VirtualBox

Ticket #17807: VBoxHardening.2.log

File VBoxHardening.2.log, 356.1 KB (added by Bruner, 6 years ago)
Line 
1b44.27c: Log file opened: 5.2.18r124319 g_hStartupLog=0000000000000068 g_uNtVerCombined=0xa042ee00
2b44.27c: \SystemRoot\System32\ntdll.dll:
3b44.27c: CreationTime: 2018-06-19T19:53:05.493141200Z
4b44.27c: LastWriteTime: 2018-06-19T19:53:05.493141200Z
5b44.27c: ChangeTime: 2018-08-28T15:13:38.677747900Z
6b44.27c: FileAttributes: 0x20
7b44.27c: Size: 0x1db2d8
8b44.27c: NT Headers: 0xe8
9b44.27c: Timestamp: 0x6529f37c
10b44.27c: Machine: 0x8664 - amd64
11b44.27c: Timestamp: 0x6529f37c
12b44.27c: Image Version: 10.0
13b44.27c: SizeOfImage: 0x1e1000 (1970176)
14b44.27c: Resource Dir: 0x174000 LB 0x6b338
15b44.27c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16b44.27c: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17b44.27c: ProductName: Microsoft® Windows® Operating System
18b44.27c: ProductVersion: 10.0.17134.112
19b44.27c: FileVersion: 10.0.17134.112 (WinBuild.160101.0800)
20b44.27c: FileDescription: NT Layer DLL
21b44.27c: \SystemRoot\System32\kernel32.dll:
22b44.27c: CreationTime: 2018-04-11T23:34:40.510607900Z
23b44.27c: LastWriteTime: 2018-04-11T23:34:40.510607900Z
24b44.27c: ChangeTime: 2018-08-28T15:13:37.584017500Z
25b44.27c: FileAttributes: 0x20
26b44.27c: Size: 0xafef8
27b44.27c: NT Headers: 0xe8
28b44.27c: Timestamp: 0x5f488a51
29b44.27c: Machine: 0x8664 - amd64
30b44.27c: Timestamp: 0x5f488a51
31b44.27c: Image Version: 10.0
32b44.27c: SizeOfImage: 0xb2000 (729088)
33b44.27c: Resource Dir: 0xb0000 LB 0x520
34b44.27c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35b44.27c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36b44.27c: ProductName: Microsoft® Windows® Operating System
37b44.27c: ProductVersion: 10.0.17134.1
38b44.27c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
39b44.27c: FileDescription: Windows NT BASE API Client DLL
40b44.27c: \SystemRoot\System32\KernelBase.dll:
41b44.27c: CreationTime: 2018-06-19T19:53:05.471804800Z
42b44.27c: LastWriteTime: 2018-06-19T19:53:05.471804800Z
43b44.27c: ChangeTime: 2018-08-28T15:13:39.037107200Z
44b44.27c: FileAttributes: 0x20
45b44.27c: Size: 0x2739d8
46b44.27c: NT Headers: 0xf8
47b44.27c: Timestamp: 0xf2b2cb6c
48b44.27c: Machine: 0x8664 - amd64
49b44.27c: Timestamp: 0xf2b2cb6c
50b44.27c: Image Version: 10.0
51b44.27c: SizeOfImage: 0x273000 (2568192)
52b44.27c: Resource Dir: 0x251000 LB 0x548
53b44.27c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54b44.27c: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
55b44.27c: ProductName: Microsoft® Windows® Operating System
56b44.27c: ProductVersion: 10.0.17134.112
57b44.27c: FileVersion: 10.0.17134.112 (WinBuild.160101.0800)
58b44.27c: FileDescription: Windows NT BASE API Client DLL
59b44.27c: \SystemRoot\System32\apisetschema.dll:
60b44.27c: CreationTime: 2018-04-11T23:34:44.042150700Z
61b44.27c: LastWriteTime: 2018-04-11T23:34:44.042150700Z
62b44.27c: ChangeTime: 2018-08-28T13:37:34.545229800Z
63b44.27c: FileAttributes: 0x20
64b44.27c: Size: 0x1bd98
65b44.27c: NT Headers: 0xd0
66b44.27c: Timestamp: 0xd02ff418
67b44.27c: Machine: 0x8664 - amd64
68b44.27c: Timestamp: 0xd02ff418
69b44.27c: Image Version: 10.0
70b44.27c: SizeOfImage: 0x1c000 (114688)
71b44.27c: Resource Dir: 0x1b000 LB 0x408
72b44.27c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73b44.27c: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
74b44.27c: ProductName: Microsoft® Windows® Operating System
75b44.27c: ProductVersion: 10.0.17134.1
76b44.27c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
77b44.27c: FileDescription: ApiSet Schema DLL
78b44.27c: supR3HardenedWinFindAdversaries: 0x0
79b44.27c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
80b44.27c: Calling main()
81b44.27c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
82b44.27c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
83b44.27c: SUPR3HardenedMain: Respawn #1
84b44.27c: System32: \Device\HarddiskVolume2\Windows\System32
85b44.27c: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
86b44.27c: KnownDllPath: C:\WINDOWS\System32
87b44.27c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
88b44.27c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
89b44.27c: supR3HardNtEnableThreadCreation:
90b44.27c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffccc1a2fc0 pvNtTerminateThread=00007ffccc1ca900
91b44.27c: supR3HardenedWinDoReSpawn(1): New child 310c.321c [kernel32].
92b44.27c: supR3HardNtChildGatherData: PebBaseAddress=00000000009c4000 cbPeb=0x388
93b44.27c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffccc130000 uNtDllChildAddr=00007ffccc130000
94b44.27c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffccc1a2fc0
95b44.27c: supR3HardenedWinSetupChildInit: Start child.
96b44.27c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
97b44.27c: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 29 sleeps
98b44.27c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
99b44.27c: *0000000000000000-000000000062ffff 0x0001/0x0000 0x0000000
100b44.27c: *0000000000630000-000000000064ffff 0x0004/0x0004 0x0020000
101b44.27c: *0000000000650000-0000000000668fff 0x0002/0x0002 0x0040000
102b44.27c: 0000000000669000-000000000066ffff 0x0001/0x0000 0x0000000
103b44.27c: *0000000000670000-000000000076afff 0x0000/0x0004 0x0020000
104b44.27c: 000000000076b000-000000000076dfff 0x0104/0x0004 0x0020000
105b44.27c: 000000000076e000-000000000076ffff 0x0004/0x0004 0x0020000
106b44.27c: *0000000000770000-0000000000773fff 0x0002/0x0002 0x0040000
107b44.27c: 0000000000774000-000000000077ffff 0x0001/0x0000 0x0000000
108b44.27c: *0000000000780000-0000000000780fff 0x0004/0x0004 0x0020000
109b44.27c: 0000000000781000-00000000007fffff 0x0001/0x0000 0x0000000
110b44.27c: *0000000000800000-00000000009c3fff 0x0000/0x0004 0x0020000
111b44.27c: 00000000009c4000-00000000009c6fff 0x0004/0x0004 0x0020000
112b44.27c: 00000000009c7000-00000000009fffff 0x0000/0x0004 0x0020000
113b44.27c: 0000000000a00000-000000007ffdffff 0x0001/0x0000 0x0000000
114b44.27c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
115b44.27c: 000000007ffe1000-00007ff52067ffff 0x0001/0x0000 0x0000000
116b44.27c: *00007ff520680000-00007ff5206a2fff 0x0002/0x0002 0x0040000
117b44.27c: 00007ff5206a3000-00007ff6e0e8ffff 0x0001/0x0000 0x0000000
118b44.27c: *00007ff6e0e90000-00007ff6e0e90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
119b44.27c: 00007ff6e0e91000-00007ff6e0f01fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
120b44.27c: 00007ff6e0f02000-00007ff6e0f02fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
121b44.27c: 00007ff6e0f03000-00007ff6e0f48fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
122b44.27c: 00007ff6e0f49000-00007ff6e0f49fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
123b44.27c: 00007ff6e0f4a000-00007ff6e0f4afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
124b44.27c: 00007ff6e0f4b000-00007ff6e0f4ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
125b44.27c: 00007ff6e0f50000-00007ff6e0f50fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
126b44.27c: 00007ff6e0f51000-00007ff6e0f51fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
127b44.27c: 00007ff6e0f52000-00007ff6e0f55fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
128b44.27c: 00007ff6e0f56000-00007ff6e0f9dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
129b44.27c: 00007ff6e0f9e000-00007ffccc12ffff 0x0001/0x0000 0x0000000
130b44.27c: *00007ffccc130000-00007ffccc130fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
131b44.27c: 00007ffccc131000-00007ffccc23ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
132b44.27c: 00007ffccc240000-00007ffccc285fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
133b44.27c: 00007ffccc286000-00007ffccc290fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
134b44.27c: 00007ffccc291000-00007ffccc29efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
135b44.27c: 00007ffccc29f000-00007ffccc29ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
136b44.27c: 00007ffccc2a0000-00007ffccc2a2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
137b44.27c: 00007ffccc2a3000-00007ffccc310fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
138b44.27c: 00007ffccc311000-00007ffffffeffff 0x0001/0x0000 0x0000000
139b44.27c: VirtualBox.exe: timestamp 0x5b72bf7e (rc=VINF_SUCCESS)
140b44.27c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
141b44.27c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
142b44.27c: supR3HardNtChildPurify: Done after 323 ms and 0 fixes (loop #0).
143310c.321c: Log file opened: 5.2.18r124319 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
144310c.321c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffccc130000 g_uNtVerCombined=0xa042ee00
145b44.27c: supR3HardNtEnableThreadCreation:
146310c.321c: ntdll.dll: timestamp 0x6529f37c (rc=VINF_SUCCESS)
147310c.321c: New simple heap: #1 0000000000b00000 LB 0x400000 (for 1970176 allocation)
148310c.321c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
149310c.321c: System32: \Device\HarddiskVolume2\Windows\System32
150310c.321c: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
151310c.321c: KnownDllPath: C:\WINDOWS\System32
152310c.321c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
153310c.321c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
154310c.321c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
155310c.321c: Registered Dll notification callback with NTDLL.
156310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
157310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
158310c.321c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
159310c.321c: supR3HardenedDllNotificationCallback: load 00007ffcc8500000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
160310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
161310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
162310c.321c: supR3HardenedDllNotificationCallback: load 00007ffccc010000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
163310c.321c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
164310c.321c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccc010000 'C:\WINDOWS\System32\KERNEL32.DLL'
165310c.321c: supR3HardenedDllNotificationCallback: load 00007ff6e0e90000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
166310c.321c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
167310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
168310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
169310c.321c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffccc1a2fc0 pvNtTerminateThread=00007ffccc1ca900
170310c.321c: \SystemRoot\System32\ntdll.dll:
171310c.321c: CreationTime: 2018-06-19T19:53:05.493141200Z
172310c.321c: LastWriteTime: 2018-06-19T19:53:05.493141200Z
173310c.321c: ChangeTime: 2018-08-28T15:13:38.677747900Z
174310c.321c: FileAttributes: 0x20
175310c.321c: Size: 0x1db2d8
176310c.321c: NT Headers: 0xe8
177310c.321c: Timestamp: 0x6529f37c
178310c.321c: Machine: 0x8664 - amd64
179310c.321c: Timestamp: 0x6529f37c
180310c.321c: Image Version: 10.0
181310c.321c: SizeOfImage: 0x1e1000 (1970176)
182310c.321c: Resource Dir: 0x174000 LB 0x6b338
183310c.321c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
184310c.321c: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
185310c.321c: ProductName: Microsoft® Windows® Operating System
186310c.321c: ProductVersion: 10.0.17134.112
187310c.321c: FileVersion: 10.0.17134.112 (WinBuild.160101.0800)
188310c.321c: FileDescription: NT Layer DLL
189310c.321c: \SystemRoot\System32\kernel32.dll:
190310c.321c: CreationTime: 2018-04-11T23:34:40.510607900Z
191310c.321c: LastWriteTime: 2018-04-11T23:34:40.510607900Z
192310c.321c: ChangeTime: 2018-08-28T15:13:37.584017500Z
193310c.321c: FileAttributes: 0x20
194310c.321c: Size: 0xafef8
195310c.321c: NT Headers: 0xe8
196310c.321c: Timestamp: 0x5f488a51
197310c.321c: Machine: 0x8664 - amd64
198310c.321c: Timestamp: 0x5f488a51
199310c.321c: Image Version: 10.0
200310c.321c: SizeOfImage: 0xb2000 (729088)
201310c.321c: Resource Dir: 0xb0000 LB 0x520
202310c.321c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
203310c.321c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
204310c.321c: ProductName: Microsoft® Windows® Operating System
205310c.321c: ProductVersion: 10.0.17134.1
206310c.321c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
207310c.321c: FileDescription: Windows NT BASE API Client DLL
208310c.321c: \SystemRoot\System32\KernelBase.dll:
209310c.321c: CreationTime: 2018-06-19T19:53:05.471804800Z
210310c.321c: LastWriteTime: 2018-06-19T19:53:05.471804800Z
211310c.321c: ChangeTime: 2018-08-28T15:13:39.037107200Z
212310c.321c: FileAttributes: 0x20
213310c.321c: Size: 0x2739d8
214310c.321c: NT Headers: 0xf8
215310c.321c: Timestamp: 0xf2b2cb6c
216310c.321c: Machine: 0x8664 - amd64
217310c.321c: Timestamp: 0xf2b2cb6c
218310c.321c: Image Version: 10.0
219310c.321c: SizeOfImage: 0x273000 (2568192)
220310c.321c: Resource Dir: 0x251000 LB 0x548
221310c.321c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
222310c.321c: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
223310c.321c: ProductName: Microsoft® Windows® Operating System
224310c.321c: ProductVersion: 10.0.17134.112
225310c.321c: FileVersion: 10.0.17134.112 (WinBuild.160101.0800)
226310c.321c: FileDescription: Windows NT BASE API Client DLL
227310c.321c: \SystemRoot\System32\apisetschema.dll:
228310c.321c: CreationTime: 2018-04-11T23:34:44.042150700Z
229310c.321c: LastWriteTime: 2018-04-11T23:34:44.042150700Z
230310c.321c: ChangeTime: 2018-08-28T13:37:34.545229800Z
231310c.321c: FileAttributes: 0x20
232310c.321c: Size: 0x1bd98
233310c.321c: NT Headers: 0xd0
234310c.321c: Timestamp: 0xd02ff418
235310c.321c: Machine: 0x8664 - amd64
236310c.321c: Timestamp: 0xd02ff418
237310c.321c: Image Version: 10.0
238310c.321c: SizeOfImage: 0x1c000 (114688)
239310c.321c: Resource Dir: 0x1b000 LB 0x408
240310c.321c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
241310c.321c: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
242310c.321c: ProductName: Microsoft® Windows® Operating System
243310c.321c: ProductVersion: 10.0.17134.1
244310c.321c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
245310c.321c: FileDescription: ApiSet Schema DLL
246310c.321c: supR3HardenedWinFindAdversaries: 0x0
247310c.321c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
248310c.321c: Calling main()
249310c.321c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
250310c.321c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
251b44.27c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 254 ms.
252310c.321c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
253310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
254310c.321c: SUPR3HardenedMain: Respawn #2
255310c.321c: supR3HardNtEnableThreadCreation:
256310c.321c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
257310c.321c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
258310c.321c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
259310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
260310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
261310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
262310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
263310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
264310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
265310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
266310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
267310c.321c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
268310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
269310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
270310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
271310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
272310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
273310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
274310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
275310c.321c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
276310c.321c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
277310c.321c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x1000 pwszSearchPath=0000000000000000:<flags> [calling]
278310c.321c: supR3HardenedDllNotificationCallback: load 00007ffccbb00000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
279310c.321c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
280310c.321c: supR3HardenedDllNotificationCallback: load 00007ffcc95c0000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
281310c.321c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
282310c.321c: supR3HardenedDllNotificationCallback: load 00007ffcc9810000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
283310c.321c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
284310c.321c: supR3HardenedDllNotificationCallback: load 00007ffcc96f0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.DLL [fFlags=0x0]
285310c.321c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
286310c.321c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc96f0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
287310c.321c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
288310c.321c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
289310c.321c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
290310c.321c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
291310c.321c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccc130000 'C:\WINDOWS\System32\ntdll.dll'
292310c.321c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffccc1a2fc0 pvNtTerminateThread=00007ffccc1ca900
293310c.321c: supR3HardenedWinDoReSpawn(2): New child 2c78.127c [kernel32].
294310c.321c: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
295310c.321c: supR3HardNtChildGatherData: PebBaseAddress=0000000000df7000 cbPeb=0x388
296310c.321c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffccc130000 uNtDllChildAddr=00007ffccc130000
297310c.321c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffccc1a2fc0
298310c.321c: supR3HardenedWinSetupChildInit: Start child.
299310c.321c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
300310c.321c: supR3HardNtChildPurify: Startup delay kludge #1/0: 259 ms, 29 sleeps
301310c.321c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
302310c.321c: *0000000000000000-0000000000b8ffff 0x0001/0x0000 0x0000000
303310c.321c: *0000000000b90000-0000000000baffff 0x0004/0x0004 0x0020000
304310c.321c: *0000000000bb0000-0000000000bc8fff 0x0002/0x0002 0x0040000
305310c.321c: 0000000000bc9000-0000000000bcffff 0x0001/0x0000 0x0000000
306310c.321c: *0000000000bd0000-0000000000bd3fff 0x0002/0x0002 0x0040000
307310c.321c: 0000000000bd4000-0000000000bdffff 0x0001/0x0000 0x0000000
308310c.321c: *0000000000be0000-0000000000be0fff 0x0004/0x0004 0x0020000
309310c.321c: 0000000000be1000-0000000000bfffff 0x0001/0x0000 0x0000000
310310c.321c: *0000000000c00000-0000000000df6fff 0x0000/0x0004 0x0020000
311310c.321c: 0000000000df7000-0000000000df9fff 0x0004/0x0004 0x0020000
312310c.321c: 0000000000dfa000-0000000000dfffff 0x0000/0x0004 0x0020000
313310c.321c: *0000000000e00000-0000000000efafff 0x0000/0x0004 0x0020000
314310c.321c: 0000000000efb000-0000000000efdfff 0x0104/0x0004 0x0020000
315310c.321c: 0000000000efe000-0000000000efffff 0x0004/0x0004 0x0020000
316310c.321c: 0000000000f00000-000000007ffdffff 0x0001/0x0000 0x0000000
317310c.321c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
318310c.321c: 000000007ffe1000-00007ff545e3ffff 0x0001/0x0000 0x0000000
319310c.321c: *00007ff545e40000-00007ff545e62fff 0x0002/0x0002 0x0040000
320310c.321c: 00007ff545e63000-00007ff6e0e8ffff 0x0001/0x0000 0x0000000
321310c.321c: *00007ff6e0e90000-00007ff6e0e90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
322310c.321c: 00007ff6e0e91000-00007ff6e0f01fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
323310c.321c: 00007ff6e0f02000-00007ff6e0f02fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
324310c.321c: 00007ff6e0f03000-00007ff6e0f48fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
325310c.321c: 00007ff6e0f49000-00007ff6e0f49fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
326310c.321c: 00007ff6e0f4a000-00007ff6e0f4afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
327310c.321c: 00007ff6e0f4b000-00007ff6e0f4ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
328310c.321c: 00007ff6e0f50000-00007ff6e0f50fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
329310c.321c: 00007ff6e0f51000-00007ff6e0f51fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
330310c.321c: 00007ff6e0f52000-00007ff6e0f55fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
331310c.321c: 00007ff6e0f56000-00007ff6e0f9dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
332310c.321c: 00007ff6e0f9e000-00007ffccc12ffff 0x0001/0x0000 0x0000000
333310c.321c: *00007ffccc130000-00007ffccc130fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
334310c.321c: 00007ffccc131000-00007ffccc23ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
335310c.321c: 00007ffccc240000-00007ffccc285fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
336310c.321c: 00007ffccc286000-00007ffccc290fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
337310c.321c: 00007ffccc291000-00007ffccc29efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
338310c.321c: 00007ffccc29f000-00007ffccc29ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
339310c.321c: 00007ffccc2a0000-00007ffccc2a2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
340310c.321c: 00007ffccc2a3000-00007ffccc310fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
341310c.321c: 00007ffccc311000-00007ffffffeffff 0x0001/0x0000 0x0000000
342310c.321c: VirtualBox.exe: timestamp 0x5b72bf7e (rc=VINF_SUCCESS)
343310c.321c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
344310c.321c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
345310c.321c: supR3HardNtChildPurify: Done after 331 ms and 0 fixes (loop #0).
3462c78.127c: Log file opened: 5.2.18r124319 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
3472c78.127c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffccc130000 g_uNtVerCombined=0xa042ee00
3482c78.127c: ntdll.dll: timestamp 0x6529f37c (rc=VINF_SUCCESS)
3492c78.127c: New simple heap: #1 0000000001000000 LB 0x400000 (for 1970176 allocation)
350310c.321c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000b00000 LB 0x400000)
351310c.321c: supR3HardNtEnableThreadCreation:
3522c78.127c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3532c78.127c: System32: \Device\HarddiskVolume2\Windows\System32
3542c78.127c: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
3552c78.127c: KnownDllPath: C:\WINDOWS\System32
3562c78.127c: supR3HardenedVmProcessInit: Opening vboxdrv...
3572c78.127c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3582c78.127c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3592c78.127c: Registered Dll notification callback with NTDLL.
3602c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
3612c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3622c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3632c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8500000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
3642c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
3652c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3662c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccc010000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
3672c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3682c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccc010000 'C:\WINDOWS\System32\KERNEL32.DLL'
3692c78.127c: supR3HardenedDllNotificationCallback: load 00007ff6e0e90000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
3702c78.127c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3712c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3722c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
3732c78.127c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffccc1a2fc0 pvNtTerminateThread=00007ffccc1ca900
374310c.321c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 234 ms.
3752c78.127c: \SystemRoot\System32\ntdll.dll:
3762c78.127c: CreationTime: 2018-06-19T19:53:05.493141200Z
3772c78.127c: LastWriteTime: 2018-06-19T19:53:05.493141200Z
3782c78.127c: ChangeTime: 2018-08-28T15:13:38.677747900Z
3792c78.127c: FileAttributes: 0x20
3802c78.127c: Size: 0x1db2d8
3812c78.127c: NT Headers: 0xe8
3822c78.127c: Timestamp: 0x6529f37c
3832c78.127c: Machine: 0x8664 - amd64
3842c78.127c: Timestamp: 0x6529f37c
3852c78.127c: Image Version: 10.0
3862c78.127c: SizeOfImage: 0x1e1000 (1970176)
3872c78.127c: Resource Dir: 0x174000 LB 0x6b338
3882c78.127c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3892c78.127c: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3902c78.127c: ProductName: Microsoft® Windows® Operating System
3912c78.127c: ProductVersion: 10.0.17134.112
3922c78.127c: FileVersion: 10.0.17134.112 (WinBuild.160101.0800)
3932c78.127c: FileDescription: NT Layer DLL
3942c78.127c: \SystemRoot\System32\kernel32.dll:
3952c78.127c: CreationTime: 2018-04-11T23:34:40.510607900Z
3962c78.127c: LastWriteTime: 2018-04-11T23:34:40.510607900Z
3972c78.127c: ChangeTime: 2018-08-28T15:13:37.584017500Z
3982c78.127c: FileAttributes: 0x20
3992c78.127c: Size: 0xafef8
4002c78.127c: NT Headers: 0xe8
4012c78.127c: Timestamp: 0x5f488a51
4022c78.127c: Machine: 0x8664 - amd64
4032c78.127c: Timestamp: 0x5f488a51
4042c78.127c: Image Version: 10.0
4052c78.127c: SizeOfImage: 0xb2000 (729088)
4062c78.127c: Resource Dir: 0xb0000 LB 0x520
4072c78.127c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4082c78.127c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
4092c78.127c: ProductName: Microsoft® Windows® Operating System
4102c78.127c: ProductVersion: 10.0.17134.1
4112c78.127c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
4122c78.127c: FileDescription: Windows NT BASE API Client DLL
4132c78.127c: \SystemRoot\System32\KernelBase.dll:
4142c78.127c: CreationTime: 2018-06-19T19:53:05.471804800Z
4152c78.127c: LastWriteTime: 2018-06-19T19:53:05.471804800Z
4162c78.127c: ChangeTime: 2018-08-28T15:13:39.037107200Z
4172c78.127c: FileAttributes: 0x20
4182c78.127c: Size: 0x2739d8
4192c78.127c: NT Headers: 0xf8
4202c78.127c: Timestamp: 0xf2b2cb6c
4212c78.127c: Machine: 0x8664 - amd64
4222c78.127c: Timestamp: 0xf2b2cb6c
4232c78.127c: Image Version: 10.0
4242c78.127c: SizeOfImage: 0x273000 (2568192)
4252c78.127c: Resource Dir: 0x251000 LB 0x548
4262c78.127c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4272c78.127c: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
4282c78.127c: ProductName: Microsoft® Windows® Operating System
4292c78.127c: ProductVersion: 10.0.17134.112
4302c78.127c: FileVersion: 10.0.17134.112 (WinBuild.160101.0800)
4312c78.127c: FileDescription: Windows NT BASE API Client DLL
4322c78.127c: \SystemRoot\System32\apisetschema.dll:
4332c78.127c: CreationTime: 2018-04-11T23:34:44.042150700Z
4342c78.127c: LastWriteTime: 2018-04-11T23:34:44.042150700Z
4352c78.127c: ChangeTime: 2018-08-28T13:37:34.545229800Z
4362c78.127c: FileAttributes: 0x20
4372c78.127c: Size: 0x1bd98
4382c78.127c: NT Headers: 0xd0
4392c78.127c: Timestamp: 0xd02ff418
4402c78.127c: Machine: 0x8664 - amd64
4412c78.127c: Timestamp: 0xd02ff418
4422c78.127c: Image Version: 10.0
4432c78.127c: SizeOfImage: 0x1c000 (114688)
4442c78.127c: Resource Dir: 0x1b000 LB 0x408
4452c78.127c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
4462c78.127c: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
4472c78.127c: ProductName: Microsoft® Windows® Operating System
4482c78.127c: ProductVersion: 10.0.17134.1
4492c78.127c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
4502c78.127c: FileDescription: ApiSet Schema DLL
4512c78.127c: supR3HardenedWinFindAdversaries: 0x0
4522c78.127c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
4532c78.127c: Calling main()
4542c78.127c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
4552c78.127c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
4562c78.127c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
4572c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
4582c78.127c: SUPR3HardenedMain: Final process, opening VBoxDrv...
4592c78.127c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001000000 LB 0x400000)
4602c78.127c: supR3HardNtEnableThreadCreation:
4612c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4622c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4632c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4642c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4652c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc18c0000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4662c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4672c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4682c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4692c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc18c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4702c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4712c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4722c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc18c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4732c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc18c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4742c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4752c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
4762c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
4772c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
4782c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
4792c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
4802c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4822c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
4832c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
4842c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4852c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4862c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
4872c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
4882c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
4892c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4902c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4912c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
4922c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
4932c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4942c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4952c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
4962c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
4972c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4982c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4992c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5002c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5012c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccbb00000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5022c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5032c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8470000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
5042c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5052c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8db0000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5062c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
5072c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
5082c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8780000 LB 0x001e2000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
5092c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5102c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc95c0000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
5112c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5122c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc9810000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
5132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
5142c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
5152c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
5162c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc96f0000 LB 0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
5172c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5182c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
5192c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5202c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
5212c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
5222c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8c80000 LB 0x00057000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
5232c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5242c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5252c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5262c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-synch-l1-2-0'
5272c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5282c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5292c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-fibers-l1-1-1'
5302c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5312c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5322c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-fibers-l1-1-1'
5332c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5342c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5352c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-synch-l1-2-0'
5362c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
5372c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5382c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-localization-l1-2-1'
5392c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8c80000 'C:\WINDOWS\system32\Wintrust.dll'
5402c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
5412c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
5422c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5432c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5442c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5452c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
5462c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
5472c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
5482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5502c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5532c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5542c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5552c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5562c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc7fa0000 LB 0x00025000 C:\WINDOWS\system32\bcrypt.dll [fFlags=0x0]
5572c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5582c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc7fa0000 'C:\WINDOWS\system32\bcrypt.dll'
5592c78.127c: bcrypt.dll loaded at 00007ffcc7fa0000, BCryptOpenAlgorithmProvider at 00007ffcc7fa2770, preloading providers:
5602c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
5612c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
5622c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5632c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8c00000 LB 0x0007a000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
5642c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5652c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8c00000 'C:\WINDOWS\system32\bcryptprimitives.dll'
5662c78.127c: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000001595200)
5672c78.127c: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=000000000159fa20)
5682c78.127c: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=000000000159fcf0)
5692c78.127c: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=000000000159ffd0)
5702c78.127c: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000015a02a0)
5712c78.127c: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000015a0570)
5722c78.127c: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000015a0840)
5732c78.127c: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000015a0b10)
5742c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
5752c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
5762c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc7e70000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
5772c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
5782c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
5792c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
5802c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
5812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
5832c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5842c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5852c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5862c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc78a0000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
5872c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5882c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
5892c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
5902c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
5912c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
5922c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc7e90000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
5932c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5942c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
5952c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5962c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
5972c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5982c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5992c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccc010000 'C:\WINDOWS\System32\kernel32.dll'
6002c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6012c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6022c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8c80000 'C:\WINDOWS\System32\WINTRUST.DLL'
6032c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6042c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6052c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\CRYPT32.dll'
6062c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccc0e0000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6072c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
6082c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
6092c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6102c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6112c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
6122c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6142c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
6152c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
6162c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc7180000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6172c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6182c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8450000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
6192c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
6202c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
6212c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6222c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
6232c78.127c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
6242c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
6252c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
6262c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
6272c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6282c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6292c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6302c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6312c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6322c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6332c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6342c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6352c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6362c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6372c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6382c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6392c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcbf8e0000 LB 0x0002e000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
6402c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6412c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6422c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6432c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6442c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6452c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6462c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6472c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6482c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6492c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6502c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6512c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6522c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6532c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6542c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6552c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6562c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6572c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6582c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6592c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6602c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6612c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6622c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6632c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6642c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6652c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6662c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6672c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6682c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6692c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\WINDOWS\System32\cryptnet.dll'
6702c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6712c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8e0000 'C:\Windows\System32\cryptnet.dll'
6722c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6732c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6742c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
6752c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6762c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6772c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
6782c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
6792c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000016385d0
6802c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
6812c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AE8B48C4DE4B2B892A7EA6050127B678C7A2213
6822c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6832c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6842c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc95c0000 'C:\WINDOWS\System32\rpcrt4.dll'
6852c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6862c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6872c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
6882c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6892c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6902c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
6912c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1173_for_KB4284835~31bf3856ad364e35~amd64~~10.0.1.7.cat'; file='\SystemRoot\System32\ntdll.dll'
6922c78.127c: g_pfnWinVerifyTrust=00007ffcc8c89940
6932c78.127c: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
6942c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6952c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6962c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
6972c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6982c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6992c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7002c78.127c: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
7012c78.127c: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7022c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7032c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7042c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7052c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
7062c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7072c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7082c78.127c: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
7092c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000038c pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
7102c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
7112c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
7122c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2EB3B5899525BF398A932A3B6257F3B13169332E
7132c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7142c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7152c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7162c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7172c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0015~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
7182c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7192c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
7202c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7212c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7222c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7232c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
7242c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7252c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7262c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7272c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
7282c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7292c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7302c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7312c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
7322c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7332c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7342c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7352c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
7362c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7372c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7382c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7392c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
7402c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7412c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7422c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
7432c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7442c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
7452c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7462c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7472c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
7482c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
7492c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7502c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7512c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7522c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
7532c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7542c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7552c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
7562c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7572c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7582c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
7592c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7602c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7612c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll'
7622c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7632c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7642c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
7652c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7662c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7672c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
7682c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7692c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7702c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
7712c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7722c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
7732c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7742c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
7752c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7762c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7772c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
7782c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
7792c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
7802c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
7812c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\system32\crypt32.dll'
7822c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
7832c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xca2de669f55ba200 C=US, O=Symantec Corporation, CN=Symantec Root 2005 CA
7842c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
7852c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
7862c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
7872c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
7882c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
7892c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x3423e6c7a208b400 O=Symantec Corporation, CN=Symantec Root CA
7902c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x485dd3302f1d000 CN=unlimitedaccessweb.com, O=unlimitedaccessweb.com
7912c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
7922c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
7932c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xf11554accf9f8f00 CN=localhost, O=Skype Click to Call, OU=Skype Click to Call
7942c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
7952c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
7962c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
7972c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
7982c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
7992c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
8002c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8012c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8022c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8032c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
8042c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
8052c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x1591b8ac8dcabd00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
8062c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
8072c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
8082c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
8092c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xb3d6d6c9f168c800 C=FR, O=Dhimyotis, CN=Certigna
8102c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
8112c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
8122c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
8132c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
8142c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
8152c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
8162c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
8172c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
8182c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8192c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA
8202c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
8212c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
8222c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8232c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
8242c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
8252c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
8262c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8272c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
8282c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
8292c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
8302c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
8312c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
8322c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
8332c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
8342c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
8352c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x6d4bbe735e24c400 C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Arany (Class Gold) Főtanúsítvány
8362c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
8372c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
8382c78.127c: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
8392c78.127c: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=57
8402c78.127c: SUPR3HardenedMain: Load Runtime...
8412c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
8422c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8432c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
8442c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
8452c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
8462c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
8472c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8502c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
8512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8532c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
8542c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
8552c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
8562c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) WinVerifyTrust
8572c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
8582c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8592c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8602c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8612c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8622c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
8632c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
8642c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8652c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
8662c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8682c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8712c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8722c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
8732c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
8742c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
8752c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
8762c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
8772c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8782c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8792c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8802c78.127c: supR3HardenedDllNotificationCallback: load 000000005ce90000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
8812c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8822c78.127c: supR3HardenedDllNotificationCallback: load 000000005cdf0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
8832c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8842c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc97a0000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
8852c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
8862c78.127c: supR3HardenedDllNotificationCallback: load 00007ffc95680000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
8872c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8882c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8892c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
8902c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8912c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8922c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8932c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8942c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8952c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8962c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8972c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8982c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8992c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9002c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9012c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9022c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9032c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9042c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9052c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9062c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9072c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9082c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9092c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9102c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9112c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9122c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9132c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9142c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9152c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9162c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9172c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9182c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9192c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9202c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9212c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9222c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9232c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9242c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9252c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9262c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9272c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9282c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9292c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9302c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9312c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9322c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9332c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9342c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9352c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9362c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9372c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9382c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95680000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9392c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
9402c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9412c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8c80000 'C:\WINDOWS\system32\Wintrust.dll'
9422c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
9432c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
9442c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
9452c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9462c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
9472c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
9482c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\system32\crypt32.dll'
9492c78.127c: SUPR3HardenedMain: Load TrustedMain...
9502c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
9512c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
9522c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
9532c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
9542c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
9552c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
9562c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
9572c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
9582c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
9592c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
9602c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
9612c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
9622c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
9632c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
9642c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
9652c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
9662c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll) WinVerifyTrust
9672c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
9682c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
9692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
9702c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
9712c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
9722c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
9732c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
9742c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) WinVerifyTrust
9752c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
9762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
9772c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
9782c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9792c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9802c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
9812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9832c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
9842c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9852c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
9862c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
9872c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9882c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9892c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
9902c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
9912c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
9922c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9932c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
9942c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
9952c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
9962c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
9972c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) WinVerifyTrust
9982c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
9992c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
10002c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
10012c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10022c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10032c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
10042c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10052c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10062c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
10072c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
10082c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
10092c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
10102c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
10112c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
10122c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
10132c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
10142c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
10152c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
10162c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
10172c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
10182c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
10192c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10202c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10212c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
10222c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
10232c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
10242c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
10252c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
10262c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
10272c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) WinVerifyTrust
10282c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
10292c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10302c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10312c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10322c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10332c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
10342c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10352c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10362c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
10372c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10382c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
10392c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
10402c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
10412c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10422c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10432c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
10442c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
10452c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
10462c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10472c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10502c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10532c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
10542c78.127c: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
10552c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
10562c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
10572c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
10582c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
10592c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10602c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
10612c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
10622c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) WinVerifyTrust
10632c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
10642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10652c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10662c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
10672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10682c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10692c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
10702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10712c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10722c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10732c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10742c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10752c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10772c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10782c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
10792c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
10802c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
10812c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\user32.dll'
10822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
10832c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
10842c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
10852c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
10862c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
10872c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
10882c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
10892c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
10902c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
10912c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
10922c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
10932c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10942c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10952c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10962c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10972c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10982c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
10992c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11002c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
11012c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
11022c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
11032c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
11042c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
11052c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
11062c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
11072c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
11082c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
11092c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11102c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11112c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
11122c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
11132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
11142c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
11152c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11162c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
11172c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11182c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11192c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
11202c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
11212c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
11222c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
11232c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
11242c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
11252c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11262c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
11272c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
11282c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
11292c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11302c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11312c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
11322c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
11332c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11342c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11352c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11362c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11372c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11382c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
11392c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11402c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11412c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
11422c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11432c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11442c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11452c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11462c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11472c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
11482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11502c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
11512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11532c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11552c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11562c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11572c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11582c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11592c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
11602c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11612c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11622c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11632c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11652c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
11662c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11682c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
11702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
11712c78.127c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\opengl32.dll'.
11722c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11732c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
11742c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11752c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
11762c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
11772c78.127c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
11782c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
11792c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11802c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11812c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
11822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11832c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11842c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11852c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11862c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11872c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
11882c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
11892c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
11902c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
11912c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
11922c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
11932c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
11942c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
11952c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
11962c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11972c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11982c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
11992c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12002c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12012c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
12022c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12032c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12042c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
12052c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12062c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12072c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
12082c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
12092c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
12102c78.127c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
12112c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12122c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
12132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
12142c78.127c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
12152c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
12162c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12172c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12182c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12192c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12202c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12212c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
12222c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12232c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12242c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
12252c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12262c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12272c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
12282c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12292c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12302c78.127c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
12312c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12322c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12332c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
12342c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12352c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12362c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
12372c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12382c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12392c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
12402c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
12412c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
12422c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
12432c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
12442c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
12452c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) WinVerifyTrust
12462c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
12472c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12492c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [redoing WinVerifyTrust]
12502c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12522c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12532c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
12542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
12552c78.127c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll'.
12562c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12572c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
12582c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'.
12592c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12602c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'.
12612c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'.
12622c78.127c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
12632c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
12642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
12652c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
12662c78.127c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\winspool.drv'.
12672c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12682c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'.
12692c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'.
12702c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'.
12712c78.127c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
12722c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
12732c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12742c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12752c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
12762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12772c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12782c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
12792c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12802c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12812c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
12822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12832c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12842c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
12852c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12862c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12872c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12882c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
12892c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
12902c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
12912c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
12922c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
12932c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL'.
12942c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL)
12952c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
12962c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
12972c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume2\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
12982c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\propsys.dll'.
12992c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13002c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
13012c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
13022c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\propsys.dll)
13032c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\propsys.dll
13042c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13052c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13062c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13072c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13082c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
13092c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
13102c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
13112c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\comctl32.dll'.
13122c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
13132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13142c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
13152c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
13162c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
13172c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13182c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13192c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13202c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
13212c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
13222c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
13232c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
13242c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
13252c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
13262c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
13272c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
13282c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13292c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13302c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13312c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13322c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13332c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13342c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13352c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13362c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13372c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13382c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13392c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13402c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13412c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13422c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13432c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13442c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13452c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13462c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
13472c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
13502c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
13512c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
13522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13532c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13542c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
13552c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
13562c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13572c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13582c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
13592c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
13602c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
13612c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13622c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13632c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
13642c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
13652c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
13662c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13682c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [redoing WinVerifyTrust]
13692c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
13702c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'
13712c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13722c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13732c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
13742c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13752c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13772c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13782c78.127c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
13792c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000046c pwszName=\Device\HarddiskVolume2\Windows\System32\opengl32.dll
13802c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
13812c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
13822c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=19A1CD90C2208B3BD0567A538CC10CADA852F417
13832c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
13842c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
13852c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00112~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
13862c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13872c78.127c: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
13882c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
13892c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
13902c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
13912c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13922c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13932c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13942c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
13952c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
13962c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
13972c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
13982c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
13992c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
14002c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
14012c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
14022c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
14032c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.112_none_f94f898130982b3f\comctl32.dll)
14042c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.112_none_f94f898130982b3f\comctl32.dll
14052c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14062c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [avoiding WinVerifyTrust]
14072c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [avoiding WinVerifyTrust]
14082c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8d90000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
14092c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
14102c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8b60000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
14112c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
14122c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc89c0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
14132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
14142c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
14152c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
14162c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
14172c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32full.dll)
14182c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll
14192c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccbd20000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
14202c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
14212c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccbe50000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
14222c78.127c: supR3HardenedDllNotificationCallback: load 00007ffca7cf0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
14232c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
14242c78.127c: supR3HardenedDllNotificationCallback: load 00007ffc9f520000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
14252c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
14262c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8970000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
14272c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
14282c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
14292c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccb430000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
14302c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [avoiding WinVerifyTrust]
14312c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccb760000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
14322c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14332c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
14342c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
14352c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
14362c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
14372c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc9ae0000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
14382c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [avoiding WinVerifyTrust]
14392c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc84e0000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
14402c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
14412c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
14422c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
14432c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
14442c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8490000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
14452c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
14462c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)
14472c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
14482c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8440000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
14492c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\fltLib.dll)
14502c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\fltLib.dll
14512c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8eb0000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
14522c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14532c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
14542c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
14552c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
14562c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
14572c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\windows.storage.dll)
14582c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll
14592c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc9f90000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
14602c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
14612c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccb890000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
14622c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
14632c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc45c0000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
14642c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
14652c78.127c: supR3HardenedDllNotificationCallback: load 000000005c880000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
14662c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
14672c78.127c: supR3HardenedDllNotificationCallback: load 00007ffc8fd70000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
14682c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
14692c78.127c: supR3HardenedDllNotificationCallback: load 000000005c310000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
14702c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
14712c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc9870000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
14722c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
14732c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc6300000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
14742c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [avoiding WinVerifyTrust]
14752c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc7a40000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
14762c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [avoiding WinVerifyTrust]
14772c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcbfba0000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
14782c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
14792c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcbd250000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.112_none_f94f898130982b3f\COMCTL32.dll [fFlags=0x0]
14802c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.112_none_f94f898130982b3f\comctl32.dll [avoiding WinVerifyTrust]
14812c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccb9f0000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
14822c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll [avoiding WinVerifyTrust]
14832c78.127c: supR3HardenedDllNotificationCallback: load 00007ffca0750000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
14842c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
14852c78.127c: supR3HardenedDllNotificationCallback: load 000000005c2b0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
14862c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
14872c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc66a0000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
14882c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14892c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc66d0000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
14902c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
14912c78.127c: supR3HardenedDllNotificationCallback: load 00007ffc90370000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
14922c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
14932c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
14942c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
14952c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\fltLib.dll'.
14962c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\fltLib.dll' [rescheduled]
14972c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
14982c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
14992c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
15002c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
15012c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
15022c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
15032c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
15042c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
15052c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
15062c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
15072c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.112_none_f94f898130982b3f\comctl32.dll'.
15082c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.112_none_f94f898130982b3f\comctl32.dll' [rescheduled]
15092c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
15102c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
15112c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\comctl32.dll'.
15122c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rescheduled]
15132c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\propsys.dll'.
15142c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\propsys.dll' [rescheduled]
15152c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL'.
15162c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL' [rescheduled]
15172c78.127c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\winspool.drv'.
15182c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rescheduled]
15192c78.127c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll'.
15202c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rescheduled]
15212c78.127c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
15222c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
15232c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
15242c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
15252c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
15262c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
15272c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
15282c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
15292c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
15302c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
15312c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
15322c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
15332c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
15342c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
15352c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15362c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
15372c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume2\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
15382c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\fltLib.dll [redoing WinVerifyTrust]
15392c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\fltLib.dll'.
15402c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\fltLib.dll
15412c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
15422c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
15432c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
15442c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15452c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15462c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
15472c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
15482c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\combase.dll
15492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15502c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15532c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15552c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15562c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15572c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15582c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15592c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15602c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15612c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
15622c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
15632c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\combase.dll
15642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15652c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15662c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15682c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
15692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
15702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
15712c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
15722c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
15732c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
15742c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15752c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15772c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15782c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15792c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
15802c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\gdi32.dll
15812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
15822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
15832c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
15842c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
15852c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
15862c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15872c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15882c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15892c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15902c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15912c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
15922c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\gdi32.dll
15932c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15942c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15952c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
15962c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15972c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccc010000 'C:\WINDOWS\System32\kernel32.dll'
15982c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
15992c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16002c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-string-l1-1-0'
16012c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
16022c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16032c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-datetime-l1-1-1'
16042c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
16052c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16062c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-localization-obsolete-l1-2-0'
16072c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
16082c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
16092c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
16102c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
16112c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
16122c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16132c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16142c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
16152c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
16162c78.127c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
16172c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16182c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16192c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16202c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccbfe0000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
16212c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
16222c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbfe0000 'C:\WINDOWS\system32\IMM32.DLL'
16232c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
16242c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rescheduled]
16252c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [redoing WinVerifyTrust]
16262c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
16272c78.127c: supR3HardenedScreenImage/LdrLoadDll: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\imm32.dll
16282c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16292c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbfe0000 'C:\WINDOWS\System32\imm32.dll'
16302c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
16312c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16322c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc96f0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
16332c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc90370000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
16342c78.127c: SUPR3HardenedMain: Calling TrustedMain (00007ffc903714f0)...
16352c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
16362c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
16372c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
16382c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
16392c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
16402c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
16412c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
16422c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
16432c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
16442c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
16452c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
16462c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
16472c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
16482c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
16502c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
16512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
16522c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
16532c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
16552c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
16562c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16572c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
16582c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
16592c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
16602c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
16612c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
16622c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
16632c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16652c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
16662c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
16672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
16682c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
16692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
16702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
16712c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [redoing WinVerifyTrust]
16722c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
16732c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
16742c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
16752c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16772c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
16782c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
16792c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
16802c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
16812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16832c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16842c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
16852c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
16862c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
16872c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16882c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16892c78.127c: supR3HardenedDllNotificationCallback: load 00007ffc9f350000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
16902c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16912c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9f350000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
16922c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000064c pwszName=\Device\HarddiskVolume2\Windows\System32\uxtheme.dll
16932c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
16942c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
16952c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=15C67EA66CCB2DD0FE18A5AB58A7BA1C113BBA6A
16962c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
16972c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
16982c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00115~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\uxtheme.dll'
16992c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17002c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17012c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
17022c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
17032c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) WinVerifyTrust
17042c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
17052c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17062c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17072c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17082c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17092c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17102c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17112c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
17122c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
17132c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc6940000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
17142c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
17152c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc6940000 'C:\WINDOWS\system32\uxtheme.dll'
17162c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbe50000 'C:\WINDOWS\system32\user32.dll'
17172c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
17182c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17192c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9f90000 'C:\WINDOWS\system32\shell32.dll'
17202c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [redoing WinVerifyTrust]
17212c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
17222c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
17232c78.127c: supR3HardenedScreenImage/LdrLoadDll: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'
17242c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17252c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccb760000 'C:\WINDOWS\system32\SHCore.dll'
17262c78.127c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
17272c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
17282c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17292c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
17302c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
17312c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
17322c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll)
17332c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
17342c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc6bd0000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
17352c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [avoiding WinVerifyTrust]
17362c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17372c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17382c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17392c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17402c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
17412c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
17422c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
17432c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17442c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17452c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
17462c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
17472c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll'
17482c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
17492c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17502c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\system32\winmm.dll'
17512c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
17522c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17532c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\system32\winmm.dll'
17542c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
17552c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17562c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9f90000 'C:\WINDOWS\system32\shell32.dll'
17572c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
17582c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17592c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc6940000 'C:\WINDOWS\system32\uxtheme.dll'
17602c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
17612c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17622c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc96f0000 'C:\WINDOWS\system32\advapi32.dll'
17632c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
17642c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
17652c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
17662c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'profapi.dll'.
17672c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\userenv.dll) WinVerifyTrust
17682c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
17692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
17702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
17712c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
17722c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17732c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17742c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
17752c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17762c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
17772c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc8370000 LB 0x00028000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
17782c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
17792c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8370000 'C:\WINDOWS\system32\userenv.dll'
17802c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
17812c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17822c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccc010000 'C:\WINDOWS\System32\kernel32.dll'
17832c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccbdb0000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
17842c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17852c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
17862c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
17872c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
17882c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17892c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17902c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17912c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17922c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
17932c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
17942c78.664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\clbcatq.dll'
17952c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
17962c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
17972c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
17982c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
17992c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
18002c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
18012c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
18022c78.664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
18032c78.664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
18042c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18052c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18062c78.664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
18072c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
18082c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
18092c78.664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
18102c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
18112c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
18122c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18132c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18142c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
18152c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
18162c78.664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
18172c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
18182c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
18192c78.664: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
18202c78.664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
18212c78.664: supR3HardenedDllNotificationCallback: load 00007ffc95130000 LB 0x00546000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
18222c78.664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
18232c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95130000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
18242c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
18252c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
18262c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
18272c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
18282c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
18292c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
18302c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
18312c78.664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
18322c78.664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
18332c78.664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
18342c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18352c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
18362c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18372c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18382c78.664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
18392c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
18402c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
18412c78.664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
18422c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
18432c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
18442c78.664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [redoing WinVerifyTrust]
18452c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
18462c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
18472c78.664: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
18482c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
18492c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
18502c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18512c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18522c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
18532c78.664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
18542c78.664: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
18552c78.664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
18562c78.664: supR3HardenedDllNotificationCallback: load 00007ffc9f210000 LB 0x000ba000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
18572c78.664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
18582c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9f210000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
18592c78.664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
18602c78.664: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
18612c78.664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9870000 'C:\Windows\System32\oleaut32.dll'
18622c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
18632c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18642c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbd20000 'C:\WINDOWS\system32\gdi32.dll'
18652c78.34f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
18662c78.34f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
18672c78.34f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
18682c78.34f0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
18692c78.34f0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
18702c78.34f0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
18712c78.34f0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
18722c78.34f0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18732c78.34f0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18742c78.34f0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
18752c78.34f0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
18762c78.34f0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18772c78.34f0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
18782c78.34f0: supR3HardenedDllNotificationCallback: load 00007ffcc6780000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
18792c78.34f0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
18802c78.34f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc6780000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
18812c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
18822c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18832c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9f90000 'C:\WINDOWS\system32\shell32.dll'
18842c78.127c: supR3HardenedDllNotificationCallback: load 00007ffccbba0000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
18852c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18862c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
18872c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
18882c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
18892c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
18902c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
18912c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
18922c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
18932c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
18942c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
18952c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
18962c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
18972c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18982c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
18992c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19002c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19012c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
19022c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19032c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19042c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
19052c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
19062c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msctf.dll'
19072c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a4c pwszName=\Device\HarddiskVolume2\Windows\System32\DataExchange.dll
19082c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
19092c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
19102c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=07B480615AD13C4A3DD6B7A2F86ED35195B9CA49
19112c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
19122c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
19132c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\DataExchange.dll'
19142c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19152c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19162c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
19172c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
19182c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
19192c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
19202c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\DataExchange.dll) WinVerifyTrust
19212c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
19222c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
19232c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume2\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
19242c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
19252c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
19262c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
19272c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
19282c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
19292c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
19302c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dcomp.dll) WinVerifyTrust
19312c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dcomp.dll
19322c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
19332c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume2\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
19342c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
19352c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
19362c78.127c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\dxgi.dll'.
19372c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19382c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
19392c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dxgi.dll)
19402c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dxgi.dll
19412c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19422c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19432c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
19442c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
19452c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
19462c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
19472c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
19482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
19492c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
19502c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
19512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
19522c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
19532c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19552c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
19562c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
19572c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19582c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
19592c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
19602c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\d3d11.dll) WinVerifyTrust
19612c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\d3d11.dll
19622c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
19632c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
19642c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
19652c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
19662c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
19672c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
19682c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
19692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
19702c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
19712c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
19722c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19732c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19742c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19752c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
19762c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
19772c78.127c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\combase.dll'
19782c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
19792c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
19802c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll
19812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19832c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
19842c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
19852c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll
19862c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll
19872c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [avoiding WinVerifyTrust]
19882c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc71b0000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
19892c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [avoiding WinVerifyTrust]
19902c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc4f10000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
19912c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll
19922c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc5c20000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
19932c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll
19942c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcaa9f0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
19952c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
19962c78.127c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\dxgi.dll'.
19972c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\dxgi.dll' [rescheduled]
19982c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbd20000 'C:\WINDOWS\System32\gdi32.dll'
19992c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcaa9f0000 'C:\WINDOWS\system32\dataexchange.dll'
20002c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20012c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
20022c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
20032c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
20042c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll)
20052c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll
20062c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20072c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
20082c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rmclient.dll)
20092c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rmclient.dll
20102c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc6cb0000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
20112c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
20122c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc6d60000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
20132c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
20142c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20152c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
20162c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
20172c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll)
20182c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll
20192c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20202c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
20212c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
20222c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll)
20232c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll
20242c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20252c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
20262c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll)
20272c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll
20282c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntmarta.dll)
20292c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntmarta.dll
20302c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
20312c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
20322c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
20332c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\WinTypes.dll)
20342c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\WinTypes.dll
20352c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc7530000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
20362c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
20372c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc5dc0000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
20382c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
20392c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc42b0000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
20402c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
20412c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc38d0000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
20422c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
20432c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcbd450000 LB 0x00098000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
20442c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
20452c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
20462c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
20472c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
20482c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20492c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20502c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20512c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20522c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
20532c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20552c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20562c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20572c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
20582c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
20592c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll
20602c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
20612c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
20622c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
20632c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20652c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
20662c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
20672c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
20682c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
20692c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume2\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
20702c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
20712c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20722c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20732c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20742c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20752c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20762c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20772c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20782c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20792c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
20802c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20812c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20822c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
20832c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume2\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
20842c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
20852c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20862c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20872c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
20882c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
20892c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\WinTypes.dll'
20902c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
20912c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
20922c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ntmarta.dll'
20932c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
20942c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
20952c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll'
20962c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
20972c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
20982c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll'
20992c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
21002c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
21012c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll'
21022c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
21032c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
21042c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rmclient.dll'
21052c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
21062c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
21072c78.127c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll'
21082c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9870000 'C:\WINDOWS\System32\OLEAUT32.DLL'
21092c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
21102c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21112c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbe50000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
21122c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
21132c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21142c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbe50000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
21152c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
21162c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21172c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccb430000 'api-ms-win-core-com-l1-1-0.dll'
21182c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msctf.dll
21192c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21202c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbba0000 'C:\WINDOWS\System32\MSCTF.dll'
21212c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
21222c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21232c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccb890000 'C:\WINDOWS\System32\ole32.dll'
21242c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9870000 'C:\WINDOWS\System32\OLEAUT32.dll'
21252c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b18 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
21262c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
21272c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
21282c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D49375F38056AA009353FFDCCD59474093558A8B
21292c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
21302c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
21312c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll'
21322c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21332c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21342c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
21352c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
21362c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
21372c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
21382c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
21392c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
21402c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b4c pwszName=\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
21412c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
21422c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
21432c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=85E1C37A6BD4306E57F09FFDB448860467295EFB
21442c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
21452c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
21462c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll'
21472c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21482c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21492c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
21502c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
21512c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll) WinVerifyTrust
21522c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
21532c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21542c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
21552c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
21562c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21572c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21582c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21592c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
21602c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
21612c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
21622c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
21632c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
21642c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21652c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21662c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21672c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
21682c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
21692c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcb5d60000 LB 0x00083000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
21702c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
21712c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcb2c20000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
21722c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
21732c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
21742c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21752c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
21762c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb2c20000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
21772c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000bc4 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
21782c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
21792c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
21802c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=38422F12A30C69B303E7EBE427C8D87E3024ED12
21812c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
21822c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
21832c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll'
21842c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21852c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21862c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
21872c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
21882c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
21892c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21902c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21912c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21922c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21932c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21942c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
21952c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcb21c0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
21962c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
21972c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb21c0000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
21982c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
21992c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
22002c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-localization-l1-2-0.dll'
22012c78.127c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
22022c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
22032c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8500000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
22042c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b78 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
22052c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
22062c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
22072c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=07493B638EF356F68BE9306C76CDBF2D22198E5A
22082c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22092c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
22102c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll'
22112c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22122c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22132c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'wbemcomn.dll'.
22142c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
22152c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
22162c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
22172c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
22182c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
22192c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22202c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22212c78.127c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
22222c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22232c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
22242c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcb2260000 LB 0x000f2000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
22252c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
22262c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb2260000 'C:\WINDOWS\system32\wbem\fastprox.dll'
22272c78.262c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22282c78.262c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22292c78.262c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
22302c78.262c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22312c78.262c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
22322c78.262c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22332c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22342c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22352c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
22362c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
22372c78.262c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22382c78.262c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
22392c78.262c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
22402c78.262c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
22412c78.262c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll) WinVerifyTrust
22422c78.262c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
22432c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22442c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22452c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22462c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22472c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
22482c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
22492c78.262c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22502c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22512c78.262c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22522c78.262c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22532c78.262c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22542c78.262c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
22552c78.262c: supR3HardenedDllNotificationCallback: load 0000000059490000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
22562c78.262c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
22572c78.262c: supR3HardenedDllNotificationCallback: load 00007ffc813b0000 LB 0x002c9000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
22582c78.262c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22592c78.262c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc813b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
22602c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22612c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c98 pwszName=\Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
22622c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
22632c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
22642c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7A411B6D0C02AF0C9C29BAAEFDFE6EF0D86C921F
22652c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22662c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
22672c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00112~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll'
22682c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22692c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
22702c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
22712c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'oleaut32.dll'.
22722c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'ws2_32.dll'.
22732c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'netsetupapi.dll'.
22742c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'setupapi.dll'.
22752c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'devrtl.dll'.
22762c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll) WinVerifyTrust
22772c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
22782c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devrtl.dll'...
22792c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devrtl.dll' -> '\Device\HarddiskVolume2\Windows\System32\devrtl.dll' [rcNtRedir=0xc0150008]
22802c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c9c pwszName=\Device\HarddiskVolume2\Windows\System32\devrtl.dll
22812c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
22822c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
22832c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D7E327D4544F33888FC8ADAE2BEEB7A40A76E7F8
22842c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22852c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
22862c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0015~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\devrtl.dll'
22872c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22882c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devrtl.dll) WinVerifyTrust
22892c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devrtl.dll
22902c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
22912c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
22922c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
22932c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
22942c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22952c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
22962c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'cfgmgr32.dll'.
22972c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll) WinVerifyTrust
22982c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
22992c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netsetupapi.dll'...
23002c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'netsetupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\netsetupapi.dll' [rcNtRedir=0xc0150008]
23012c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
23022c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
23032c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
23042c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23052c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23062c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23072c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23082c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23092c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
23102c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23112c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
23122c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23132c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
23142c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll) WinVerifyTrust
23152c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll
23162c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23172c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
23182c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
23192c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23202c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23212c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23222c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23232c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
23242c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
23252c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
23262c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23272c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23282c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23292c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23302c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23312c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
23322c78.2d2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'
23332c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupShim.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
23342c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
23352c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll
23362c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll
23372c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcb3260000 LB 0x00026000 C:\Windows\System32\NetSetupApi.dll [fFlags=0x0]
23382c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll
23392c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc9b40000 LB 0x0044b000 C:\WINDOWS\System32\setupapi.dll [fFlags=0x0]
23402c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
23412c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc03d0000 LB 0x00013000 C:\Windows\System32\DEVRTL.dll [fFlags=0x0]
23422c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll
23432c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcb2900000 LB 0x00081000 C:\Windows\System32\NetSetupShim.dll [fFlags=0x0]
23442c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
23452c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb2900000 'C:\Windows\System32\NetSetupShim.dll'
23462c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23472c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
23482c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23492c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
23502c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'nsi.dll'.
23512c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'winnsi.dll'.
23522c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll) WinVerifyTrust
23532c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll
23542c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
23552c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
23562c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23572c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
23582c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
23592c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
23602c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winnsi.dll) WinVerifyTrust
23612c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winnsi.dll
23622c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
23632c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
23642c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
23652c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
23662c78.2d2c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\nsi.dll'.
23672c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)
23682c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
23692c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23702c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23712c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23722c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
23732c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll) WinVerifyTrust
23742c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23752c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23762c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23772c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23782c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupEngine.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23792c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll
23802c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll
23812c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffccc0d0000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
23822c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [avoiding WinVerifyTrust]
23832c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc1dd0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
23842c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll
23852c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc828e0000 LB 0x000c6000 C:\Windows\System32\NetSetupEngine.dll [fFlags=0x0]
23862c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll
23872c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc828e0000 'C:\Windows\System32\NetSetupEngine.dll'
23882c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23892c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
23902c78.2d2c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\nsi.dll'
23912c78.1408: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
23922c78.1408: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23932c78.1408: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23942c78.1408: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23952c78.1408: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
23962c78.1408: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
23972c78.1408: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23982c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23992c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24002c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24012c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24022c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
24032c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
24042c78.1408: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
24052c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24062c78.1408: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24072c78.1408: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24082c78.1408: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
24092c78.1408: supR3HardenedDllNotificationCallback: load 00007ffcc6770000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
24102c78.1408: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
24112c78.1408: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc6770000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
24122c78.1408: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccbe50000 'C:\WINDOWS\system32\User32.dll'
24132c78.22e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24142c78.22e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24152c78.22e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
24162c78.22e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24172c78.22e8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
24182c78.22e8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
24192c78.22e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24202c78.22e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24212c78.22e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24222c78.22e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24232c78.22e8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
24242c78.22e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24252c78.22e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24262c78.22e8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24272c78.22e8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
24282c78.22e8: supR3HardenedDllNotificationCallback: load 00007ffcc2fc0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
24292c78.22e8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
24302c78.22e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc2fc0000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
24312c78.458: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24322c78.458: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24332c78.458: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
24342c78.458: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24352c78.458: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
24362c78.458: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
24372c78.458: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24382c78.458: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24392c78.458: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24402c78.458: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24412c78.458: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24422c78.458: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24432c78.458: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
24442c78.458: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24452c78.458: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
24462c78.458: supR3HardenedDllNotificationCallback: load 00007ffcc09f0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
24472c78.458: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
24482c78.458: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc09f0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
24492c78.13bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24502c78.13bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24512c78.13bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
24522c78.13bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24532c78.13bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
24542c78.13bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
24552c78.13bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24562c78.13bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24572c78.13bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24582c78.13bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24592c78.13bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24602c78.13bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24612c78.13bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24622c78.13bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
24632c78.13bc: supR3HardenedDllNotificationCallback: load 00007ffcc09e0000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
24642c78.13bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
24652c78.13bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc09e0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
24662c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc9f90000 'C:\WINDOWS\system32\Shell32.dll'
24672c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
24682c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24692c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc813b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
24702c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24712c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24722c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24732c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
24742c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
24752c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
24762c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
24772c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24782c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24792c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24802c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24812c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24822c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
24832c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24842c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24852c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24862c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24872c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24882c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24892c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24902c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24912c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc9fa40000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
24922c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24932c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9fa40000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
24942c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffc9fa40000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
24952c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24962c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24972c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
24982c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24992c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
25002c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
25012c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
25022c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
25032c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
25042c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
25052c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
25062c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
25072c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
25082c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
25092c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
25102c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
25112c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
25122c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [redoing WinVerifyTrust]
25132c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25142c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
25152c78.2d2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL'
25162c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
25172c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
25182c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
25192c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
25202c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
25212c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
25222c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
25232c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
25242c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25252c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25262c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
25272c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
25282c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25292c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25302c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25312c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
25322c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25332c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
25342c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
25352c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25362c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25372c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25382c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25392c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25402c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25412c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25422c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
25432c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
25442c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
25452c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
25462c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
25472c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25482c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25492c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
25502c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
25512c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
25522c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25532c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25542c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25552c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25562c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
25572c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
25582c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
25592c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25602c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25612c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25622c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25632c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25642c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25652c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25662c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
25672c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
25682c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25692c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc9f1a0000 LB 0x00063000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
25702c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
25712c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc9fa30000 LB 0x0005d000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
25722c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25732c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc7e590000 LB 0x009cd000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
25742c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
25752c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7e590000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
25762c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25772c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
25782c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25792c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
25802c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc97780000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
25812c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
25822c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc97780000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
25832c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25842c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
25852c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25862c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc95130000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
25872c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25882c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25892c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25902c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9fa30000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
25912c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25922c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
25932c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25942c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25952c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
25962c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
25972c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25982c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25992c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26002c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26012c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26022c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
26032c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcbf740000 LB 0x0001f000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
26042c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
26052c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf740000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
26062c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26072c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26082c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26092c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26102c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
26112c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
26122c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26132c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26142c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26152c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26162c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26172c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
26182c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffca1db0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
26192c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
26202c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca1db0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
26212c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26222c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26232c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26242c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26252c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
26262c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
26272c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26282c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26292c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26302c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26312c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26322c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
26332c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffca1d90000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
26342c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
26352c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca1d90000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
26362c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26372c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26382c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26392c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26402c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
26412c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
26422c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26432c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26442c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26452c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26462c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26472c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
26482c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffca1d40000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
26492c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
26502c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca1d40000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
26512c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26522c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26532c78.ed0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26542c78.ed0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26552c78.ed0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
26562c78.ed0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
26572c78.ed0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
26582c78.ed0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
26592c78.ed0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26602c78.ed0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26612c78.ed0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
26622c78.ed0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
26632c78.ed0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26642c78.ed0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26652c78.ed0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26662c78.ed0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26672c78.ed0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
26682c78.ed0: supR3HardenedDllNotificationCallback: load 00007ffcbf8c0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
26692c78.ed0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
26702c78.ed0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbf8c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
26712c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26722c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26732c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26742c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26752c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
26762c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
26772c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
26782c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
26792c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26802c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
26812c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
26822c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
26832c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
26842c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
26852c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26862c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
26872c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26882c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26892c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26902c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26912c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26922c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26932c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc9d900000 LB 0x000cc000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
26942c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26952c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9d900000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
26962c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
26972c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
26982c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
26992c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
27002c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
27012c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll) WinVerifyTrust
27022c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
27032c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
27042c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume2\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
27052c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [redoing WinVerifyTrust]
27062c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27072c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27082c78.2d2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\propsys.dll'
27092c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
27102c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
27112c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27122c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27132c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
27142c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll) WinVerifyTrust
27152c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
27162c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27172c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27182c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
27192c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
27202c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [redoing WinVerifyTrust]
27212c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27222c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27232c78.2d2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
27242c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27252c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
27262c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
27272c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc8250000 LB 0x00027000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
27282c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
27292c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc1ca0000 LB 0x00076000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
27302c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
27312c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc1ca0000 'C:\WINDOWS\System32\MMDevApi.dll'
27322c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000d6c pwszName=\Device\HarddiskVolume2\Windows\System32\dsound.dll
27332c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
27342c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
27352c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5473BCFF580489A320314B844E6D3DC42BA47DE8
27362c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27372c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27382c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\dsound.dll'
27392c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27402c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27412c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'winmm.dll'.
27422c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dsound.dll) WinVerifyTrust
27432c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dsound.dll
27442c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
27452c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
27462c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
27472c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27482c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27492c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27502c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
27512c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffc9d790000 LB 0x0008f000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
27522c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
27532c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
27542c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27552c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9d790000 'C:\WINDOWS\System32\dsound.dll'
27562c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9d790000 'C:\WINDOWS\System32\dsound.dll'
27572c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
27582c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27592c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9d790000 'C:\WINDOWS\system32\dsound.dll'
27602c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
27612c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27622c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc1ca0000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
27632c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
27642c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27652c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
27662c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000fb4 pwszName=\Device\HarddiskVolume2\Windows\System32\wdmaud.drv
27672c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
27682c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
27692c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=177AADB38B3BB8D75072CC704861E1B81617F092
27702c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27712c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27722c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\wdmaud.drv'
27732c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27742c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27752c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
27762c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
27772c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
27782c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv) WinVerifyTrust
27792c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
27802c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
27812c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
27822c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27832c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27842c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\avrt.dll) WinVerifyTrust
27852c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll
27862c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
27872c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
27882c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
27892c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
27902c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27912c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll) WinVerifyTrust
27922c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll
27932c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
27942c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
27952c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
27962c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27972c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27982c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27992c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28002c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28012c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28022c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll
28032c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll
28042c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc4ca0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
28052c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll
28062c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc3db0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
28072c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll
28082c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffca0d60000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
28092c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28102c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28112c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28122c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28132c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28142c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28152c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28162c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28172c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28182c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28192c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28202c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28212c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28222c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28232c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
28242c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
28252c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
28262c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
28272c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
28282c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
28292c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
28302c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll) WinVerifyTrust
28312c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
28322c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
28332c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
28342c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll
28352c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
28362c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
28372c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
28382c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
28392c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
28402c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28412c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28422c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
28432c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
28442c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
28452c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28462c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
28472c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcbe010000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
28482c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
28492c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbe010000 'C:\WINDOWS\System32\AUDIOSES.DLL'
28502c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28512c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28522c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28532c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
28542c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28552c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28562c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28572c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28582c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28592c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca0d60000 'C:\WINDOWS\System32\wdmaud.drv'
28602c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001040 pwszName=\Device\HarddiskVolume2\Windows\System32\msacm32.drv
28612c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
28622c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
28632c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7886E1CCA739C1E5ED73D45A3FBDDF8A54FC7C0F
28642c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
28652c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
28662c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\msacm32.drv'
28672c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28682c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28692c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
28702c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
28712c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
28722c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv) WinVerifyTrust
28732c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv
28742c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
28752c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
28762c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [redoing WinVerifyTrust]
28772c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
28782c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
28792c78.2d2c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'
28802c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
28812c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
28822c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
28832c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
28842c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28852c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll) WinVerifyTrust
28862c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll
28872c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
28882c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
28892c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
28902c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28912c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28922c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28932c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28942c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
28952c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
28962c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll
28972c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc3850000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
28982c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll
28992c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc3870000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
29002c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29012c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29022c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29032c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29042c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29052c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29062c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29072c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29082c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29092c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29102c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29112c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29122c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29132c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29142c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29152c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29162c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29172c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
29182c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29192c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29202c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29212c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29222c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3870000 'C:\WINDOWS\System32\msacm32.drv'
29232c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000fb0 pwszName=\Device\HarddiskVolume2\Windows\System32\midimap.dll
29242c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
29252c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
29262c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1DAEA3709B4BD5475FA0919C8463CA4834E4BC26
29272c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
29282c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
29292c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\midimap.dll'
29302c78.2d2c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29312c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29322c78.2d2c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
29332c78.2d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\midimap.dll) WinVerifyTrust
29342c78.2d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll
29352c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
29362c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
29372c78.2d2c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
29382c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29392c78.2d2c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29402c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29412c78.2d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
29422c78.2d2c: supR3HardenedDllNotificationCallback: load 00007ffcc1610000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
29432c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
29442c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc1610000 'C:\WINDOWS\System32\midimap.dll'
29452c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
29462c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29472c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc1610000 'C:\WINDOWS\System32\midimap.dll'
29482c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
29492c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29502c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc1610000 'C:\WINDOWS\System32\midimap.dll'
29512c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
29522c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29532c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc1610000 'C:\WINDOWS\System32\midimap.dll'
29542c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29552c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29562c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29572c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29582c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29592c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29602c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29612c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
29622c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29632c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29642c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29652c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29662c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29672c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
29682c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29692c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9d790000 'C:\WINDOWS\system32\dsound.dll'
29702c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc66d0000 'C:\WINDOWS\System32\winmm.dll'
29712c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29722c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29732c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc813b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
29742c78.2d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
29752c78.2d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29762c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
29772c78.2d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
29782c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000068c pwszName=\Device\HarddiskVolume2\Windows\System32\ninput.dll
29792c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016385d0
29802c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016385d0
29812c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
29822c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29832c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8c80000 'C:\WINDOWS\System32\WINTRUST.DLL'
29842c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\CRYPT32.dll'
29852c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6E46333A1683926861A2BDC342116E2158A8E1C5
29862c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
29872c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
29882c78.127c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00115~31bf3856ad364e35~amd64~~10.0.17134.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\ninput.dll'
29892c78.127c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29902c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29912c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'oleaut32.dll'.
29922c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ninput.dll) WinVerifyTrust
29932c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ninput.dll
29942c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
29952c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
29962c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29972c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29982c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Ninput.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29992c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ninput.dll
30002c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcc3bf0000 LB 0x00065000 C:\WINDOWS\system32\Ninput.dll [fFlags=0x0]
30012c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ninput.dll
30022c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc3bf0000 'C:\WINDOWS\system32\Ninput.dll'
30032c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc78a0000 'C:\WINDOWS\system32\rsaenh.dll'
30042c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
30052c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30062c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8c80000 'C:\WINDOWS\System32\WINTRUST.DLL'
30072c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\CRYPT32.dll'
30082c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc8780000 'C:\WINDOWS\System32\crypt32.dll'
30092c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30102c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'gdi32.dll'.
30112c78.127c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'user32.dll'.
30122c78.127c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll) WinVerifyTrust
30132c78.127c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll
30142c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
30152c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
30162c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
30172c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
30182c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
30192c78.127c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
30202c78.127c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll (Input=comctl32, rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30212c78.127c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll
30222c78.127c: supR3HardenedDllNotificationCallback: load 00007ffcbfc30000 LB 0x00269000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll [fFlags=0x0]
30232c78.127c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll
30242c78.127c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcbfc30000 'C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12\comctl32.dll'
30252c78.ed0: supR3HardenedDllNotificationCallback: Unload 00007ffcbf8c0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
30262c78.13bc: supR3HardenedDllNotificationCallback: Unload 00007ffcc09e0000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
30272c78.458: supR3HardenedDllNotificationCallback: Unload 00007ffcc09f0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
30282c78.22e8: supR3HardenedDllNotificationCallback: Unload 00007ffcc2fc0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
30292c78.1408: supR3HardenedDllNotificationCallback: Unload 00007ffcc6770000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
30302c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffca1d40000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
30312c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffca1d90000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
30322c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffca1db0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [flags=0x0]
30332c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffcbf740000 LB 0x0001f000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
30342c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffc97780000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
30352c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffc7e590000 LB 0x009cd000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
30362c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffc9f1a0000 LB 0x00063000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
30372c78.2d2c: supR3HardenedDllNotificationCallback: Unload 00007ffc9fa30000 LB 0x0005d000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
30382c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc6780000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
30392c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcb21c0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [flags=0x0]
30402c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcaa9f0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [flags=0x0]
30412c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc4f10000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [flags=0x0]
30422c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc5c20000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [flags=0x0]
30432c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc71b0000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [flags=0x0]
30442c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc6d60000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [flags=0x0]
30452c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc6cb0000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [flags=0x0]
30462c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcb2260000 LB 0x000f2000 C:\WINDOWS\system32\wbem\fastprox.dll [flags=0x0]
30472c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffc9f210000 LB 0x000ba000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [flags=0x0]
30482c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcb2c20000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [flags=0x0]
30492c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcb5d60000 LB 0x00083000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [flags=0x0]
30502c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffc95130000 LB 0x00546000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
30512c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcb2900000 LB 0x00081000 C:\Windows\System32\NetSetupShim.dll [flags=0x0]
30522c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcb3260000 LB 0x00026000 C:\Windows\System32\NetSetupApi.dll [flags=0x0]
30532c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc9b40000 LB 0x0044b000 C:\WINDOWS\System32\setupapi.dll [flags=0x0]
30542c78.127c: supR3HardenedDllNotificationCallback: Unload 00007ffcc03d0000 LB 0x00013000 C:\Windows\System32\DEVRTL.dll [flags=0x0]
30552c78.127c: Terminating the normal way: rcExit=0
3056310c.321c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 842706 ms, the end);
3057b44.27c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 843480 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy