VirtualBox

Ticket #18386: VMs Log (Linux Mint).txt

File VMs Log (Linux Mint).txt, 193.9 KB (added by Kuroneko93, 6 years ago)

Log of VMs

Line 
12554.1edc: Log file opened: 6.0.4r128413 g_hStartupLog=0000000000000094 g_uNtVerCombined=0xa0479300
22554.1edc: \SystemRoot\System32\ntdll.dll:
32554.1edc: CreationTime: 2019-01-20T10:25:40.850445300Z
42554.1edc: LastWriteTime: 2019-01-20T10:25:40.850445300Z
52554.1edc: ChangeTime: 2019-01-25T10:44:49.426023800Z
62554.1edc: FileAttributes: 0x20
72554.1edc: Size: 0x1e8870
82554.1edc: NT Headers: 0xd8
92554.1edc: Timestamp: 0xaaee18ef
102554.1edc: Machine: 0x8664 - amd64
112554.1edc: Timestamp: 0xaaee18ef
122554.1edc: Image Version: 10.0
132554.1edc: SizeOfImage: 0x1f1000 (2035712)
142554.1edc: Resource Dir: 0x181000 LB 0x6efd0
152554.1edc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
162554.1edc: [Raw version resource data: 0x1810f0 LB 0x380, codepage 0x0 (reserved 0x0)]
172554.1edc: ProductName: Microsoft® Windows® Operating System
182554.1edc: ProductVersion: 10.0.18323.1000
192554.1edc: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
202554.1edc: FileDescription: NT Layer DLL
212554.1edc: \SystemRoot\System32\kernel32.dll:
222554.1edc: CreationTime: 2019-01-20T10:25:07.031948900Z
232554.1edc: LastWriteTime: 2019-01-20T10:25:07.031948900Z
242554.1edc: ChangeTime: 2019-01-25T10:44:48.363034000Z
252554.1edc: FileAttributes: 0x20
262554.1edc: Size: 0xaee90
272554.1edc: NT Headers: 0xe8
282554.1edc: Timestamp: 0xf313bcfd
292554.1edc: Machine: 0x8664 - amd64
302554.1edc: Timestamp: 0xf313bcfd
312554.1edc: Image Version: 10.0
322554.1edc: SizeOfImage: 0xb2000 (729088)
332554.1edc: Resource Dir: 0xb0000 LB 0x520
342554.1edc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
352554.1edc: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
362554.1edc: ProductName: Microsoft® Windows® Operating System
372554.1edc: ProductVersion: 10.0.18323.1000
382554.1edc: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
392554.1edc: FileDescription: Windows NT BASE API Client DLL
402554.1edc: \SystemRoot\System32\KernelBase.dll:
412554.1edc: CreationTime: 2019-01-20T10:25:40.991082700Z
422554.1edc: LastWriteTime: 2019-01-20T10:25:40.991082700Z
432554.1edc: ChangeTime: 2019-01-25T10:44:49.597900800Z
442554.1edc: FileAttributes: 0x20
452554.1edc: Size: 0x29fbc0
462554.1edc: NT Headers: 0xf8
472554.1edc: Timestamp: 0x2db87fbc
482554.1edc: Machine: 0x8664 - amd64
492554.1edc: Timestamp: 0x2db87fbc
502554.1edc: Image Version: 10.0
512554.1edc: SizeOfImage: 0x2a0000 (2752512)
522554.1edc: Resource Dir: 0x27b000 LB 0x548
532554.1edc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
542554.1edc: [Raw version resource data: 0x27b0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
552554.1edc: ProductName: Microsoft® Windows® Operating System
562554.1edc: ProductVersion: 10.0.18323.1000
572554.1edc: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
582554.1edc: FileDescription: Windows NT BASE API Client DLL
592554.1edc: \SystemRoot\System32\apisetschema.dll:
602554.1edc: CreationTime: 2019-01-20T10:25:01.842161500Z
612554.1edc: LastWriteTime: 2019-01-20T10:25:01.842161500Z
622554.1edc: ChangeTime: 2019-01-25T17:11:31.755841200Z
632554.1edc: FileAttributes: 0x20
642554.1edc: Size: 0x1bf30
652554.1edc: NT Headers: 0xc8
662554.1edc: Timestamp: 0x79709e8c
672554.1edc: Machine: 0x8664 - amd64
682554.1edc: Timestamp: 0x79709e8c
692554.1edc: Image Version: 10.0
702554.1edc: SizeOfImage: 0x1e000 (122880)
712554.1edc: Resource Dir: 0x1d000 LB 0x408
722554.1edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
732554.1edc: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
742554.1edc: ProductName: Microsoft® Windows® Operating System
752554.1edc: ProductVersion: 10.0.18323.1000
762554.1edc: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
772554.1edc: FileDescription: ApiSet Schema DLL
782554.1edc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
792554.1edc: supR3HardenedWinFindAdversaries: 0x0
802554.1edc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
812554.1edc: Calling main()
822554.1edc: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
832554.1edc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
842554.1edc: SUPR3HardenedMain: Respawn #1
852554.1edc: System32: \Device\HarddiskVolume2\Windows\System32
862554.1edc: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
872554.1edc: KnownDllPath: C:\WINDOWS\System32
882554.1edc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
892554.1edc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
902554.1edc: supR3HardNtEnableThreadCreation:
912554.1edc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc6c5063d0 pvNtTerminateThread=00007ffc6c52d310
922554.1edc: supR3HardenedWinDoReSpawn(1): New child 2478.1c64 [kernel32].
932554.1edc: supR3HardNtChildGatherData: PebBaseAddress=0000000000311000 cbPeb=0x388
942554.1edc: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffc6c490000 uNtDllChildAddr=00007ffc6c490000
952554.1edc: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffc6c5063d0
962554.1edc: supR3HardenedWinSetupChildInit: Start child.
972554.1edc: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 118 ms.
982554.1edc: supR3HardNtChildPurify: Startup delay kludge #1/0: 263 ms, 30 sleeps
992554.1edc: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1002554.1edc: *0000000000000000-00000000001bffff 0x0001/0x0000 0x0000000
1012554.1edc: *00000000001c0000-00000000001dffff 0x0004/0x0004 0x0020000
1022554.1edc: *00000000001e0000-00000000001fafff 0x0002/0x0002 0x0040000
1032554.1edc: 00000000001fb000-00000000001fffff 0x0001/0x0000 0x0000000
1042554.1edc: *0000000000200000-0000000000310fff 0x0000/0x0004 0x0020000
1052554.1edc: 0000000000311000-0000000000313fff 0x0004/0x0004 0x0020000
1062554.1edc: 0000000000314000-00000000003fffff 0x0000/0x0004 0x0020000
1072554.1edc: *0000000000400000-00000000004fafff 0x0000/0x0004 0x0020000
1082554.1edc: 00000000004fb000-00000000004fdfff 0x0104/0x0004 0x0020000
1092554.1edc: 00000000004fe000-00000000004fffff 0x0004/0x0004 0x0020000
1102554.1edc: *0000000000500000-0000000000503fff 0x0002/0x0002 0x0040000
1112554.1edc: 0000000000504000-000000000050ffff 0x0001/0x0000 0x0000000
1122554.1edc: *0000000000510000-0000000000511fff 0x0004/0x0004 0x0020000
1132554.1edc: 0000000000512000-000000007ffdffff 0x0001/0x0000 0x0000000
1142554.1edc: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1152554.1edc: 000000007ffe1000-000000007ffe9fff 0x0001/0x0000 0x0000000
1162554.1edc: *000000007ffea000-000000007ffeafff 0x0002/0x0002 0x0020000
1172554.1edc: 000000007ffeb000-00007ff5f6c9ffff 0x0001/0x0000 0x0000000
1182554.1edc: *00007ff5f6ca0000-00007ff5f6ca0fff 0x0002/0x0002 0x0040000
1192554.1edc: 00007ff5f6ca1000-00007ff5f6caffff 0x0001/0x0000 0x0000000
1202554.1edc: *00007ff5f6cb0000-00007ff5f6cd2fff 0x0002/0x0002 0x0040000
1212554.1edc: 00007ff5f6cd3000-00007ff72136ffff 0x0001/0x0000 0x0000000
1222554.1edc: *00007ff721370000-00007ff721370fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1232554.1edc: 00007ff721371000-00007ff7213e3fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1242554.1edc: 00007ff7213e4000-00007ff7213e4fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1252554.1edc: 00007ff7213e5000-00007ff72142bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1262554.1edc: 00007ff72142c000-00007ff72142cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1272554.1edc: 00007ff72142d000-00007ff72142dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1282554.1edc: 00007ff72142e000-00007ff721432fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1292554.1edc: 00007ff721433000-00007ff721433fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1302554.1edc: 00007ff721434000-00007ff721434fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1312554.1edc: 00007ff721435000-00007ff721438fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1322554.1edc: 00007ff721439000-00007ff721481fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1332554.1edc: 00007ff721482000-00007ffc6c48ffff 0x0001/0x0000 0x0000000
1342554.1edc: *00007ffc6c490000-00007ffc6c490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1352554.1edc: 00007ffc6c491000-00007ffc6c5a8fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1362554.1edc: 00007ffc6c5a9000-00007ffc6c5f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1372554.1edc: 00007ffc6c5f1000-00007ffc6c5fcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1382554.1edc: 00007ffc6c5fd000-00007ffc6c60bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1392554.1edc: 00007ffc6c60c000-00007ffc6c60cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1402554.1edc: 00007ffc6c60d000-00007ffc6c60ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1412554.1edc: 00007ffc6c610000-00007ffc6c680fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
1422554.1edc: 00007ffc6c681000-00007ffffffeffff 0x0001/0x0000 0x0000000
1432554.1edc: VirtualBoxVM.exe: timestamp 0x5c4b51f3 (rc=VINF_SUCCESS)
1442554.1edc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1452554.1edc: \Device\HarddiskVolume2\Windows\System32\ntdll.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xaaee18ef; retrying against current time: 0x5c513efd.
1462554.1edc: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
1472554.1edc: supR3HardNtChildPurify: Done after 376 ms and 0 fixes (loop #0).
1482478.1c64: Log file opened: 6.0.4r128413 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0479300
1492478.1c64: supR3HardenedVmProcessInit: uNtDllAddr=00007ffc6c490000 g_uNtVerCombined=0xa0479300
1502478.1c64: ntdll.dll: timestamp 0xaaee18ef (rc=VINF_SUCCESS)
1512478.1c64: New simple heap: #1 0000000000620000 LB 0x400000 (for 2035712 allocation)
1522554.1edc: supR3HardNtEnableThreadCreation:
1532478.1c64: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
1542478.1c64: System32: \Device\HarddiskVolume2\Windows\System32
1552478.1c64: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
1562478.1c64: KnownDllPath: C:\WINDOWS\System32
1572478.1c64: supR3HardenedVmProcessInit: Opening vboxdrv stub...
1582478.1c64: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
1592478.1c64: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
1602478.1c64: Registered Dll notification callback with NTDLL.
1612478.1c64: \Device\HarddiskVolume2\Windows\System32\kernel32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xf313bcfd; retrying against current time: 0x5c513efd.
1622478.1c64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
1632478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
1642478.1c64: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
1652478.1c64: supR3HardenedDllNotificationCallback: load 00007ffc6a1f0000 LB 0x002a0000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
1662478.1c64: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x2db87fbc; retrying against current time: 0x5c513efd.
1672478.1c64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
1682478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
1692478.1c64: supR3HardenedDllNotificationCallback: load 00007ffc6c3a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
1702478.1c64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1712478.1c64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c3a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
1722478.1c64: supR3HardenedDllNotificationCallback: load 00007ff721370000 LB 0x00112000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
1732478.1c64: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1742478.1c64: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1752478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1762478.1c64: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc6c5063d0 pvNtTerminateThread=00007ffc6c52d310
1772554.1edc: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 256 ms.
1782478.1c64: \SystemRoot\System32\ntdll.dll:
1792478.1c64: CreationTime: 2019-01-20T10:25:40.850445300Z
1802478.1c64: LastWriteTime: 2019-01-20T10:25:40.850445300Z
1812478.1c64: ChangeTime: 2019-01-25T10:44:49.426023800Z
1822478.1c64: FileAttributes: 0x20
1832478.1c64: Size: 0x1e8870
1842478.1c64: NT Headers: 0xd8
1852478.1c64: Timestamp: 0xaaee18ef
1862478.1c64: Machine: 0x8664 - amd64
1872478.1c64: Timestamp: 0xaaee18ef
1882478.1c64: Image Version: 10.0
1892478.1c64: SizeOfImage: 0x1f1000 (2035712)
1902478.1c64: Resource Dir: 0x181000 LB 0x6efd0
1912478.1c64: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1922478.1c64: [Raw version resource data: 0x1810f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1932478.1c64: ProductName: Microsoft® Windows® Operating System
1942478.1c64: ProductVersion: 10.0.18323.1000
1952478.1c64: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
1962478.1c64: FileDescription: NT Layer DLL
1972478.1c64: \SystemRoot\System32\kernel32.dll:
1982478.1c64: CreationTime: 2019-01-20T10:25:07.031948900Z
1992478.1c64: LastWriteTime: 2019-01-20T10:25:07.031948900Z
2002478.1c64: ChangeTime: 2019-01-25T10:44:48.363034000Z
2012478.1c64: FileAttributes: 0x20
2022478.1c64: Size: 0xaee90
2032478.1c64: NT Headers: 0xe8
2042478.1c64: Timestamp: 0xf313bcfd
2052478.1c64: Machine: 0x8664 - amd64
2062478.1c64: Timestamp: 0xf313bcfd
2072478.1c64: Image Version: 10.0
2082478.1c64: SizeOfImage: 0xb2000 (729088)
2092478.1c64: Resource Dir: 0xb0000 LB 0x520
2102478.1c64: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
2112478.1c64: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
2122478.1c64: ProductName: Microsoft® Windows® Operating System
2132478.1c64: ProductVersion: 10.0.18323.1000
2142478.1c64: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
2152478.1c64: FileDescription: Windows NT BASE API Client DLL
2162478.1c64: \SystemRoot\System32\KernelBase.dll:
2172478.1c64: CreationTime: 2019-01-20T10:25:40.991082700Z
2182478.1c64: LastWriteTime: 2019-01-20T10:25:40.991082700Z
2192478.1c64: ChangeTime: 2019-01-25T10:44:49.597900800Z
2202478.1c64: FileAttributes: 0x20
2212478.1c64: Size: 0x29fbc0
2222478.1c64: NT Headers: 0xf8
2232478.1c64: Timestamp: 0x2db87fbc
2242478.1c64: Machine: 0x8664 - amd64
2252478.1c64: Timestamp: 0x2db87fbc
2262478.1c64: Image Version: 10.0
2272478.1c64: SizeOfImage: 0x2a0000 (2752512)
2282478.1c64: Resource Dir: 0x27b000 LB 0x548
2292478.1c64: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
2302478.1c64: [Raw version resource data: 0x27b0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
2312478.1c64: ProductName: Microsoft® Windows® Operating System
2322478.1c64: ProductVersion: 10.0.18323.1000
2332478.1c64: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
2342478.1c64: FileDescription: Windows NT BASE API Client DLL
2352478.1c64: \SystemRoot\System32\apisetschema.dll:
2362478.1c64: CreationTime: 2019-01-20T10:25:01.842161500Z
2372478.1c64: LastWriteTime: 2019-01-20T10:25:01.842161500Z
2382478.1c64: ChangeTime: 2019-01-25T17:11:31.755841200Z
2392478.1c64: FileAttributes: 0x20
2402478.1c64: Size: 0x1bf30
2412478.1c64: NT Headers: 0xc8
2422478.1c64: Timestamp: 0x79709e8c
2432478.1c64: Machine: 0x8664 - amd64
2442478.1c64: Timestamp: 0x79709e8c
2452478.1c64: Image Version: 10.0
2462478.1c64: SizeOfImage: 0x1e000 (122880)
2472478.1c64: Resource Dir: 0x1d000 LB 0x408
2482478.1c64: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
2492478.1c64: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
2502478.1c64: ProductName: Microsoft® Windows® Operating System
2512478.1c64: ProductVersion: 10.0.18323.1000
2522478.1c64: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
2532478.1c64: FileDescription: ApiSet Schema DLL
2542478.1c64: NtOpenDirectoryObject failed on \Driver: 0xc0000022
2552478.1c64: supR3HardenedWinFindAdversaries: 0x0
2562478.1c64: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
2572478.1c64: Calling main()
2582478.1c64: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
2592478.1c64: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
2602478.1c64: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2612478.1c64: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2622478.1c64: SUPR3HardenedMain: Respawn #2
2632478.1c64: supR3HardNtEnableThreadCreation:
2642478.1c64: supR3HardenedDllNotificationCallback: load 00007ffc6c220000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
2652478.1c64: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x5eb3e5d0; retrying against current time: 0x5c513efd.
2662478.1c64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
2672478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
2682478.1c64: supR3HardenedDllNotificationCallback: load 00007ffc6bd90000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
2692478.1c64: \Device\HarddiskVolume2\Windows\System32\sechost.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xf1a8e747; retrying against current time: 0x5c513efd.
2702478.1c64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
2712478.1c64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
2722478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
2732478.1c64: \Device\HarddiskVolume2\Windows\System32\ntdll.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xaaee18ef; retrying against current time: 0x5c513efd.
2742478.1c64: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
2752478.1c64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
2762478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
2772478.1c64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2782478.1c64: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2792478.1c64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2802478.1c64: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2812478.1c64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c490000 'C:\WINDOWS\System32\ntdll.dll'
2822478.1c64: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)
2832478.1c64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
2842478.1c64: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
2852478.1c64: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
2862478.1c64: supR3HardenedDllNotificationCallback: load 00007ffc674b0000 LB 0x0008f000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
2872478.1c64: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
2882478.1c64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
2892478.1c64: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2902478.1c64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c490000 'C:\WINDOWS\System32\ntdll.dll'
2912478.1c64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc674b0000 'C:\WINDOWS\system32\apphelp.dll'
2922478.1c64: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc6c5063d0 pvNtTerminateThread=00007ffc6c52d310
2932478.1c64: supR3HardenedWinDoReSpawn(2): New child 4c0.1b10 [kernel32].
2942478.1c64: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
2952478.1c64: supR3HardNtChildGatherData: PebBaseAddress=000000000039b000 cbPeb=0x388
2962478.1c64: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffc6c490000 uNtDllChildAddr=00007ffc6c490000
2972478.1c64: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffc6c5063d0
2982478.1c64: supR3HardenedWinSetupChildInit: Start child.
2992478.1c64: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
3002478.1c64: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 30 sleeps
3012478.1c64: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3022478.1c64: *0000000000000000-000000000014ffff 0x0001/0x0000 0x0000000
3032478.1c64: *0000000000150000-000000000016ffff 0x0004/0x0004 0x0020000
3042478.1c64: *0000000000170000-000000000018afff 0x0002/0x0002 0x0040000
3052478.1c64: 000000000018b000-000000000018ffff 0x0001/0x0000 0x0000000
3062478.1c64: *0000000000190000-0000000000193fff 0x0002/0x0002 0x0040000
3072478.1c64: 0000000000194000-000000000019ffff 0x0001/0x0000 0x0000000
3082478.1c64: *00000000001a0000-00000000001a1fff 0x0004/0x0004 0x0020000
3092478.1c64: 00000000001a2000-00000000001fffff 0x0001/0x0000 0x0000000
3102478.1c64: *0000000000200000-000000000039afff 0x0000/0x0004 0x0020000
3112478.1c64: 000000000039b000-000000000039dfff 0x0004/0x0004 0x0020000
3122478.1c64: 000000000039e000-00000000003fffff 0x0000/0x0004 0x0020000
3132478.1c64: *0000000000400000-00000000004fafff 0x0000/0x0004 0x0020000
3142478.1c64: 00000000004fb000-00000000004fdfff 0x0104/0x0004 0x0020000
3152478.1c64: 00000000004fe000-00000000004fffff 0x0004/0x0004 0x0020000
3162478.1c64: 0000000000500000-000000007ffdffff 0x0001/0x0000 0x0000000
3172478.1c64: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
3182478.1c64: 000000007ffe1000-000000007ffe9fff 0x0001/0x0000 0x0000000
3192478.1c64: *000000007ffea000-000000007ffeafff 0x0002/0x0002 0x0020000
3202478.1c64: 000000007ffeb000-00007ff596e3ffff 0x0001/0x0000 0x0000000
3212478.1c64: *00007ff596e40000-00007ff596e40fff 0x0002/0x0002 0x0040000
3222478.1c64: 00007ff596e41000-00007ff596e4ffff 0x0001/0x0000 0x0000000
3232478.1c64: *00007ff596e50000-00007ff596e72fff 0x0002/0x0002 0x0040000
3242478.1c64: 00007ff596e73000-00007ff72136ffff 0x0001/0x0000 0x0000000
3252478.1c64: *00007ff721370000-00007ff721370fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3262478.1c64: 00007ff721371000-00007ff7213e3fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3272478.1c64: 00007ff7213e4000-00007ff7213e4fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3282478.1c64: 00007ff7213e5000-00007ff72142bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3292478.1c64: 00007ff72142c000-00007ff72142cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3302478.1c64: 00007ff72142d000-00007ff72142dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3312478.1c64: 00007ff72142e000-00007ff721432fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3322478.1c64: 00007ff721433000-00007ff721433fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3332478.1c64: 00007ff721434000-00007ff721434fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3342478.1c64: 00007ff721435000-00007ff721438fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3352478.1c64: 00007ff721439000-00007ff721481fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3362478.1c64: 00007ff721482000-00007ffc6c48ffff 0x0001/0x0000 0x0000000
3372478.1c64: *00007ffc6c490000-00007ffc6c490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3382478.1c64: 00007ffc6c491000-00007ffc6c5a8fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3392478.1c64: 00007ffc6c5a9000-00007ffc6c5f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3402478.1c64: 00007ffc6c5f1000-00007ffc6c5fcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3412478.1c64: 00007ffc6c5fd000-00007ffc6c60bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3422478.1c64: 00007ffc6c60c000-00007ffc6c60cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3432478.1c64: 00007ffc6c60d000-00007ffc6c60ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3442478.1c64: 00007ffc6c610000-00007ffc6c680fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3452478.1c64: 00007ffc6c681000-00007ffffffeffff 0x0001/0x0000 0x0000000
3462478.1c64: VirtualBoxVM.exe: timestamp 0x5c4b51f3 (rc=VINF_SUCCESS)
3472478.1c64: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3482478.1c64: \Device\HarddiskVolume2\Windows\System32\ntdll.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xaaee18ef; retrying against current time: 0x5c513efd.
3492478.1c64: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
3502478.1c64: supR3HardNtChildPurify: Done after 333 ms and 0 fixes (loop #0).
3514c0.1b10: Log file opened: 6.0.4r128413 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0479300
3524c0.1b10: supR3HardenedVmProcessInit: uNtDllAddr=00007ffc6c490000 g_uNtVerCombined=0xa0479300
3534c0.1b10: ntdll.dll: timestamp 0xaaee18ef (rc=VINF_SUCCESS)
3544c0.1b10: New simple heap: #1 0000000000600000 LB 0x400000 (for 2035712 allocation)
3552478.1c64: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000620000 LB 0x400000)
3562478.1c64: supR3HardNtEnableThreadCreation:
3574c0.1b10: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3584c0.1b10: System32: \Device\HarddiskVolume2\Windows\System32
3594c0.1b10: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
3604c0.1b10: KnownDllPath: C:\WINDOWS\System32
3614c0.1b10: supR3HardenedVmProcessInit: Opening vboxdrv...
3624c0.1b10: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3634c0.1b10: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3644c0.1b10: Registered Dll notification callback with NTDLL.
3654c0.1b10: \Device\HarddiskVolume2\Windows\System32\kernel32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xf313bcfd; retrying against current time: 0x5c513efe.
3664c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
3674c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3684c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3694c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a1f0000 LB 0x002a0000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
3704c0.1b10: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x2db87fbc; retrying against current time: 0x5c513efe.
3714c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
3724c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3734c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6c3a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
3744c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3754c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c3a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
3764c0.1b10: supR3HardenedDllNotificationCallback: load 00007ff721370000 LB 0x00112000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
3774c0.1b10: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3784c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3794c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3804c0.1b10: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc6c5063d0 pvNtTerminateThread=00007ffc6c52d310
3812478.1c64: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 301 ms.
3824c0.1b10: \SystemRoot\System32\ntdll.dll:
3834c0.1b10: CreationTime: 2019-01-20T10:25:40.850445300Z
3844c0.1b10: LastWriteTime: 2019-01-20T10:25:40.850445300Z
3854c0.1b10: ChangeTime: 2019-01-25T10:44:49.426023800Z
3864c0.1b10: FileAttributes: 0x20
3874c0.1b10: Size: 0x1e8870
3884c0.1b10: NT Headers: 0xd8
3894c0.1b10: Timestamp: 0xaaee18ef
3904c0.1b10: Machine: 0x8664 - amd64
3914c0.1b10: Timestamp: 0xaaee18ef
3924c0.1b10: Image Version: 10.0
3934c0.1b10: SizeOfImage: 0x1f1000 (2035712)
3944c0.1b10: Resource Dir: 0x181000 LB 0x6efd0
3954c0.1b10: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3964c0.1b10: [Raw version resource data: 0x1810f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3974c0.1b10: ProductName: Microsoft® Windows® Operating System
3984c0.1b10: ProductVersion: 10.0.18323.1000
3994c0.1b10: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
4004c0.1b10: FileDescription: NT Layer DLL
4014c0.1b10: \SystemRoot\System32\kernel32.dll:
4024c0.1b10: CreationTime: 2019-01-20T10:25:07.031948900Z
4034c0.1b10: LastWriteTime: 2019-01-20T10:25:07.031948900Z
4044c0.1b10: ChangeTime: 2019-01-25T10:44:48.363034000Z
4054c0.1b10: FileAttributes: 0x20
4064c0.1b10: Size: 0xaee90
4074c0.1b10: NT Headers: 0xe8
4084c0.1b10: Timestamp: 0xf313bcfd
4094c0.1b10: Machine: 0x8664 - amd64
4104c0.1b10: Timestamp: 0xf313bcfd
4114c0.1b10: Image Version: 10.0
4124c0.1b10: SizeOfImage: 0xb2000 (729088)
4134c0.1b10: Resource Dir: 0xb0000 LB 0x520
4144c0.1b10: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4154c0.1b10: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
4164c0.1b10: ProductName: Microsoft® Windows® Operating System
4174c0.1b10: ProductVersion: 10.0.18323.1000
4184c0.1b10: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
4194c0.1b10: FileDescription: Windows NT BASE API Client DLL
4204c0.1b10: \SystemRoot\System32\KernelBase.dll:
4214c0.1b10: CreationTime: 2019-01-20T10:25:40.991082700Z
4224c0.1b10: LastWriteTime: 2019-01-20T10:25:40.991082700Z
4234c0.1b10: ChangeTime: 2019-01-25T10:44:49.597900800Z
4244c0.1b10: FileAttributes: 0x20
4254c0.1b10: Size: 0x29fbc0
4264c0.1b10: NT Headers: 0xf8
4274c0.1b10: Timestamp: 0x2db87fbc
4284c0.1b10: Machine: 0x8664 - amd64
4294c0.1b10: Timestamp: 0x2db87fbc
4304c0.1b10: Image Version: 10.0
4314c0.1b10: SizeOfImage: 0x2a0000 (2752512)
4324c0.1b10: Resource Dir: 0x27b000 LB 0x548
4334c0.1b10: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4344c0.1b10: [Raw version resource data: 0x27b0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
4354c0.1b10: ProductName: Microsoft® Windows® Operating System
4364c0.1b10: ProductVersion: 10.0.18323.1000
4374c0.1b10: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
4384c0.1b10: FileDescription: Windows NT BASE API Client DLL
4394c0.1b10: \SystemRoot\System32\apisetschema.dll:
4404c0.1b10: CreationTime: 2019-01-20T10:25:01.842161500Z
4414c0.1b10: LastWriteTime: 2019-01-20T10:25:01.842161500Z
4424c0.1b10: ChangeTime: 2019-01-25T17:11:31.755841200Z
4434c0.1b10: FileAttributes: 0x20
4444c0.1b10: Size: 0x1bf30
4454c0.1b10: NT Headers: 0xc8
4464c0.1b10: Timestamp: 0x79709e8c
4474c0.1b10: Machine: 0x8664 - amd64
4484c0.1b10: Timestamp: 0x79709e8c
4494c0.1b10: Image Version: 10.0
4504c0.1b10: SizeOfImage: 0x1e000 (122880)
4514c0.1b10: Resource Dir: 0x1d000 LB 0x408
4524c0.1b10: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
4534c0.1b10: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
4544c0.1b10: ProductName: Microsoft® Windows® Operating System
4554c0.1b10: ProductVersion: 10.0.18323.1000
4564c0.1b10: FileVersion: 10.0.18323.1000 (WinBuild.160101.0800)
4574c0.1b10: FileDescription: ApiSet Schema DLL
4584c0.1b10: NtOpenDirectoryObject failed on \Driver: 0xc0000022
4594c0.1b10: supR3HardenedWinFindAdversaries: 0x0
4604c0.1b10: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
4614c0.1b10: Calling main()
4624c0.1b10: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
4634c0.1b10: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
4644c0.1b10: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4654c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4664c0.1b10: SUPR3HardenedMain: Final process, opening VBoxDrv...
4674c0.1b10: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000600000 LB 0x400000)
4684c0.1b10: supR3HardNtEnableThreadCreation:
4694c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4704c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4714c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4724c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4734c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc61180000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4744c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4754c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4764c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4774c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc61180000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4784c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4794c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4804c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc61180000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4814c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc61180000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4824c0.1b10: \Device\HarddiskVolume2\Windows\System32\wintrust.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xcc388a4b; retrying against current time: 0x5c513efe.
4834c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4844c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
4854c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
4864c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
4874c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
4884c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
4894c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4904c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4914c0.1b10: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x5eb3e5d0; retrying against current time: 0x5c513efe.
4924c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
4934c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
4944c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4954c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4964c0.1b10: \Device\HarddiskVolume2\Windows\System32\crypt32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xb63a435c; retrying against current time: 0x5c513efe.
4974c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
4984c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
4994c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
5004c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5014c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5024c0.1b10: \Device\HarddiskVolume2\Windows\System32\msasn1.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x345d7b1e; retrying against current time: 0x5c513efe.
5034c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
5044c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
5054c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5064c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5074c0.1b10: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe8e00b5e; retrying against current time: 0x5c513efe.
5084c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
5094c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
5104c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5114c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5124c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5134c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5144c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6c180000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5154c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5164c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc693a0000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
5174c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5184c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69f00000 LB 0x000fc000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5194c0.1b10: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x116447cf; retrying against current time: 0x5c513efe.
5204c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
5214c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
5224c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a080000 LB 0x00149000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
5234c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5244c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6c220000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
5254c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5264c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69ea0000 LB 0x0005c000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
5274c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5284c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5294c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5304c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-synch-l1-2-0'
5314c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5324c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5334c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-fibers-l1-1-1'
5344c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5354c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5364c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-fibers-l1-1-1'
5374c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5384c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5394c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-synch-l1-2-0'
5404c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
5414c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5424c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-localization-l1-2-1'
5434c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc69ea0000 'C:\WINDOWS\system32\Wintrust.dll'
5444c0.1b10: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x6327313d; retrying against current time: 0x5c513efe.
5454c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
5464c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
5474c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5484c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a530000 LB 0x00026000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
5494c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5504c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a530000 'C:\WINDOWS\system32\bcrypt.dll'
5514c0.1b10: bcrypt.dll loaded at 00007ffc6a530000, BCryptOpenAlgorithmProvider at 00007ffc6a534bc0, preloading providers:
5524c0.1b10: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xc2035b4f; retrying against current time: 0x5c513efe.
5534c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
5544c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
5554c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5564c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a000000 LB 0x0007e000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
5574c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5584c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a000000 'C:\WINDOWS\system32\bcryptprimitives.dll'
5594c0.1b10: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000000a8d650)
5604c0.1b10: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000000a8ebc0)
5614c0.1b10: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000000a8eec0)
5624c0.1b10: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000000a8f1c0)
5634c0.1b10: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0000000000a8f4c0)
5644c0.1b10: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=0000000000a8f7c0)
5654c0.1b10: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000000a8fac0)
5664c0.1b10: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000000a8fdc0)
5674c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a1d0000 LB 0x00017000 C:\WINDOWS\System32\CRYPTSP.dll [fFlags=0x0]
5684c0.1b10: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x24135c64; retrying against current time: 0x5c513efe.
5694c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
5704c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
5714c0.1b10: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd7b020c2; retrying against current time: 0x5c513efe.
5724c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
5734c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
5744c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
5754c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5764c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
5774c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5784c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5794c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5804c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc687c0000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
5814c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5824c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
5834c0.1b10: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xb0af72e7; retrying against current time: 0x5c513efe.
5844c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
5854c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
5864c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
5874c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc68dd0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
5884c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5894c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
5904c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5914c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
5924c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5934c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5944c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c3a0000 'C:\WINDOWS\System32\kernel32.dll'
5954c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5964c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5974c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc69ea0000 'C:\WINDOWS\System32\WINTRUST.DLL'
5984c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5994c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6004c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a080000 'C:\WINDOWS\System32\CRYPT32.dll'
6014c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6b980000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6024c0.1b10: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x13bffc39; retrying against current time: 0x5c513efe.
6034c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
6044c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
6054c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
6064c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6074c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6084c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6094c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6104c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6114c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
6124c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6bd90000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6134c0.1b10: \Device\HarddiskVolume2\Windows\System32\sechost.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xf1a8e747; retrying against current time: 0x5c513efe.
6144c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6154c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
6164c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
6174c0.1b10: \Device\HarddiskVolume2\Windows\System32\gpapi.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xba0164d2; retrying against current time: 0x5c513efe.
6184c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6194c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6204c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
6214c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
6224c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc68000000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6234c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6244c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc693c0000 LB 0x0001d000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
6254c0.1b10: \Device\HarddiskVolume2\Windows\System32\profapi.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xffc9a48f; retrying against current time: 0x5c513efe.
6264c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
6274c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
6284c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6294c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
6304c0.1b10: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
6314c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
6324c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
6334c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
6344c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6354c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6364c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6374c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6384c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6394c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6404c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6414c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6424c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6434c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6444c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6454c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6464c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6474c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6484c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6494c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc5ec70000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
6504c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6514c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6524c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6534c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6544c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6554c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6564c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6574c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6584c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6594c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6604c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6614c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6624c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6634c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6644c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6654c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6664c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6674c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6684c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6694c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6704c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6714c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6724c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6734c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6744c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6754c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6764c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6774c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6784c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6794c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\WINDOWS\System32\cryptnet.dll'
6804c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6814c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ec70000 'C:\Windows\System32\cryptnet.dll'
6824c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6834c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6844c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c220000 'C:\WINDOWS\System32\rpcrt4.dll'
6854c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6ab10000 LB 0x000a2000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
6864c0.1b10: \Device\HarddiskVolume2\Windows\System32\advapi32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe2d893e3; retrying against current time: 0x5c513efe.
6874c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6884c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
6894c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
6904c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
6914c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
6924c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6934c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6944c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6954c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6964c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
6974c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
6984c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
6994c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7004c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7014c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7024c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7034c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7044c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7054c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000aa3570
7064c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000aa3570
7074c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FAD11C1387988012BF602E69FB5E9321CAC71234
7084c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7094c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7104c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7114c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18323.1000.cat'; file='\SystemRoot\System32\ntdll.dll'
7124c0.1b10: g_pfnWinVerifyTrust=00007ffc69ea2600
7134c0.1b10: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7144c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7154c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7164c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7174c0.1b10: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
7184c0.1b10: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7194c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7204c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7214c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7224c0.1b10: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
7234c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7244c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7254c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7264c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
7274c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003bc pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
7284c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000aa3570
7294c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000aa3570
7304c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=ACA37BE0AAD010D8DD81FE688783E01B6CA214D5
7314c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7324c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7334c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18323.1000.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
7344c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7354c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
7364c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7374c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7384c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
7394c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7404c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7414c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
7424c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7434c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7444c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
7454c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7464c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7474c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
7484c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7494c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7504c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
7514c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7524c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7534c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
7544c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
7554c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7564c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7574c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
7584c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7594c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
7604c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7614c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
7624c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7634c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll'
7644c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7654c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
7664c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7674c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
7684c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7694c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
7704c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7714c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
7724c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7734c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
7744c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7754c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
7764c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
7774c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
7784c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
7794c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
7804c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a080000 'C:\WINDOWS\system32\crypt32.dll'
7814c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xba02d0ab12c5ed00 CN=XBL Client IPsec Issuing CA
7824c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xf8b8190b4080cd00 CN=NN112
7834c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xdc182c1a688275f5 CN=NN112
7844c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
7854c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
7864c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
7874c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xe91088692047eebf CN=NN112
7884c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
7894c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
7904c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x4f49db1a8fa9bdbb CN=NN112
7914c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
7924c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x9546d06a8d70b800 CN=XBL Server IPsec Issuing CA
7934c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x4a658336f65f61ac CN=NN112
7944c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xf76e35e78ca0b200 CN=DESKTOP-HSEKVU5
7954c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
7964c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
7974c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
7984c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
7994c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8004c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
8014c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8024c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8034c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
8044c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8054c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8064c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8074c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
8084c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
8094c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
8104c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
8114c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
8124c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
8134c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
8144c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xd41691e475fb8515 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority
8154c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
8164c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
8174c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xbebef0d2217f0bfb C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
8184c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
8194c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8204c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
8214c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8224c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xb352b1523915d000 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2
8234c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
8244c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
8254c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
8264c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
8274c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
8284c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
8294c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
8304c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
8314c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x39bb496d7f0fc200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Development Root Certificate Authority 2014
8324c0.1b10: supR3HardenedWinIsDesiredRootCA: Adding 0x90c7c28610d2ed15 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Development Root Certificate Authority 2018
8334c0.1b10: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=52
8344c0.1b10: SUPR3HardenedMain: Load Runtime...
8354c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
8364c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8374c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
8384c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
8394c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
8404c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
8414c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8424c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8434c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8444c0.1b10: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x5b18fc48; retrying against current time: 0x5c513eff.
8454c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
8464c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
8474c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) WinVerifyTrust
8484c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
8494c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8504c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8514c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
8524c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8534c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8544c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8554c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8564c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
8574c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
8584c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8594c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
8604c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8614c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8624c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8634c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8644c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8654c0.1b10: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8664c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
8674c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
8684c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
8694c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
8704c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
8714c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8724c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8734c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8744c0.1b10: supR3HardenedDllNotificationCallback: load 0000000075ee0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
8754c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8764c0.1b10: supR3HardenedDllNotificationCallback: load 0000000075e40000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
8774c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8784c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6aaa0000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
8794c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
8804c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc2a760000 LB 0x0052d000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
8814c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8824c0.1b10: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8834c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
8844c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8854c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8864c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8874c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8884c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8894c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8904c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8914c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8924c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8934c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8944c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8954c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8964c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8974c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8984c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8994c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9004c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9014c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9024c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9034c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9044c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9054c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9064c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9074c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9084c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9094c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9104c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9114c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9124c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9134c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9144c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9154c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9164c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9174c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9184c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9194c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9204c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9214c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9224c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9234c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9244c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9254c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9264c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9274c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
9284c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9294c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9304c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9314c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9324c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc2a760000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9334c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
9344c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9354c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc69ea0000 'C:\WINDOWS\system32\Wintrust.dll'
9364c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
9374c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
9384c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9394c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
9404c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
9414c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9424c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a080000 'C:\WINDOWS\system32\crypt32.dll'
9434c0.1b10: SUPR3HardenedMain: Load TrustedMain...
9444c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
9454c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
9464c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxglobal.dll'.
9474c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
9484c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
9494c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
9504c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
9514c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
9524c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
9534c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
9544c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
9554c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
9564c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
9574c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
9584c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
9594c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
9604c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
9614c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
9624c0.1b10: \Device\HarddiskVolume2\Windows\System32\winmm.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd31e3ca4; retrying against current time: 0x5c513eff.
9634c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
9644c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
9654c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
9664c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) WinVerifyTrust
9674c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
9684c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
9694c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
9704c0.1b10: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x9af8175d; retrying against current time: 0x5c513eff.
9714c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9724c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9734c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
9744c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9754c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9764c0.1b10: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd95535fd; retrying against current time: 0x5c513eff.
9774c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
9784c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9794c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
9804c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
9814c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9824c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9834c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
9844c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
9854c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
9864c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
9874c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
9884c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) WinVerifyTrust
9894c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
9904c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
9914c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
9924c0.1b10: \Device\HarddiskVolume2\Windows\System32\ole32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x69345e97; retrying against current time: 0x5c513f00.
9934c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9944c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9954c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9964c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9974c0.1b10: \Device\HarddiskVolume2\Windows\System32\combase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xfb1bdf40; retrying against current time: 0x5c513f00.
9984c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
9994c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
10004c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'bcryptprimitives.dll'.
10014c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
10024c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
10034c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
10044c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
10054c0.1b10: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x2085286c; retrying against current time: 0x5c513f00.
10064c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
10074c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
10084c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
10094c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
10104c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
10114c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
10124c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10134c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10144c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
10154c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
10164c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
10174c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
10184c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
10194c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) WinVerifyTrust
10204c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
10214c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10224c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10234c0.1b10: \Device\HarddiskVolume2\Windows\System32\user32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xb5f2ce93; retrying against current time: 0x5c513f00.
10244c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10254c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10264c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
10274c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10284c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10294c0.1b10: \Device\HarddiskVolume2\Windows\System32\user32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xb5f2ce93; retrying against current time: 0x5c513f00.
10304c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
10314c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10324c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
10334c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
10344c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
10354c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10364c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10374c0.1b10: \Device\HarddiskVolume2\Windows\System32\gdi32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x3409d997; retrying against current time: 0x5c513f00.
10384c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
10394c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
10404c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
10414c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
10424c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10434c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10444c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10454c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10464c0.1b10: \Device\HarddiskVolume2\Windows\System32\win32u.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x65e1ccb6; retrying against current time: 0x5c513f00.
10474c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
10484c0.1b10: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
10494c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
10504c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
10514c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10524c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10534c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10544c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10554c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10564c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
10574c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
10584c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10594c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
10604c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll) WinVerifyTrust
10614c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
10624c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
10634c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10644c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10654c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10664c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10674c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10684c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
10694c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
10704c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
10714c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
10724c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
10734c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
10744c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
10754c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
10764c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
10774c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
10784c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10794c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10804c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10814c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10824c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10834c0.1b10: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
10844c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
10854c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
10864c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
10874c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
10884c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
10894c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
10904c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
10914c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
10924c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
10934c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
10944c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10954c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10964c0.1b10: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
10974c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
10984c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
10994c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
11004c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11014c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
11024c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11034c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11044c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
11054c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
11064c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
11074c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
11084c0.1b10: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
11094c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
11104c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11114c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
11124c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
11134c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
11144c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11154c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11164c0.1b10: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
11174c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
11184c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11194c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11204c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11214c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11224c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11234c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
11244c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11254c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11264c0.1b10: \Device\HarddiskVolume2\Windows\System32\shell32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x166be67d; retrying against current time: 0x5c513f00.
11274c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
11284c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
11294c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
11304c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
11314c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
11324c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11334c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11344c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11354c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11364c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11374c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
11384c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11394c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11404c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11414c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11424c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11434c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11444c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11454c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11464c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11474c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11484c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11494c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
11504c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11514c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11524c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11534c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11544c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11554c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11564c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11574c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11584c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11594c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
11604c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
11614c0.1b10: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\opengl32.dll'.
11624c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11634c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
11644c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11654c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
11664c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
11674c0.1b10: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
11684c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
11694c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11704c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11714c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
11724c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11734c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11744c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11754c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11764c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11774c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
11784c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
11794c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
11804c0.1b10: \Device\HarddiskVolume2\Windows\System32\mpr.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x3e2fd2bd; retrying against current time: 0x5c513f01.
11814c0.1b10: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
11824c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
11834c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
11844c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
11854c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
11864c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
11874c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11884c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11894c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
11904c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11914c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11924c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
11934c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11944c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11954c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11964c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11974c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11984c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11994c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
12004c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
12014c0.1b10: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
12024c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12034c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
12044c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
12054c0.1b10: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
12064c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
12074c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12084c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12094c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12104c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12114c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12124c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
12134c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12144c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12154c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
12164c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12174c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12184c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
12194c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12204c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12214c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12224c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12234c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12244c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
12254c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12264c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12274c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
12284c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12294c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12304c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
12314c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12324c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12334c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
12344c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
12354c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12364c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12374c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
12384c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
12394c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
12404c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
12414c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
12424c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
12434c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12444c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12454c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
12464c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12474c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12484c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12494c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12504c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12514c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
12524c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12534c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12544c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
12554c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12564c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12574c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
12584c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12594c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12604c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
12614c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12624c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12634c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
12644c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12654c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12664c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12674c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
12684c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
12694c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12704c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12714c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
12724c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
12734c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
12744c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12754c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12764c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [redoing WinVerifyTrust]
12774c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
12784c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'
12794c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12804c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12814c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
12824c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
12834c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
12844c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxglobal.dll'...
12854c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxglobal.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxglobal.dll' [rcNtRedir=0xc0150008]
12864c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
12874c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
12884c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
12894c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12904c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
12914c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
12924c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
12934c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
12944c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
12954c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
12964c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll) WinVerifyTrust
12974c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
12984c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12994c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13004c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
13014c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000508 pwszName=\Device\HarddiskVolume2\Windows\System32\opengl32.dll
13024c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000aa3570
13034c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000aa3570
13044c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B7A4B0B06E6F741962386BC90F2A377901224A70
13054c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
13064c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
13074c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
13084c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13094c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13104c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
13114c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13124c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13134c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
13144c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13154c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13164c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
13174c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13184c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13194c0.1b10: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
13204c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13214c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13224c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13234c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13244c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13254c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13264c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13274c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13284c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13294c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13304c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
13314c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18323.1000.cat'; file='\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
13324c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13334c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
13344c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
13354c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
13364c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
13374c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
13384c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13394c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13404c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
13414c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
13424c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
13434c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
13444c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
13454c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
13464c0.1b10: \Device\HarddiskVolume2\Windows\System32\DXCore.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe9af6ded; retrying against current time: 0x5c513f01.
13474c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
13484c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
13494c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\DXCore.dll)
13504c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DXCore.dll
13514c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69be0000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
13524c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
13534c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a490000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
13544c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
13554c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69c60000 LB 0x0018f000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
13564c0.1b10: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd85ff23a; retrying against current time: 0x5c513f01.
13574c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
13584c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
13594c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
13604c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
13614c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32full.dll)
13624c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll
13634c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6ba20000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
13644c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
13654c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6bfe0000 LB 0x00198000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
13664c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [avoiding WinVerifyTrust]
13674c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6ba50000 LB 0x00338000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
13684c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [avoiding WinVerifyTrust]
13694c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69c10000 LB 0x0004b000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
13704c0.1b10: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd774f447; retrying against current time: 0x5c513f01.
13714c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
13724c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
13734c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc68050000 LB 0x00020000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
13744c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
13754c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc356b0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
13764c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
13774c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc33fc0000 LB 0x0014e000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
13784c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
13794c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a940000 LB 0x000a7000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
13804c0.1b10: \Device\HarddiskVolume2\Windows\System32\SHCore.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xb63ab68c; retrying against current time: 0x5c513f01.
13814c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13824c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
13834c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
13844c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
13854c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
13864c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69390000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
13874c0.1b10: \Device\HarddiskVolume2\Windows\System32\umpdc.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xab27050a; retrying against current time: 0x5c513f01.
13884c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\umpdc.dll)
13894c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\umpdc.dll
13904c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc693e0000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
13914c0.1b10: \Device\HarddiskVolume2\Windows\System32\powrprof.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x274910d2; retrying against current time: 0x5c513f01.
13924c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
13934c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
13944c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)
13954c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
13964c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a6a0000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
13974c0.1b10: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x793da4c4; retrying against current time: 0x5c513f01.
13984c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
13994c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
14004c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
14014c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
14024c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
14034c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69430000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
14044c0.1b10: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x378d41cc; retrying against current time: 0x5c513f01.
14054c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
14064c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
14074c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
14084c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
14094c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc69450000 LB 0x00785000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
14104c0.1b10: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x50039643; retrying against current time: 0x5c513f01.
14114c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
14124c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
14134c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
14144c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
14154c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\windows.storage.dll)
14164c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll
14174c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6b2a0000 LB 0x006de000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
14184c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
14194c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a7d0000 LB 0x00154000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
14204c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
14214c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc54fb0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
14224c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
14234c0.1b10: supR3HardenedDllNotificationCallback: load 0000000075fc0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
14244c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
14254c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc1fe00000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
14264c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
14274c0.1b10: supR3HardenedDllNotificationCallback: load 00000000758d0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
14284c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
14294c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6b0a0000 LB 0x000c5000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
14304c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
14314c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc2a1a0000 LB 0x005b3000 C:\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [fFlags=0x0]
14324c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
14334c0.1b10: supR3HardenedDllNotificationCallback: load 0000000075870000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
14344c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
14354c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc67450000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
14364c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14374c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc67480000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
14384c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
14394c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc1b610000 LB 0x01f3c000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
14404c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
14414c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
14424c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
14434c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
14444c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
14454c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
14464c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
14474c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
14484c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
14494c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
14504c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
14514c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
14524c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
14534c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
14544c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
14554c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
14564c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
14574c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
14584c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
14594c0.1b10: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
14604c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
14614c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
14624c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
14634c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
14644c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
14654c0.1b10: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
14664c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
14674c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
14684c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
14694c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
14704c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
14714c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
14724c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
14734c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
14744c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
14754c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
14764c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
14774c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
14784c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
14794c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
14804c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
14814c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
14824c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
14834c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14844c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14854c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14864c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14874c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
14884c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
14894c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
14904c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14914c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14924c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
14934c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
14944c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\combase.dll
14954c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14964c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14974c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14984c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14994c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15004c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15014c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
15024c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
15034c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\user32.dll
15044c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15054c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15064c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15074c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
15084c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\gdi32.dll
15094c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15104c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15114c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
15124c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
15134c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
15144c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
15154c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\umpdc.dll
15164c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15174c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15184c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15194c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15204c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
15214c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
15224c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\combase.dll
15234c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15244c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15254c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15264c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15274c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
15284c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
15294c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
15304c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
15314c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
15324c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15334c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15344c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
15354c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
15364c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\user32.dll
15374c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15384c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15394c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15404c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
15414c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\gdi32.dll
15424c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
15434c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
15444c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
15454c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
15464c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
15474c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
15484c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
15494c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
15504c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
15514c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
15524c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
15534c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
15544c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
15554c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
15564c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
15574c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15584c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c3a0000 'C:\WINDOWS\System32\kernel32.dll'
15594c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
15604c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15614c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-string-l1-1-0'
15624c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
15634c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15644c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-datetime-l1-1-1'
15654c0.1b10: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
15664c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15674c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a1f0000 'api-ms-win-core-localization-obsolete-l1-2-0'
15684c0.1b10: \Device\HarddiskVolume2\Windows\System32\imm32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe5cbfc6c; retrying against current time: 0x5c513f02.
15694c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
15704c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
15714c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
15724c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
15734c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
15744c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
15754c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
15764c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
15774c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
15784c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
15794c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15804c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15814c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
15824c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
15834c0.1b10: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\user32.dll
15844c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
15854c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a700000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
15864c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
15874c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a700000 'C:\WINDOWS\system32\IMM32.DLL'
15884c0.1b10: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
15894c0.1b10: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rescheduled]
15904c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
15914c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15924c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6ab10000 'C:\WINDOWS\System32\ADVAPI32.DLL'
15934c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc1b610000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
15944c0.1b10: SUPR3HardenedMain: Calling TrustedMain (00007ffc1b6116c0)...
15954c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
15964c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
15974c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
15984c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
15994c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
16004c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
16014c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
16024c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
16034c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
16044c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
16054c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
16064c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
16074c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
16084c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16094c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
16104c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
16114c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
16124c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
16134c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16144c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
16154c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
16164c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16174c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
16184c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
16194c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
16204c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
16214c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
16224c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [redoing WinVerifyTrust]
16234c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
16244c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll'
16254c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16264c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16274c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
16284c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
16294c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
16304c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
16314c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
16324c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
16334c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [redoing WinVerifyTrust]
16344c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
16354c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
16364c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16374c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16384c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
16394c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
16404c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\user32.dll'
16414c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
16424c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
16434c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
16444c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16454c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16464c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16474c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
16484c0.1b10: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
16494c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16504c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16514c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc33d30000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
16524c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16534c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc33d30000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
16544c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000630 pwszName=\Device\HarddiskVolume2\Windows\System32\uxtheme.dll
16554c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000aa3570
16564c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000aa3570
16574c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8A00EAF205AF50F625554C7E29297F5FC3FF338E
16584c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
16594c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18323.1000.cat'; file='\Device\HarddiskVolume2\Windows\System32\uxtheme.dll'
16604c0.1b10: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
16614c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16624c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
16634c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
16644c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) WinVerifyTrust
16654c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
16664c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16674c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16684c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16694c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16704c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16714c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16724c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16734c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
16744c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc67760000 LB 0x0009a000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
16754c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
16764c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc67760000 'C:\WINDOWS\system32\uxtheme.dll'
16774c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6bfe0000 'C:\WINDOWS\system32\user32.dll'
16784c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
16794c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16804c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6b2a0000 'C:\WINDOWS\system32\shell32.dll'
16814c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [redoing WinVerifyTrust]
16824c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
16834c0.1b10: supR3HardenedScreenImage/LdrLoadDll: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'
16844c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16854c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6a940000 'C:\WINDOWS\system32\SHCore.dll'
16864c0.1b10: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
16874c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
16884c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
16894c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16904c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc67480000 'C:\WINDOWS\system32\winmm.dll'
16914c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
16924c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16934c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc67480000 'C:\WINDOWS\system32\winmm.dll'
16944c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
16954c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16964c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6b2a0000 'C:\WINDOWS\system32\shell32.dll'
16974c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
16984c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16994c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc67760000 'C:\WINDOWS\system32\uxtheme.dll'
17004c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
17014c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17024c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6ab10000 'C:\WINDOWS\system32\advapi32.dll'
17034c0.1b10: \Device\HarddiskVolume2\Windows\System32\userenv.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x3ef7ae2d; retrying against current time: 0x5c513f02.
17044c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
17054c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
17064c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
17074c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\userenv.dll) WinVerifyTrust
17084c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
17094c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
17104c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
17114c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
17124c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17134c0.1b10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17144c0.1b10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
17154c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17164c0.1b10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
17174c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc692b0000 LB 0x00025000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
17184c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
17194c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc692b0000 'C:\WINDOWS\system32\userenv.dll'
17204c0.1b10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
17214c0.1b10: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17224c0.1b10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc6c3a0000 'C:\WINDOWS\System32\kernel32.dll'
17234c0.1b10: supR3HardenedDllNotificationCallback: load 00007ffc6a9f0000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
17244c0.1b10: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe957c617; retrying against current time: 0x5c513f02.
17254c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17264c0.1b10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
17274c0.1b10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
17284c0.1b10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
17294c0.1a64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17304c0.1a64: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17314c0.1a64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17324c0.1a64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17334c0.1a64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'
17344c0.1a64: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\clbcatq.dll'
17354c0.1a64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc687c0000 'C:\WINDOWS\system32\rsaenh.dll'

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy