142719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
142819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
142919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
143019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
143119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
143219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
143319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
143419bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
143519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
143619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
143719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
143819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
143919bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
144019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
144119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
144219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
144319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
144419bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
144519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
144619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
144719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll [redoing WinVerifyTrust]
144819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
144919bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll'
145019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
145119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
145219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
145319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
145419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
145519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
145619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume8\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
145719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
145819bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000049c pwszName=\Device\HarddiskVolume8\Windows\System32\opengl32.dll
145919bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
146019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
146119bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2C6D4490D969C3233E8843AD4B11DB3F390C0B16
146219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
146319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
146419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1537_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\opengl32.dll'
146519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
146619bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\opengl32.dll'
146719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
146819bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll
146919bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
147019bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
147119bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
147219bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
147319bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
147419bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
147519bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
147619bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
147719bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
147819bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
147919bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
148019bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\combase.dll [avoiding WinVerifyTrust]
148119bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
148219bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
148319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
148419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
148519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
148619bc.b2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll)
148719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll
148819bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
148919bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\devobj.dll [avoiding WinVerifyTrust]
149019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
149119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'combase.dll'.
149219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\SHCore.dll)
149319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\SHCore.dll
149419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4210000 LB 0x00177000 C:\WINDOWS\system32\USER32.dll [fFlags=0x0]
149519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
149619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4a50000 LB 0x0014b000 C:\WINDOWS\system32\GDI32.dll [fFlags=0x0]
149719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
149819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e8ec0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\DCIMAN32.dll [fFlags=0x0]
149919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
150019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9dcce0000 LB 0x000f8000 C:\WINDOWS\SYSTEM32\DDRAW.dll [fFlags=0x0]
150119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
150219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e0c90000 LB 0x0002e000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
150319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
150419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9dc310000 LB 0x0012b000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
150519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
150619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4d50000 LB 0x00212000 C:\WINDOWS\SYSTEM32\combase.dll [fFlags=0x0]
150719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\combase.dll [avoiding WinVerifyTrust]
150819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4610000 LB 0x00054000 C:\WINDOWS\system32\SHLWAPI.dll [fFlags=0x0]
150919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll [avoiding WinVerifyTrust]
151019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f5120000 LB 0x01529000 C:\WINDOWS\system32\SHELL32.dll [fFlags=0x0]
151119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
151219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4670000 LB 0x00194000 C:\WINDOWS\system32\ole32.dll [fFlags=0x0]
151319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
151419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9eaf60000 LB 0x0001e000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
151519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
151619bc.b2c: supR3HardenedDllNotificationCallback: load 0000000056bc0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
151719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
151819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9d7f30000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
151919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
152019bc.b2c: supR3HardenedDllNotificationCallback: load 0000000056650000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
152119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
152219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9ee2d0000 LB 0x00082000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
152319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
152419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9eea00000 LB 0x000a4000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\COMCTL32.dll [fFlags=0x0]
152519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll [avoiding WinVerifyTrust]
152619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f2440000 LB 0x000b2000 C:\WINDOWS\SYSTEM32\SHCORE.DLL [fFlags=0x0]
152719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\SHCore.dll [avoiding WinVerifyTrust]
152819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f6710000 LB 0x000b6000 C:\WINDOWS\system32\COMDLG32.dll [fFlags=0x0]
152919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\comdlg32.dll [avoiding WinVerifyTrust]
153019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9dd080000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
153119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
153219bc.b2c: supR3HardenedDllNotificationCallback: load 00000000565f0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
153319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
153419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4ba0000 LB 0x000c6000 C:\WINDOWS\system32\OLEAUT32.dll [fFlags=0x0]
153519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
153619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4050000 LB 0x0004f000 C:\WINDOWS\SYSTEM32\cfgmgr32.dll [fFlags=0x0]
153719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
153819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f2a00000 LB 0x00028000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
153919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\devobj.dll [avoiding WinVerifyTrust]
154019bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f1380000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
154119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
154219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f1420000 LB 0x00022000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
154319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
154419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9d9c40000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
154519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VirtualBox.dll
154619bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\SHCore.dll'.
154719bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\SHCore.dll' [rescheduled]
154819bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll'.
154919bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll' [rescheduled]
155019bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\comctl32.dll'.
155119bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\comctl32.dll' [rescheduled]
155219bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\winspool.drv'.
155319bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\winspool.drv' [rescheduled]
155419bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\comdlg32.dll'.
155519bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\comdlg32.dll' [rescheduled]
155619bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\dciman32.dll'.
155719bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\dciman32.dll' [rescheduled]
155819bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\glu32.dll'.
155919bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\glu32.dll' [rescheduled]
156019bc.b2c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume8\Windows\System32\ddraw.dll'.
156119bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\ddraw.dll' [rescheduled]
156219bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\mpr.dll'.
156319bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\mpr.dll' [rescheduled]
156419bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll'.
156519bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rescheduled]
156619bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\combase.dll'.
156719bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\combase.dll' [rescheduled]
156819bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll'.
156919bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll' [rescheduled]
157019bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\gdi32.dll'.
157119bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rescheduled]
157219bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\devobj.dll'.
157319bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\devobj.dll' [rescheduled]
157419bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\winmmbase.dll'.
157519bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\winmmbase.dll' [rescheduled]
157619bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\imm32.dll'.
157719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
157819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'msctf.dll'.
157919bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\imm32.dll)
158019bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\imm32.dll
158119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
158219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume8\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
158319bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\msctf.dll'.
158419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
158519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
158619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
158719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'imm32.dll'.
158819bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msctf.dll)
158919bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msctf.dll
159019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
159119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
159219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
159319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume8\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
159419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\combase.dll [redoing WinVerifyTrust]
159519bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\combase.dll'.
159619bc.b2c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume8\Windows\System32\combase.dll
159719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
159819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
159919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
160019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
160119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
160219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
160319bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
160419bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\gdi32.dll'.
160519bc.b2c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume8\Windows\System32\gdi32.dll
160619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
160719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
160819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
160919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
161019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume8\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
161119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [redoing WinVerifyTrust]
161219bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\imm32.dll'.
161319bc.b2c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume8\Windows\System32\imm32.dll
161419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
161519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
161619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
161719bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\gdi32.dll'.
161819bc.b2c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume8\Windows\System32\gdi32.dll
161919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
162019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
162119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
162219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
162319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
162419bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
162519bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4440000 LB 0x00151000 C:\WINDOWS\system32\MSCTF.dll [fFlags=0x0]
162619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msctf.dll [avoiding WinVerifyTrust]
162719bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f4400000 LB 0x00036000 C:\WINDOWS\system32\IMM32.DLL [fFlags=0x0]
162819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
162919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4400000 'C:\WINDOWS\system32\IMM32.DLL'
163019bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\msctf.dll'.
163119bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\msctf.dll' [rescheduled]
163219bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\imm32.dll'.
163319bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume8\Windows\System32\imm32.dll' [rescheduled]
163419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [redoing WinVerifyTrust]
163519bc.b2c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\imm32.dll'.
163619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume8\Windows\System32\imm32.dll
163719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
163819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4400000 'C:\WINDOWS\system32\imm32.dll'
163919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
164019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
164119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4150000 'C:\WINDOWS\system32\ADVAPI32.DLL'
164219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d9c40000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
164319bc.b2c: SUPR3HardenedMain: Calling TrustedMain (00007ff9d9c414f0)...
164419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
164519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
164619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
164719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
164819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
164919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
165019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
165119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
165219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
165319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
165419bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
165519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
165619bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
165719bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
165819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
165919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
166019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
166119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
166219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
166319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
166419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
166519bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
166619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
166719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
166819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
166919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
167019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
167119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
167219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
167319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
167419bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
167519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
167619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
167719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
167819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
167919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume8\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
168019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\imm32.dll [redoing WinVerifyTrust]
168119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
168219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
168319bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\imm32.dll'
168419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
168519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
168619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
168719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
168819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
168919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
169019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
169119bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
169219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
169319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
169419bc.b2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\gdi32.dll'
169519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
169619bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
169719bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9dc1e0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
169819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
169919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc1e0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
170019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
170119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
170219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\kernel.appcore.dll)
170319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\kernel.appcore.dll
170419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f2a50000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
170519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel.appcore.dll [avoiding WinVerifyTrust]
170619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
170719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
170819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
170919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
171019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
171119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
171219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\kernel.appcore.dll'
171319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000064c pwszName=\Device\HarddiskVolume8\Windows\System32\uxtheme.dll
171419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
171519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
171619bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=838F7D43C262A37C4054028F21459B37D8042774
171719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
171819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
171919bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_996_for_KB4054519~31bf3856ad364e35~amd64~~6.3.1.4.cat'; file='\Device\HarddiskVolume8\Windows\System32\uxtheme.dll'
172019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
172119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
172219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
172319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'gdi32.dll'.
172419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\uxtheme.dll) WinVerifyTrust
172519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
172619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
172719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
172819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\gdi32.dll
172919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
173019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
173119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
173219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
173319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
173419bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
173519bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f2880000 LB 0x00129000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
173619bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
173719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2880000 'C:\WINDOWS\system32\uxtheme.dll'
173819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
173919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
174019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2880000 'C:\WINDOWS\system32\uxtheme.dll'
174119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
174219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
174319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2880000 'C:\WINDOWS\system32\uxtheme.dll'
174419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
174519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
174619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2880000 'C:\WINDOWS\system32\uxtheme.dll'
174719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4210000 'C:\WINDOWS\system32\user32.dll'
174819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
174919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
175019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
175119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\SHCore.dll [redoing WinVerifyTrust]
175219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
175319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
175419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\SHCore.dll'
175519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
175619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2440000 'C:\WINDOWS\system32\SHCore.dll'
175719bc.b2c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
175819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
175919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
176019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'user32.dll'.
176119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'gdi32.dll'.
176219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\dwmapi.dll)
176319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dwmapi.dll
176419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f2240000 LB 0x00021000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
176519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dwmapi.dll [avoiding WinVerifyTrust]
176619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
176719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
176819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
176919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
177019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
177119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
177219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
177319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
177419bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\dwmapi.dll'
177519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
177619bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
177719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
177819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
177919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
178019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
178119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
178219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
178319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
178419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\uxtheme.dll
178519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
178619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2880000 'C:\WINDOWS\system32\uxtheme.dll'
178719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4150000 'C:\WINDOWS\system32\advapi32.dll'
178819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
178919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
179019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
179119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
179219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'profapi.dll'.
179319bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\userenv.dll) WinVerifyTrust
179419bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\userenv.dll
179519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
179619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
179719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\profapi.dll
179819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
179919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
180019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
180119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
180219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
180319bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\userenv.dll
180419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f3230000 LB 0x00021000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
180519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\userenv.dll
180619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3230000 'C:\WINDOWS\system32\userenv.dll'
180719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\kernel32.dll
180819bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
180919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f6970000 'C:\WINDOWS\system32\kernel32.dll'
181019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
181119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
181219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\clbcatq.dll)
181319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\clbcatq.dll
181419bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9f6650000 LB 0x000b6000 C:\WINDOWS\SYSTEM32\clbcatq.dll [fFlags=0x0]
181519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\clbcatq.dll [avoiding WinVerifyTrust]
181619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
181719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
181819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
181919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
182019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
182119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
182219bc.b2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\clbcatq.dll'
182319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
182419bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
182519bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
182619bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
182719bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
182819bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
182919bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
183019bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
183119bc.1310: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
183219bc.1310: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
183319bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
183419bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
183519bc.1310: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
183619bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
183719bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
183819bc.1310: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
183919bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
184019bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
184119bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
184219bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
184319bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
184419bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
184519bc.1310: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
184619bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
184719bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
184819bc.1310: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
184919bc.1310: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
185019bc.1310: supR3HardenedDllNotificationCallback: load 00007ff9d79e0000 LB 0x00545000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
185119bc.1310: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
185219bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d79e0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
185319bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
185419bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
185519bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
185619bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
185719bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
185819bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
185919bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
186019bc.1310: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
186119bc.1310: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
186219bc.1310: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
186319bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
186419bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
186519bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
186619bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
186719bc.1310: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
186819bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
186919bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
187019bc.1310: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
187119bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
187219bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
187319bc.1310: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll [redoing WinVerifyTrust]
187419bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
187519bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
187619bc.1310: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll'
187719bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
187819bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
187919bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
188019bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
188119bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
188219bc.1310: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
188319bc.1310: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
188419bc.1310: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
188519bc.1310: supR3HardenedDllNotificationCallback: load 00007ff9dcfc0000 LB 0x000ba000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
188619bc.1310: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
188719bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dcfc0000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
188819bc.1310: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
188919bc.1310: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
189019bc.1310: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4ba0000 'C:\Windows\System32\oleaut32.dll'
189119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4a50000 'C:\WINDOWS\system32\gdi32.dll'
189219bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
189319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
189419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
189519bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
189619bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
189719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4670000 'C:\WINDOWS\system32\ole32.dll'
189819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msctf.dll [redoing WinVerifyTrust]
189919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
190019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
190119bc.b2c: supR3HardenedScreenImage/LdrLoadDll: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\msctf.dll'
190219bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
190319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4440000 'C:\WINDOWS\system32\MSCTF.dll'
190419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ole32.dll
190519bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
190619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4670000 'C:\WINDOWS\system32\ole32.dll'
190719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
190819bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
190919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4ba0000 'C:\WINDOWS\system32\OLEAUT32.dll'
191019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009e0 pwszName=\Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
191119bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
191219bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
191319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5BD3A9D85FD3F32FD1501AC3EC3F27386097ADF6
191419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
191519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
191619bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIN8IP-Blue-Microsoft-Windows-WMI-Package~31bf3856ad364e35~amd64~~7.2.9600.1023.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll'
191719bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
191819bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
191919bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
192019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
192119bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
192219bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
192319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
192419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
192519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009d8 pwszName=\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
192619bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
192719bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
192819bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=15A1583AAC8ABC4141366B5F9A990D0590BA1187
192919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rsaenh.dll
193019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
193119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
193219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
193319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIN8IP-Blue-Microsoft-Windows-WMI-Package~31bf3856ad364e35~amd64~~7.2.9600.1023.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll'
193419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
193519bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
193619bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'bcrypt.dll'.
193719bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'ws2_32.dll'.
193819bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll) WinVerifyTrust
193919bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
194019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
194119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
194219bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
194319bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
194419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
194519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
194619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
194719bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
194819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
194919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume8\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
195019bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\bcrypt.dll
195119bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
195219bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
195319bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
195419bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
195519bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
195619bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e9260000 LB 0x0007a000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
195719bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
195819bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e6fa0000 LB 0x0000f000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
195919bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemprox.dll
196019bc.b2c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
196119bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
196219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
196319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e6fa0000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
196419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009f4 pwszName=\Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
196519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
196619bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
196719bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A7DF31B6C15FD8EB80439719AA86AF1914549CC3
196819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
196919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
197019bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIN8IP-Blue-Microsoft-Windows-WMI-Package~31bf3856ad364e35~amd64~~7.2.9600.1023.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll'
197119bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
197219bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
197319bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
197419bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
197519bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
197619bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
197719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
197819bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\rpcrt4.dll
197919bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
198019bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
198119bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
198219bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
198319bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e8cb0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
198419bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\wbemsvc.dll
198519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8cb0000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
198619bc.b2c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
198719bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
198819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-localization-l1-2-0.dll'
198919bc.b2c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
199019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
199119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
199219bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a4c pwszName=\Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
199319bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
199419bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
199519bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FA05EDE369E898F9A2D880E58A47E085180966D0
199619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
199719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
199819bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIN8IP-Blue-Microsoft-Windows-WMI-Package~31bf3856ad364e35~amd64~~7.2.9600.1023.cat'; file='\Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll'
199919bc.b2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
200019bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
200119bc.b2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
200219bc.b2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
200319bc.b2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
200419bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
200519bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume8\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
200619bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbemcomn.dll
200719bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
200819bc.b2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
200919bc.b2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msvcrt.dll
201019bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
201119bc.b2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
201219bc.b2c: supR3HardenedDllNotificationCallback: load 00007ff9e85b0000 LB 0x000d5000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
201319bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wbem\fastprox.dll
201419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e85b0000 'C:\WINDOWS\system32\wbem\fastprox.dll'
201519bc.9a4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
201619bc.9a4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
201719bc.9a4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
201819bc.9a4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
201919bc.9a4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
202019bc.9a4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
202119bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
202219bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
202319bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
202419bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
202519bc.9a4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
202619bc.9a4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
202719bc.9a4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
202819bc.9a4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
202919bc.9a4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll) WinVerifyTrust
203019bc.9a4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll
203119bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
203219bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
203319bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
203419bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
203519bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
203619bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
203719bc.9a4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
203819bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
203919bc.9a4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
204019bc.9a4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
204119bc.9a4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
204219bc.9a4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll
204319bc.9a4: supR3HardenedDllNotificationCallback: load 0000000056120000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
204419bc.9a4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxREM.dll
204519bc.9a4: supR3HardenedDllNotificationCallback: load 00007ff9d88d0000 LB 0x002c9000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
204619bc.9a4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
204719bc.9a4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d88d0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
204819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
204919bc.560: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
205019bc.560: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
205119bc.560: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
205219bc.560: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
205319bc.560: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
205419bc.560: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
205519bc.560: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
205619bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
205719bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
205819bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
205919bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
206019bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
206119bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
206219bc.560: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
206319bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
206419bc.560: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
206519bc.560: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
206619bc.560: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
206719bc.560: supR3HardenedDllNotificationCallback: load 00007ff9f03b0000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
206819bc.560: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
206919bc.560: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f03b0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
207019bc.560: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4210000 'C:\WINDOWS\system32\User32.dll'
207119bc.1ac8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
207219bc.1ac8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
207319bc.1ac8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
207419bc.1ac8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
207519bc.1ac8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
207619bc.1ac8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
207719bc.1ac8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
207819bc.1ac8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
207919bc.1ac8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
208019bc.1ac8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
208119bc.1ac8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll
208219bc.1ac8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
208319bc.1ac8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
208419bc.1ac8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
208519bc.1ac8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
208619bc.1ac8: supR3HardenedDllNotificationCallback: load 00007ff9ee1d0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
208719bc.1ac8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
208819bc.1ac8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ee1d0000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
208919bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
209019bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
209119bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxoglhostcrutil.dll'.
209219bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
209319bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxvmm.dll'.
209419bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxoglrenderspu.dll'.
209519bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
209619bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ole32.dll'.
209719bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleaut32.dll'.
209819bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll) WinVerifyTrust
209919bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll
210019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
210119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
210219bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
210319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
210419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
210519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
210619bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
210719bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglrenderspu.dll'...
210819bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglrenderspu.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxoglrenderspu.dll' [rcNtRedir=0xc0150008]
210919bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
211019bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
211119bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxoglhostcrutil.dll'.
211219bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
211319bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
211419bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
211519bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'.
211619bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll) WinVerifyTrust
211719bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
211819bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
211919bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
212019bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
212119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
212219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
212319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglhostcrutil.dll'...
212419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglhostcrutil.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxoglhostcrutil.dll' [rcNtRedir=0xc0150008]
212519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
212619bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
212719bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
212819bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
212919bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
213019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
213119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
213219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
213319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglhostcrutil.dll'...
213419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglhostcrutil.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxoglhostcrutil.dll' [rcNtRedir=0xc0150008]
213519bc.16c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll'.
213619bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
213719bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
213819bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'shlwapi.dll'.
213919bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
214019bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll)
214119bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll
214219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
214319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
214419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
214519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
214619bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
214719bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
214819bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
214919bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
215019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
215119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
215219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
215319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
215419bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll
215519bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
215619bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
215719bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
215819bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'shlwapi.dll'.
215919bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
216019bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll) WinVerifyTrust
216119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
216219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
216319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
216419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
216519bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
216619bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
216719bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
216819bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shlwapi.dll
216919bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
217019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
217119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
217219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
217319bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
217419bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll
217519bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll [avoiding WinVerifyTrust]
217619bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
217719bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9ee1a0000 LB 0x0002f000 C:\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll [fFlags=0x0]
217819bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll [avoiding WinVerifyTrust]
217919bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9ea690000 LB 0x00026000 C:\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll [fFlags=0x0]
218019bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
218119bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9e2430000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.DLL [fFlags=0x0]
218219bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.dll
218319bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e2430000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedCrOpenGL.DLL'
218419bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
218519bc.16c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll'
218619bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll
218719bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
218819bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ea690000 'C:\Program Files\Oracle\VirtualBox\VBoxOGLrenderspu.dll'
218919bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
219019bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
219119bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxoglhostcrutil.dll'.
219219bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll) WinVerifyTrust
219319bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll
219419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxoglhostcrutil.dll'...
219519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxoglhostcrutil.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxoglhostcrutil.dll' [rcNtRedir=0xc0150008]
219619bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhostcrutil.dll
219719bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
219819bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
219919bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
220019bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll
220119bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9e9080000 LB 0x0001a000 C:\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll [fFlags=0x0]
220219bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll
220319bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e9080000 'C:\Program Files\Oracle\VirtualBox\VBoxOGLhosterrorspu.dll'
220419bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
220519bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32/opengl32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
220619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32/opengl32.dll'
220719bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
220819bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
220919bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
221019bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4a50000 'C:\WINDOWS\system32\gdi32.dll'
221119bc.16c4: \Device\HarddiskVolume8\Windows\System32\nvoglv64.dll: Owner is administrators group.
221219bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
221319bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
221419bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
221519bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'shell32.dll'.
221619bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
221719bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'setupapi.dll'.
221819bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
221919bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wtsapi32.dll'.
222019bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'version.dll'.
222119bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\nvoglv64.dll) WinVerifyTrust
222219bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\nvoglv64.dll
222319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
222419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume8\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
222519bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
222619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
222719bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
222819bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\version.dll) WinVerifyTrust
222919bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\version.dll
223019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wtsapi32.dll'...
223119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wtsapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\wtsapi32.dll' [rcNtRedir=0xc0150008]
223219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
223319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
223419bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
223519bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
223619bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
223719bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wtsapi32.dll) WinVerifyTrust
223819bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wtsapi32.dll
223919bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
224019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
224119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
224219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
224319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
224419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
224519bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
224619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
224719bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'cfgmgr32.dll'.
224819bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
224919bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
225019bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\setupapi.dll) WinVerifyTrust
225119bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\setupapi.dll
225219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
225319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
225419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
225519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume8\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
225619bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
225719bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
225819bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
225919bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
226019bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
226119bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
226219bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
226319bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
226419bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
226519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
226619bc.16c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll [redoing WinVerifyTrust]
226719bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
226819bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
226919bc.16c4: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\cfgmgr32.dll'
227019bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\nvoglv64.dll (Input=nvoglv64, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
227119bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nvoglv64.dll
227219bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wtsapi32.dll
227319bc.16c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\version.dll
227419bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9f4810000 LB 0x001da000 C:\WINDOWS\system32\SETUPAPI.dll [fFlags=0x0]
227519bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
227619bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9f21d0000 LB 0x00012000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll [fFlags=0x0]
227719bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wtsapi32.dll
227819bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9f1850000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\VERSION.dll [fFlags=0x0]
227919bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\version.dll
228019bc.16c4: supR3HardenedDllNotificationCallback: load 0000000053e60000 LB 0x022be000 C:\WINDOWS\system32\nvoglv64.dll [fFlags=0x0]
228119bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nvoglv64.dll
228219bc.16c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
228319bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
228419bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-synch-l1-2-0'
228519bc.16c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
228619bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
228719bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-fibers-l1-1-1'
228819bc.16c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
228919bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
229019bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-synch-l1-2-0'
229119bc.16c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
229219bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
229319bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-fibers-l1-1-1'
229419bc.16c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
229519bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
229619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3d20000 'api-ms-win-core-localization-l1-2-1'
229719bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4150000 'C:\WINDOWS\system32\Advapi32.dll'
229819bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4a50000 'C:\WINDOWS\system32\gdi32.dll'
229919bc.16c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
230019bc.16c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ntmarta.dll)
230119bc.16c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ntmarta.dll
230219bc.16c4: supR3HardenedDllNotificationCallback: load 00007ff9f1450000 LB 0x00032000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
230319bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
230419bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000053e60000 'C:\WINDOWS\system32\nvoglv64.dll'
230519bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
230619bc.16c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
230719bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
230819bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
230919bc.16c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\ntmarta.dll'
231019bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f4a50000 'C:\WINDOWS\system32\gdi32.dll'
231119bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
231219bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\opengl32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
231319bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\opengl32.dll'
231419bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dwmapi.dll
231519bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dwmapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
231619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f2240000 'C:\WINDOWS\system32\dwmapi.dll'
231719bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\Shell32.dll'
231819bc.16c4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\nvspcap64.dll': 0 (NtPath=\??\C:\WINDOWS\system32\nvspcap64.dll; Input=C:\WINDOWS\system32\nvspcap64.dll; rcNtGetDll=0x0
231919bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\nvspcap64.dll'
232019bc.1790: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-appmodel-runtime-l1-1-2) -> 0x0, fPresent=0
232119bc.1790: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\api-ms-win-appmodel-runtime-l1-1-2.dll': 0 (NtPath=\??\C:\WINDOWS\system32\api-ms-win-appmodel-runtime-l1-1-2.dll; Input=api-ms-win-appmodel-runtime-l1-1-2; rcNtGetDll=0xc0000135
232219bc.1790: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\api-ms-win-appmodel-runtime-l1-1-2.dll'
232319bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
232419bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
232519bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
232619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
232719bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
232819bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
232919bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233019bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233119bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233219bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233319bc.16c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\opengl32.dll
233419bc.16c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
233519bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233619bc.16c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233719bc.c48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233819bc.c48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dc310000 'C:\WINDOWS\system32\OPENGL32.dll'
233919bc.19c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
234019bc.19c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
234119bc.19c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\powrprof.dll)
234219bc.19c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\powrprof.dll
234319bc.19c: supR3HardenedDllNotificationCallback: load 00007ff9f3260000 LB 0x00046000 C:\WINDOWS\SYSTEM32\powrprof.dll [fFlags=0x0]
234419bc.19c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\powrprof.dll [avoiding WinVerifyTrust]
234519bc.19c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
234619bc.19c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winsta.dll)
234719bc.19c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winsta.dll
234819bc.19c: supR3HardenedDllNotificationCallback: load 00007ff9f2f40000 LB 0x0005a000 C:\WINDOWS\SYSTEM32\WINSTA.dll [fFlags=0x0]
234919bc.19c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winsta.dll [avoiding WinVerifyTrust]
235019bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
235119bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
235219bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
235319bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
235419bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
235519bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
235619bc.1208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
235719bc.1208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
235819bc.1208: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\winsta.dll'
235919bc.1208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
236019bc.1208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
236119bc.1208: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\powrprof.dll'
236219bc.1208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
236319bc.1208: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
236419bc.1208: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
236519bc.1208: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
236619bc.1208: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
236719bc.1208: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
236819bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
236919bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
237019bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
237119bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
237219bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
237319bc.1208: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
237419bc.1208: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
237519bc.1208: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
237619bc.1208: supR3HardenedDllNotificationCallback: load 00007ff9ee150000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
237719bc.1208: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
237819bc.1208: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ee150000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
237919bc.17bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
238019bc.17bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
238119bc.17bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
238219bc.17bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
238319bc.17bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
238419bc.17bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
238519bc.17bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
238619bc.17bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
238719bc.17bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
238819bc.17bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
238919bc.17bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
239019bc.17bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
239119bc.17bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
239219bc.17bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
239319bc.17bc: supR3HardenedDllNotificationCallback: load 00007ff9ed5e0000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
239419bc.17bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
239519bc.17bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ed5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
239619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\Shell32.dll'
239719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
239819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
239919bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
240019bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
240119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
240219bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
240319bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
240419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
240519bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
240619bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
240719bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
240819bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
240919bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
241019bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll
241119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
241219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
241319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
241419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
241519bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
241619bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winnsi.dll'.
241719bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
241819bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
241919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
242019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
242119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
242219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
242319bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
242419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
242519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
242619bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
242719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
242819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
242919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
243019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
243119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
243219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
243319bc.1594: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume8\Windows\System32\winnsi.dll'.
243419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
243519bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'nsi.dll'.
243619bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\winnsi.dll)
243719bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\winnsi.dll
243819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
243919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
244019bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll [lacks WinVerifyTrust]
244119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
244219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
244319bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll [lacks WinVerifyTrust]
244419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
244519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
244619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
244719bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
244819bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
244919bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
245019bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
245119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
245219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
245319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
245419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
245519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
245619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
245719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
245819bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
245919bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
246019bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
246119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
246219bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
246319bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
246419bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll
246519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
246619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
246719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
246819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
246919bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
247019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
247119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
247219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
247319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
247419bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\advapi32.dll
247519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
247619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
247719bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\setupapi.dll
247819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
247919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
248019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
248119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
248219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
248319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
248419bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
248519bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll
248619bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll
248719bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
248819bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
248919bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
249019bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9dc170000 LB 0x00063000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
249119bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDDU.dll
249219bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9e9020000 LB 0x0005d000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
249319bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
249419bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9ee9d0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
249519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
249619bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9edfa0000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
249719bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
249819bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9cfea0000 LB 0x009c3000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
249919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD.dll
250019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cfea0000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
250119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
250219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
250319bc.1594: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\winnsi.dll'
250419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
250519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxC.dll
250619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
250719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d79e0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
250819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
250919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxDD2.dll
251019bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
251119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e9020000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
251219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
251319bc.45c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
251419bc.45c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
251519bc.45c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
251619bc.45c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
251719bc.45c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
251819bc.45c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
251919bc.45c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
252019bc.45c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
252119bc.45c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
252219bc.45c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
252319bc.45c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxVMM.dll
252419bc.45c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
252519bc.45c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
252619bc.45c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
252719bc.45c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
252819bc.45c: supR3HardenedDllNotificationCallback: load 00007ff9ecba0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
252919bc.45c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
253019bc.45c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ecba0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
253119bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\IPHLPAPI.DLL
253219bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
253319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9edfa0000 'C:\WINDOWS\system32\Iphlpapi.dll'
253419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
253519bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
253619bc.1594: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\dhcpcsvc6.dll)
253719bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dhcpcsvc6.dll
253819bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9edd50000 LB 0x00016000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
253919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
254019bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
254119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
254219bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
254319bc.1594: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\dhcpcsvc.dll)
254419bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dhcpcsvc.dll
254519bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9edd30000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
254619bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
254719bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000fa4 pwszName=\Device\HarddiskVolume8\Windows\System32\dhcpcsvc.dll
254819bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
254919bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
255019bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BA7A32ED884F605C3353300D1165178C01A252E7
255119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
255219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume8\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
255319bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\nsi.dll [lacks WinVerifyTrust]
255419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
255519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
255619bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ws2_32.dll
255719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
255819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
255919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
256019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
256119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
256219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
256319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
256419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
256519bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1995_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\dhcpcsvc.dll'
256619bc.1594: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
256719bc.1594: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\dhcpcsvc.dll'
256819bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f98 pwszName=\Device\HarddiskVolume8\Windows\System32\dhcpcsvc6.dll
256919bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
257019bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
257119bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=852EBF87DB04C5286E131027705696EE75673482
257219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
257319bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\crypt32.dll
257419bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
257519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
257619bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1995_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\dhcpcsvc6.dll'
257719bc.1594: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
257819bc.1594: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\dhcpcsvc6.dll'
257919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
258019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
258119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
258219bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'rpcrt4.dll'.
258319bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'devobj.dll'.
258419bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll) WinVerifyTrust
258519bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
258619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
258719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume8\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
258819bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\devobj.dll [redoing WinVerifyTrust]
258919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
259019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
259119bc.1594: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\devobj.dll'
259219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
259319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
259419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
259519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
259619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
259719bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
259819bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9f14c0000 LB 0x00070000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
259919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
260019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f14c0000 'C:\WINDOWS\System32\MMDevApi.dll'
260119bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000d84 pwszName=\Device\HarddiskVolume8\Windows\System32\dsound.dll
260219bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
260319bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
260419bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DF2CE4B6EA46F5759902C86AAA15DD883AC6DD4E
260519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
260619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
260719bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_779_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\dsound.dll'
260819bc.1594: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
260919bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
261019bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
261119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
261219bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
261319bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winmm.dll'.
261419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'powrprof.dll'.
261519bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\dsound.dll) WinVerifyTrust
261619bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\dsound.dll
261719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'powrprof.dll'...
261819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'powrprof.dll' -> '\Device\HarddiskVolume8\Windows\System32\powrprof.dll' [rcNtRedir=0xc0150008]
261919bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\powrprof.dll
262019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
262119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
262219bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
262319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
262419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
262519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
262619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume8\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
262719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
262819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
262919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
263019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
263119bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
263219bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
263319bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9e8f10000 LB 0x0009d000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
263419bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
263519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
263619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
263719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\System32\dsound.dll'
263819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\System32\dsound.dll'
263919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
264019bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
264119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
264219bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
264319bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
264419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f14c0000 'C:\WINDOWS\system32\MMDEVAPI.DLL'
264519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
264619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
264719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
264819bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001084 pwszName=\Device\HarddiskVolume8\Windows\System32\wdmaud.drv
264919bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
265019bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
265119bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=39D0975C289FEE943955B8CE81B02A0395FAA747
265219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
265319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
265419bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_779_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\wdmaud.drv'
265519bc.1594: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
265619bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
265719bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'mmdevapi.dll'.
265819bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'user32.dll'.
265919bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'winmm.dll'.
266019bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ksuser.dll'.
266119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'avrt.dll'.
266219bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\wdmaud.drv) WinVerifyTrust
266319bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
266419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
266519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
266619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
266719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
266819bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\avrt.dll) WinVerifyTrust
266919bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\avrt.dll
267019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
267119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume8\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
267219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
267319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
267419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
267519bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\ksuser.dll) WinVerifyTrust
267619bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\ksuser.dll
267719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
267819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
267919bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
268019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
268119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
268219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
268319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
268419bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
268519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
268619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
268719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
268819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
268919bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
269019bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
269119bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ksuser.dll
269219bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\avrt.dll
269319bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9eeb30000 LB 0x00008000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
269419bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\ksuser.dll
269519bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9f1840000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
269619bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\avrt.dll
269719bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9e23f0000 LB 0x0003e000 C:\WINDOWS\system32\wdmaud.drv [fFlags=0x0]
269819bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
269919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
270019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
270119bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
270219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
270319bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
270419bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
270519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
270619bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
270719bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
270819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
270919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
271019bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
271119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
271219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
271319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
271419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
271519bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
271619bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
271719bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'mmdevapi.dll'.
271819bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
271919bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\AudioSes.dll) WinVerifyTrust
272019bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
272119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
272219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume8\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
272319bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\combase.dll [redoing WinVerifyTrust]
272419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
272519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
272619bc.1594: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\combase.dll'
272719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
272819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
272919bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
273019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
273119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume8\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
273219bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\oleaut32.dll
273319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
273419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
273519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
273619bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
273719bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
273819bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
273919bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9eda30000 LB 0x0007e000 C:\WINDOWS\system32\AUDIOSES.DLL [fFlags=0x0]
274019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\AudioSes.dll
274119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eda30000 'C:\WINDOWS\system32\AUDIOSES.DLL'
274219bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
274319bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
274419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
274519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\wdmaud.drv
274619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
274719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
274819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
274919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
275019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
275119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e23f0000 'C:\WINDOWS\system32\wdmaud.drv'
275219bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000fa8 pwszName=\Device\HarddiskVolume8\Windows\System32\msacm32.drv
275319bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
275419bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
275519bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FC41C5E1A841A83249581F1B29E14A708B8981A9
275619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
275719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
275819bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_779_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\msacm32.drv'
275919bc.1594: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
276019bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
276119bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
276219bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
276319bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msacm32.dll'.
276419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'mmdevapi.dll'.
276519bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msacm32.drv) WinVerifyTrust
276619bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msacm32.drv
276719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
276819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume8\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
276919bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\MMDevAPI.dll
277019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
277119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume8\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
277219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
277319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
277419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
277519bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\msacm32.dll) WinVerifyTrust
277619bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\msacm32.dll
277719bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
277819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
277919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
278019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
278119bc.1594: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\user32.dll
278219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
278319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
278419bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
278519bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
278619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
278719bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
278819bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.dll
278919bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9e9000000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
279019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.dll
279119bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9eb780000 LB 0x0000b000 C:\WINDOWS\system32\msacm32.drv [fFlags=0x0]
279219bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
279319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
279419bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
279519bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
279619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
279719bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
279819bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
279919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
280019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
280119bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
280219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
280319bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
280419bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
280519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
280619bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
280719bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
280819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
280919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\msacm32.drv
281019bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
281119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
281219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
281319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
281419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9eb780000 'C:\WINDOWS\system32\msacm32.drv'
281519bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000010c4 pwszName=\Device\HarddiskVolume8\Windows\System32\midimap.dll
281619bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
281719bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
281819bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A0F2984C30BFC77017EA7B9BF6F656853E29D991
281919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
282019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
282119bc.1594: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_779_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.cat'; file='\Device\HarddiskVolume8\Windows\System32\midimap.dll'
282219bc.1594: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
282319bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
282419bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
282519bc.1594: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
282619bc.1594: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\midimap.dll) WinVerifyTrust
282719bc.1594: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\midimap.dll
282819bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
282919bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume8\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
283019bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
283119bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume8\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
283219bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
283319bc.1594: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume8\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
283419bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
283519bc.1594: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
283619bc.1594: supR3HardenedDllNotificationCallback: load 00007ff9ea680000 LB 0x0000a000 C:\WINDOWS\system32\midimap.dll [fFlags=0x0]
283719bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
283819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ea680000 'C:\WINDOWS\system32\midimap.dll'
283919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
284019bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
284119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ea680000 'C:\WINDOWS\system32\midimap.dll'
284219bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
284319bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
284419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ea680000 'C:\WINDOWS\system32\midimap.dll'
284519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\midimap.dll
284619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
284719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ea680000 'C:\WINDOWS\system32\midimap.dll'
284819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
284919bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
285019bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
285119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
285219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
285319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\SYSTEM32\WINMM.dll'
285419bc.e34: '\Device\HarddiskVolume8\Windows\System32\tzres.dll' has no imports
285519bc.e34: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume8\Windows\System32\tzres.dll)
285619bc.e34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\tzres.dll
285719bc.e34: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001230 (hFile=0000000000001228) with 0xc0000022 -> STATUS_TRUST_FAILURE
285819bc.e34: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume8\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
285919bc.e34: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001228 (hFile=0000000000001230) with 0xc0000022 -> STATUS_TRUST_FAILURE
286019bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000122c pwszName=\Device\HarddiskVolume8\Windows\System32\tzres.dll
286119bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
286219bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
286319bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2C2912B1AF73A6796732D1488D75007F742A3299
286419bc.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
286519bc.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
286619bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_98_for_KB3148851~31bf3856ad364e35~amd64~~6.3.1.0.cat'; file='\Device\HarddiskVolume8\Windows\System32\tzres.dll'
286719bc.e34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
286819bc.e34: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume8\Windows\System32\tzres.dll'
286919bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000012e8 pwszName=\Device\HarddiskVolume8\Windows\System32\mswsock.dll
287019bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001708410
287119bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001708410
287219bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62D186BD3F7A84B0BADDB3FC39AE5415D6DEF7D3
287319bc.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3120000 'C:\WINDOWS\system32\rsaenh.dll'
287419bc.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3e70000 'C:\WINDOWS\system32\crypt32.dll'
287519bc.e34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB3161949~31bf3856ad364e35~amd64~~6.3.1.3.cat'; file='\Device\HarddiskVolume8\Windows\System32\mswsock.dll'
287619bc.e34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
287719bc.e34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
287819bc.e34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
287919bc.e34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume8\Windows\System32\mswsock.dll) WinVerifyTrust
288019bc.e34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume8\Windows\System32\mswsock.dll
288119bc.e34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
288219bc.e34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume8\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
288319bc.e34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
288419bc.e34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume8\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
288519bc.e34: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
288619bc.e34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\mswsock.dll
288719bc.e34: supR3HardenedDllNotificationCallback: load 00007ff9f34f0000 LB 0x00059000 C:\WINDOWS\system32\mswsock.dll [fFlags=0x0]
288819bc.e34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\mswsock.dll
288919bc.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f34f0000 'C:\WINDOWS\system32\mswsock.dll'
289019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
289119bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
289219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
289319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
289419bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
289519bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
289619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
289719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
289819bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
289919bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
290019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
290119bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
290219bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
290319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
290419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
290519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
290619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
290719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
290819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
290919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
291019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
291119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
291219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
291319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
291419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
291519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
291619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
291719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
291819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
291919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
292019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
292119bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
292219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
292319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
292419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
292519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
292619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
292719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
292819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
292919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
293019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
293119bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
293219bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
293319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
293419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
293519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
293619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
293719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
293819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
293919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
294119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
294519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
294819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
294919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
295319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
295719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
295919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
296119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
296519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
296819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
296919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
297019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
297119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
297219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
297319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
297419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
297519bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\winmm.dll
297619bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
297719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
297819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
297919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298019bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298119bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
298319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298619bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
298719bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298819bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
298919bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
299019bc.1594: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\dsound.dll
299119bc.1594: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
299219bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e8f10000 'C:\WINDOWS\system32\dsound.dll'
299319bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
299419bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
299519bc.1594: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1420000 'C:\WINDOWS\system32\winmm.dll'
299619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
299719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
299819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
299919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300019bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
300119bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
300219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
300919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
301819bc.b2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume8\Windows\System32\shell32.dll
301919bc.b2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
302019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302619bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302719bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302819bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
302919bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
303019bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
303119bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
303219bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
303319bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
303419bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'
303519bc.b2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f5120000 'C:\WINDOWS\system32\shell32.dll'

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy