VirtualBox

Ticket #18836: VBoxHardening.log

File VBoxHardening.log, 307.6 KB (added by gvaduha, 5 years ago)
Line 
1fe4.3530: Log file opened: 6.0.10r132072 g_hStartupLog=0000000000000070 g_uNtVerCombined=0xa0456300
2fe4.3530: \SystemRoot\System32\ntdll.dll:
3fe4.3530: CreationTime: 2019-07-10T07:54:24.658650100Z
4fe4.3530: LastWriteTime: 2019-07-10T07:54:24.696714300Z
5fe4.3530: ChangeTime: 2019-07-11T12:38:23.055027600Z
6fe4.3530: FileAttributes: 0x20
7fe4.3530: Size: 0x1e7008
8fe4.3530: NT Headers: 0xe0
9fe4.3530: Timestamp: 0xf1b8afd
10fe4.3530: Machine: 0x8664 - amd64
11fe4.3530: Timestamp: 0xf1b8afd
12fe4.3530: Image Version: 10.0
13fe4.3530: SizeOfImage: 0x1ed000 (2019328)
14fe4.3530: Resource Dir: 0x17d000 LB 0x6ea08
15fe4.3530: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16fe4.3530: [Raw version resource data: 0x17d0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17fe4.3530: ProductName: Microsoft® Windows® Operating System
18fe4.3530: ProductVersion: 10.0.17763.592
19fe4.3530: FileVersion: 10.0.17763.592 (WinBuild.160101.0800)
20fe4.3530: FileDescription: NT Layer DLL
21fe4.3530: \SystemRoot\System32\kernel32.dll:
22fe4.3530: CreationTime: 2019-05-04T07:49:02.765059800Z
23fe4.3530: LastWriteTime: 2019-05-04T07:49:02.779043000Z
24fe4.3530: ChangeTime: 2019-07-10T07:54:46.157789800Z
25fe4.3530: FileAttributes: 0x20
26fe4.3530: Size: 0xb12c0
27fe4.3530: NT Headers: 0xe8
28fe4.3530: Timestamp: 0x250a0626
29fe4.3530: Machine: 0x8664 - amd64
30fe4.3530: Timestamp: 0x250a0626
31fe4.3530: Image Version: 10.0
32fe4.3530: SizeOfImage: 0xb3000 (733184)
33fe4.3530: Resource Dir: 0xb1000 LB 0x520
34fe4.3530: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35fe4.3530: [Raw version resource data: 0xb10b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36fe4.3530: ProductName: Microsoft® Windows® Operating System
37fe4.3530: ProductVersion: 10.0.17763.475
38fe4.3530: FileVersion: 10.0.17763.475 (WinBuild.160101.0800)
39fe4.3530: FileDescription: Windows NT BASE API Client DLL
40fe4.3530: \SystemRoot\System32\KernelBase.dll:
41fe4.3530: CreationTime: 2019-07-10T07:54:24.511273200Z
42fe4.3530: LastWriteTime: 2019-07-10T07:54:24.563977900Z
43fe4.3530: ChangeTime: 2019-07-11T12:38:22.461416100Z
44fe4.3530: FileAttributes: 0x20
45fe4.3530: Size: 0x2936c8
46fe4.3530: NT Headers: 0xf8
47fe4.3530: Timestamp: 0xb6cb145b
48fe4.3530: Machine: 0x8664 - amd64
49fe4.3530: Timestamp: 0xb6cb145b
50fe4.3530: Image Version: 10.0
51fe4.3530: SizeOfImage: 0x293000 (2699264)
52fe4.3530: Resource Dir: 0x26f000 LB 0x548
53fe4.3530: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54fe4.3530: [Raw version resource data: 0x26f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
55fe4.3530: ProductName: Microsoft® Windows® Operating System
56fe4.3530: ProductVersion: 10.0.17763.615
57fe4.3530: FileVersion: 10.0.17763.615 (WinBuild.160101.0800)
58fe4.3530: FileDescription: Windows NT BASE API Client DLL
59fe4.3530: \SystemRoot\System32\apisetschema.dll:
60fe4.3530: CreationTime: 2018-09-15T07:28:25.403122600Z
61fe4.3530: LastWriteTime: 2018-09-15T07:28:25.403122600Z
62fe4.3530: ChangeTime: 2019-03-16T02:27:59.199183400Z
63fe4.3530: FileAttributes: 0x20
64fe4.3530: Size: 0x1c738
65fe4.3530: NT Headers: 0xd0
66fe4.3530: Timestamp: 0x33775897
67fe4.3530: Machine: 0x8664 - amd64
68fe4.3530: Timestamp: 0x33775897
69fe4.3530: Image Version: 10.0
70fe4.3530: SizeOfImage: 0x1d000 (118784)
71fe4.3530: Resource Dir: 0x1c000 LB 0x408
72fe4.3530: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73fe4.3530: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
74fe4.3530: ProductName: Microsoft® Windows® Operating System
75fe4.3530: ProductVersion: 10.0.17763.1
76fe4.3530: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
77fe4.3530: FileDescription: ApiSet Schema DLL
78fe4.3530: NtOpenDirectoryObject failed on \Driver: 0xc0000022
79fe4.3530: supR3HardenedWinFindAdversaries: 0x0
80fe4.3530: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
81fe4.3530: Calling main()
82fe4.3530: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
83fe4.3530: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
84fe4.3530: SUPR3HardenedMain: Respawn #1
85fe4.3530: System32: \Device\HarddiskVolume5\Windows\System32
86fe4.3530: WinSxS: \Device\HarddiskVolume5\Windows\WinSxS
87fe4.3530: KnownDllPath: C:\Windows\System32
88fe4.3530: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
89fe4.3530: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
90fe4.3530: supR3HardNtEnableThreadCreation:
91fe4.3530: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6b3a5660 pvNtTerminateThread=00007ffd6b3d01b0
92fe4.3530: supR3HardenedWinDoReSpawn(1): New child 2278.339c [kernel32].
93fe4.3530: supR3HardNtChildGatherData: PebBaseAddress=0000000001172000 cbPeb=0x388
94fe4.3530: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffd6b330000 uNtDllChildAddr=00007ffd6b330000
95fe4.3530: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffd6b3a5660
96fe4.3530: supR3HardenedWinSetupChildInit: Start child.
97fe4.3530: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
98fe4.3530: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 29 sleeps
99fe4.3530: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
100fe4.3530: *0000000000000000-0000000000fbffff 0x0001/0x0000 0x0000000
101fe4.3530: *0000000000fc0000-0000000000fdffff 0x0004/0x0004 0x0020000
102fe4.3530: *0000000000fe0000-0000000000ff9fff 0x0002/0x0002 0x0040000
103fe4.3530: 0000000000ffa000-0000000000ffffff 0x0001/0x0000 0x0000000
104fe4.3530: *0000000001000000-0000000001171fff 0x0000/0x0004 0x0020000
105fe4.3530: 0000000001172000-0000000001174fff 0x0004/0x0004 0x0020000
106fe4.3530: 0000000001175000-00000000011fffff 0x0000/0x0004 0x0020000
107fe4.3530: *0000000001200000-00000000012fafff 0x0000/0x0004 0x0020000
108fe4.3530: 00000000012fb000-00000000012fdfff 0x0104/0x0004 0x0020000
109fe4.3530: 00000000012fe000-00000000012fffff 0x0004/0x0004 0x0020000
110fe4.3530: *0000000001300000-0000000001303fff 0x0002/0x0002 0x0040000
111fe4.3530: 0000000001304000-000000000130ffff 0x0001/0x0000 0x0000000
112fe4.3530: *0000000001310000-0000000001311fff 0x0004/0x0004 0x0020000
113fe4.3530: 0000000001312000-000000007ffdffff 0x0001/0x0000 0x0000000
114fe4.3530: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
115fe4.3530: 000000007ffe1000-000000007ffedfff 0x0001/0x0000 0x0000000
116fe4.3530: *000000007ffee000-000000007ffeefff 0x0002/0x0002 0x0020000
117fe4.3530: 000000007ffef000-00007ff5279affff 0x0001/0x0000 0x0000000
118fe4.3530: *00007ff5279b0000-00007ff5279b0fff 0x0002/0x0002 0x0040000
119fe4.3530: 00007ff5279b1000-00007ff5279bffff 0x0001/0x0000 0x0000000
120fe4.3530: *00007ff5279c0000-00007ff5279c2fff 0x0002/0x0002 0x0040000
121fe4.3530: 00007ff5279c3000-00007ff7e6e0ffff 0x0001/0x0000 0x0000000
122fe4.3530: *00007ff7e6e10000-00007ff7e6e10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
123fe4.3530: 00007ff7e6e11000-00007ff7e6e85fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
124fe4.3530: 00007ff7e6e86000-00007ff7e6e86fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
125fe4.3530: 00007ff7e6e87000-00007ff7e6ecdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
126fe4.3530: 00007ff7e6ece000-00007ff7e6ecefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
127fe4.3530: 00007ff7e6ecf000-00007ff7e6ecffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
128fe4.3530: 00007ff7e6ed0000-00007ff7e6ed4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
129fe4.3530: 00007ff7e6ed5000-00007ff7e6ed5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
130fe4.3530: 00007ff7e6ed6000-00007ff7e6ed6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
131fe4.3530: 00007ff7e6ed7000-00007ff7e6edafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
132fe4.3530: 00007ff7e6edb000-00007ff7e6f23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
133fe4.3530: 00007ff7e6f24000-00007ffd6b32ffff 0x0001/0x0000 0x0000000
134fe4.3530: *00007ffd6b330000-00007ffd6b330fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
135fe4.3530: 00007ffd6b331000-00007ffd6b447fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
136fe4.3530: 00007ffd6b448000-00007ffd6b48efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
137fe4.3530: 00007ffd6b48f000-00007ffd6b499fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
138fe4.3530: 00007ffd6b49a000-00007ffd6b4a7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
139fe4.3530: 00007ffd6b4a8000-00007ffd6b4a8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
140fe4.3530: 00007ffd6b4a9000-00007ffd6b4abfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
141fe4.3530: 00007ffd6b4ac000-00007ffd6b51cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
142fe4.3530: 00007ffd6b51d000-00007ffffffeffff 0x0001/0x0000 0x0000000
143fe4.3530: VirtualBoxVM.exe: timestamp 0x5d284665 (rc=VINF_SUCCESS)
144fe4.3530: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
145fe4.3530: '\Device\HarddiskVolume5\Windows\System32\ntdll.dll' has no imports
146fe4.3530: supR3HardNtChildPurify: Done after 287 ms and 0 fixes (loop #0).
1472278.339c: Log file opened: 6.0.10r132072 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0456300
1482278.339c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffd6b330000 g_uNtVerCombined=0xa0456300
1492278.339c: ntdll.dll: timestamp 0xf1b8afd (rc=VINF_SUCCESS)
1502278.339c: New simple heap: #1 0000000001420000 LB 0x400000 (for 2019328 allocation)
151fe4.3530: supR3HardNtEnableThreadCreation:
1522278.339c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
1532278.339c: System32: \Device\HarddiskVolume5\Windows\System32
1542278.339c: WinSxS: \Device\HarddiskVolume5\Windows\WinSxS
1552278.339c: KnownDllPath: C:\Windows\System32
1562278.339c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
1572278.339c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
1582278.339c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
1592278.339c: Registered Dll notification callback with NTDLL.
1602278.339c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\kernel32.dll)
1612278.339c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\kernel32.dll
1622278.339c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
1632278.339c: supR3HardenedDllNotificationCallback: load 00007ffd67880000 LB 0x00293000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
1642278.339c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\KernelBase.dll)
1652278.339c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\KernelBase.dll
1662278.339c: supR3HardenedDllNotificationCallback: load 00007ffd6a490000 LB 0x000b3000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
1672278.339c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1682278.339c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a490000 'C:\Windows\System32\KERNEL32.DLL'
1692278.339c: supR3HardenedDllNotificationCallback: load 00007ff7e6e10000 LB 0x00114000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
1702278.339c: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1712278.339c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1722278.339c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1732278.339c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6b3a5660 pvNtTerminateThread=00007ffd6b3d01b0
174fe4.3530: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 66 ms.
1752278.339c: \SystemRoot\System32\ntdll.dll:
1762278.339c: CreationTime: 2019-07-10T07:54:24.658650100Z
1772278.339c: LastWriteTime: 2019-07-10T07:54:24.696714300Z
1782278.339c: ChangeTime: 2019-07-11T12:38:23.055027600Z
1792278.339c: FileAttributes: 0x20
1802278.339c: Size: 0x1e7008
1812278.339c: NT Headers: 0xe0
1822278.339c: Timestamp: 0xf1b8afd
1832278.339c: Machine: 0x8664 - amd64
1842278.339c: Timestamp: 0xf1b8afd
1852278.339c: Image Version: 10.0
1862278.339c: SizeOfImage: 0x1ed000 (2019328)
1872278.339c: Resource Dir: 0x17d000 LB 0x6ea08
1882278.339c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1892278.339c: [Raw version resource data: 0x17d0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1902278.339c: ProductName: Microsoft® Windows® Operating System
1912278.339c: ProductVersion: 10.0.17763.592
1922278.339c: FileVersion: 10.0.17763.592 (WinBuild.160101.0800)
1932278.339c: FileDescription: NT Layer DLL
1942278.339c: \SystemRoot\System32\kernel32.dll:
1952278.339c: CreationTime: 2019-05-04T07:49:02.765059800Z
1962278.339c: LastWriteTime: 2019-05-04T07:49:02.779043000Z
1972278.339c: ChangeTime: 2019-07-10T07:54:46.157789800Z
1982278.339c: FileAttributes: 0x20
1992278.339c: Size: 0xb12c0
2002278.339c: NT Headers: 0xe8
2012278.339c: Timestamp: 0x250a0626
2022278.339c: Machine: 0x8664 - amd64
2032278.339c: Timestamp: 0x250a0626
2042278.339c: Image Version: 10.0
2052278.339c: SizeOfImage: 0xb3000 (733184)
2062278.339c: Resource Dir: 0xb1000 LB 0x520
2072278.339c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
2082278.339c: [Raw version resource data: 0xb10b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
2092278.339c: ProductName: Microsoft® Windows® Operating System
2102278.339c: ProductVersion: 10.0.17763.475
2112278.339c: FileVersion: 10.0.17763.475 (WinBuild.160101.0800)
2122278.339c: FileDescription: Windows NT BASE API Client DLL
2132278.339c: \SystemRoot\System32\KernelBase.dll:
2142278.339c: CreationTime: 2019-07-10T07:54:24.511273200Z
2152278.339c: LastWriteTime: 2019-07-10T07:54:24.563977900Z
2162278.339c: ChangeTime: 2019-07-11T12:38:22.461416100Z
2172278.339c: FileAttributes: 0x20
2182278.339c: Size: 0x2936c8
2192278.339c: NT Headers: 0xf8
2202278.339c: Timestamp: 0xb6cb145b
2212278.339c: Machine: 0x8664 - amd64
2222278.339c: Timestamp: 0xb6cb145b
2232278.339c: Image Version: 10.0
2242278.339c: SizeOfImage: 0x293000 (2699264)
2252278.339c: Resource Dir: 0x26f000 LB 0x548
2262278.339c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
2272278.339c: [Raw version resource data: 0x26f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
2282278.339c: ProductName: Microsoft® Windows® Operating System
2292278.339c: ProductVersion: 10.0.17763.615
2302278.339c: FileVersion: 10.0.17763.615 (WinBuild.160101.0800)
2312278.339c: FileDescription: Windows NT BASE API Client DLL
2322278.339c: \SystemRoot\System32\apisetschema.dll:
2332278.339c: CreationTime: 2018-09-15T07:28:25.403122600Z
2342278.339c: LastWriteTime: 2018-09-15T07:28:25.403122600Z
2352278.339c: ChangeTime: 2019-03-16T02:27:59.199183400Z
2362278.339c: FileAttributes: 0x20
2372278.339c: Size: 0x1c738
2382278.339c: NT Headers: 0xd0
2392278.339c: Timestamp: 0x33775897
2402278.339c: Machine: 0x8664 - amd64
2412278.339c: Timestamp: 0x33775897
2422278.339c: Image Version: 10.0
2432278.339c: SizeOfImage: 0x1d000 (118784)
2442278.339c: Resource Dir: 0x1c000 LB 0x408
2452278.339c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
2462278.339c: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
2472278.339c: ProductName: Microsoft® Windows® Operating System
2482278.339c: ProductVersion: 10.0.17763.1
2492278.339c: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
2502278.339c: FileDescription: ApiSet Schema DLL
2512278.339c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
2522278.339c: supR3HardenedWinFindAdversaries: 0x0
2532278.339c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
2542278.339c: Calling main()
2552278.339c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
2562278.339c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
2572278.339c: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2582278.339c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2592278.339c: SUPR3HardenedMain: Respawn #2
2602278.339c: supR3HardNtEnableThreadCreation:
2612278.339c: supR3HardenedDllNotificationCallback: load 00007ffd6a9c0000 LB 0x00122000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
2622278.339c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll)
2632278.339c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll
2642278.339c: supR3HardenedDllNotificationCallback: load 00007ffd6a880000 LB 0x0009e000 C:\Windows\System32\sechost.dll [fFlags=0x0]
2652278.339c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
2662278.339c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\sechost.dll)
2672278.339c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\sechost.dll
2682278.339c: '\Device\HarddiskVolume5\Windows\System32\ntdll.dll' has no imports
2692278.339c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ntdll.dll)
2702278.339c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ntdll.dll
2712278.339c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2722278.339c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2732278.339c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2742278.339c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2752278.339c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b330000 'C:\Windows\System32\ntdll.dll'
2762278.339c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6b3a5660 pvNtTerminateThread=00007ffd6b3d01b0
2772278.339c: supR3HardenedWinDoReSpawn(2): New child 3794.12fc [kernel32].
2782278.339c: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
2792278.339c: supR3HardNtChildGatherData: PebBaseAddress=0000000000c7c000 cbPeb=0x388
2802278.339c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffd6b330000 uNtDllChildAddr=00007ffd6b330000
2812278.339c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffd6b3a5660
2822278.339c: supR3HardenedWinSetupChildInit: Start child.
2832278.339c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
2842278.339c: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 29 sleeps
2852278.339c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2862278.339c: *0000000000000000-0000000000a4ffff 0x0001/0x0000 0x0000000
2872278.339c: *0000000000a50000-0000000000a6ffff 0x0004/0x0004 0x0020000
2882278.339c: *0000000000a70000-0000000000a89fff 0x0002/0x0002 0x0040000
2892278.339c: 0000000000a8a000-0000000000a8ffff 0x0001/0x0000 0x0000000
2902278.339c: *0000000000a90000-0000000000b8afff 0x0000/0x0004 0x0020000
2912278.339c: 0000000000b8b000-0000000000b8dfff 0x0104/0x0004 0x0020000
2922278.339c: 0000000000b8e000-0000000000b8ffff 0x0004/0x0004 0x0020000
2932278.339c: *0000000000b90000-0000000000b93fff 0x0002/0x0002 0x0040000
2942278.339c: 0000000000b94000-0000000000b9ffff 0x0001/0x0000 0x0000000
2952278.339c: *0000000000ba0000-0000000000ba1fff 0x0004/0x0004 0x0020000
2962278.339c: 0000000000ba2000-0000000000bfffff 0x0001/0x0000 0x0000000
2972278.339c: *0000000000c00000-0000000000c7bfff 0x0000/0x0004 0x0020000
2982278.339c: 0000000000c7c000-0000000000c7efff 0x0004/0x0004 0x0020000
2992278.339c: 0000000000c7f000-0000000000dfffff 0x0000/0x0004 0x0020000
3002278.339c: 0000000000e00000-000000007ffdffff 0x0001/0x0000 0x0000000
3012278.339c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
3022278.339c: 000000007ffe1000-000000007ffedfff 0x0001/0x0000 0x0000000
3032278.339c: *000000007ffee000-000000007ffeefff 0x0002/0x0002 0x0020000
3042278.339c: 000000007ffef000-00007ff5f208ffff 0x0001/0x0000 0x0000000
3052278.339c: *00007ff5f2090000-00007ff5f2090fff 0x0002/0x0002 0x0040000
3062278.339c: 00007ff5f2091000-00007ff5f209ffff 0x0001/0x0000 0x0000000
3072278.339c: *00007ff5f20a0000-00007ff5f20a2fff 0x0002/0x0002 0x0040000
3082278.339c: 00007ff5f20a3000-00007ff7e6e0ffff 0x0001/0x0000 0x0000000
3092278.339c: *00007ff7e6e10000-00007ff7e6e10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3102278.339c: 00007ff7e6e11000-00007ff7e6e85fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3112278.339c: 00007ff7e6e86000-00007ff7e6e86fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3122278.339c: 00007ff7e6e87000-00007ff7e6ecdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3132278.339c: 00007ff7e6ece000-00007ff7e6ecefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3142278.339c: 00007ff7e6ecf000-00007ff7e6ecffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3152278.339c: 00007ff7e6ed0000-00007ff7e6ed4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3162278.339c: 00007ff7e6ed5000-00007ff7e6ed5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3172278.339c: 00007ff7e6ed6000-00007ff7e6ed6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3182278.339c: 00007ff7e6ed7000-00007ff7e6edafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3192278.339c: 00007ff7e6edb000-00007ff7e6f23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3202278.339c: 00007ff7e6f24000-00007ffd6b32ffff 0x0001/0x0000 0x0000000
3212278.339c: *00007ffd6b330000-00007ffd6b330fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3222278.339c: 00007ffd6b331000-00007ffd6b447fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3232278.339c: 00007ffd6b448000-00007ffd6b48efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3242278.339c: 00007ffd6b48f000-00007ffd6b499fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3252278.339c: 00007ffd6b49a000-00007ffd6b4a7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3262278.339c: 00007ffd6b4a8000-00007ffd6b4a8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3272278.339c: 00007ffd6b4a9000-00007ffd6b4abfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3282278.339c: 00007ffd6b4ac000-00007ffd6b51cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll
3292278.339c: 00007ffd6b51d000-00007ffffffeffff 0x0001/0x0000 0x0000000
3302278.339c: VirtualBoxVM.exe: timestamp 0x5d284665 (rc=VINF_SUCCESS)
3312278.339c: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3322278.339c: '\Device\HarddiskVolume5\Windows\System32\ntdll.dll' has no imports
3332278.339c: supR3HardNtChildPurify: Done after 289 ms and 0 fixes (loop #0).
3343794.12fc: Log file opened: 6.0.10r132072 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0456300
3353794.12fc: supR3HardenedVmProcessInit: uNtDllAddr=00007ffd6b330000 g_uNtVerCombined=0xa0456300
3363794.12fc: ntdll.dll: timestamp 0xf1b8afd (rc=VINF_SUCCESS)
3372278.339c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001420000 LB 0x400000)
3383794.12fc: New simple heap: #1 0000000000f00000 LB 0x400000 (for 2019328 allocation)
3392278.339c: supR3HardNtEnableThreadCreation:
3403794.12fc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
3413794.12fc: System32: \Device\HarddiskVolume5\Windows\System32
3423794.12fc: WinSxS: \Device\HarddiskVolume5\Windows\WinSxS
3433794.12fc: KnownDllPath: C:\Windows\System32
3443794.12fc: supR3HardenedVmProcessInit: Opening vboxdrv...
3453794.12fc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3463794.12fc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3473794.12fc: Registered Dll notification callback with NTDLL.
3483794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\kernel32.dll)
3493794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\kernel32.dll
3503794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3513794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67880000 LB 0x00293000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
3523794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\KernelBase.dll)
3533794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\KernelBase.dll
3543794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6a490000 LB 0x000b3000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
3553794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3563794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a490000 'C:\Windows\System32\KERNEL32.DLL'
3573794.12fc: supR3HardenedDllNotificationCallback: load 00007ff7e6e10000 LB 0x00114000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
3583794.12fc: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3593794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3603794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
3613794.12fc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6b3a5660 pvNtTerminateThread=00007ffd6b3d01b0
3622278.339c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 76 ms.
3633794.12fc: \SystemRoot\System32\ntdll.dll:
3643794.12fc: CreationTime: 2019-07-10T07:54:24.658650100Z
3653794.12fc: LastWriteTime: 2019-07-10T07:54:24.696714300Z
3663794.12fc: ChangeTime: 2019-07-11T12:38:23.055027600Z
3673794.12fc: FileAttributes: 0x20
3683794.12fc: Size: 0x1e7008
3693794.12fc: NT Headers: 0xe0
3703794.12fc: Timestamp: 0xf1b8afd
3713794.12fc: Machine: 0x8664 - amd64
3723794.12fc: Timestamp: 0xf1b8afd
3733794.12fc: Image Version: 10.0
3743794.12fc: SizeOfImage: 0x1ed000 (2019328)
3753794.12fc: Resource Dir: 0x17d000 LB 0x6ea08
3763794.12fc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3773794.12fc: [Raw version resource data: 0x17d0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3783794.12fc: ProductName: Microsoft® Windows® Operating System
3793794.12fc: ProductVersion: 10.0.17763.592
3803794.12fc: FileVersion: 10.0.17763.592 (WinBuild.160101.0800)
3813794.12fc: FileDescription: NT Layer DLL
3823794.12fc: \SystemRoot\System32\kernel32.dll:
3833794.12fc: CreationTime: 2019-05-04T07:49:02.765059800Z
3843794.12fc: LastWriteTime: 2019-05-04T07:49:02.779043000Z
3853794.12fc: ChangeTime: 2019-07-10T07:54:46.157789800Z
3863794.12fc: FileAttributes: 0x20
3873794.12fc: Size: 0xb12c0
3883794.12fc: NT Headers: 0xe8
3893794.12fc: Timestamp: 0x250a0626
3903794.12fc: Machine: 0x8664 - amd64
3913794.12fc: Timestamp: 0x250a0626
3923794.12fc: Image Version: 10.0
3933794.12fc: SizeOfImage: 0xb3000 (733184)
3943794.12fc: Resource Dir: 0xb1000 LB 0x520
3953794.12fc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3963794.12fc: [Raw version resource data: 0xb10b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3973794.12fc: ProductName: Microsoft® Windows® Operating System
3983794.12fc: ProductVersion: 10.0.17763.475
3993794.12fc: FileVersion: 10.0.17763.475 (WinBuild.160101.0800)
4003794.12fc: FileDescription: Windows NT BASE API Client DLL
4013794.12fc: \SystemRoot\System32\KernelBase.dll:
4023794.12fc: CreationTime: 2019-07-10T07:54:24.511273200Z
4033794.12fc: LastWriteTime: 2019-07-10T07:54:24.563977900Z
4043794.12fc: ChangeTime: 2019-07-11T12:38:22.461416100Z
4053794.12fc: FileAttributes: 0x20
4063794.12fc: Size: 0x2936c8
4073794.12fc: NT Headers: 0xf8
4083794.12fc: Timestamp: 0xb6cb145b
4093794.12fc: Machine: 0x8664 - amd64
4103794.12fc: Timestamp: 0xb6cb145b
4113794.12fc: Image Version: 10.0
4123794.12fc: SizeOfImage: 0x293000 (2699264)
4133794.12fc: Resource Dir: 0x26f000 LB 0x548
4143794.12fc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4153794.12fc: [Raw version resource data: 0x26f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
4163794.12fc: ProductName: Microsoft® Windows® Operating System
4173794.12fc: ProductVersion: 10.0.17763.615
4183794.12fc: FileVersion: 10.0.17763.615 (WinBuild.160101.0800)
4193794.12fc: FileDescription: Windows NT BASE API Client DLL
4203794.12fc: \SystemRoot\System32\apisetschema.dll:
4213794.12fc: CreationTime: 2018-09-15T07:28:25.403122600Z
4223794.12fc: LastWriteTime: 2018-09-15T07:28:25.403122600Z
4233794.12fc: ChangeTime: 2019-03-16T02:27:59.199183400Z
4243794.12fc: FileAttributes: 0x20
4253794.12fc: Size: 0x1c738
4263794.12fc: NT Headers: 0xd0
4273794.12fc: Timestamp: 0x33775897
4283794.12fc: Machine: 0x8664 - amd64
4293794.12fc: Timestamp: 0x33775897
4303794.12fc: Image Version: 10.0
4313794.12fc: SizeOfImage: 0x1d000 (118784)
4323794.12fc: Resource Dir: 0x1c000 LB 0x408
4333794.12fc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
4343794.12fc: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
4353794.12fc: ProductName: Microsoft® Windows® Operating System
4363794.12fc: ProductVersion: 10.0.17763.1
4373794.12fc: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
4383794.12fc: FileDescription: ApiSet Schema DLL
4393794.12fc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
4403794.12fc: supR3HardenedWinFindAdversaries: 0x0
4413794.12fc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
4423794.12fc: Calling main()
4433794.12fc: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
4443794.12fc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox'
4453794.12fc: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4463794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4473794.12fc: SUPR3HardenedMain: Final process, opening VBoxDrv...
4483794.12fc: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000f00000 LB 0x400000)
4493794.12fc: supR3HardNtEnableThreadCreation:
4503794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4513794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4523794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4533794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4543794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd59100000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4553794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4563794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4573794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4583794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd59100000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4593794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4603794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4613794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd59100000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4623794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd59100000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4633794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4643794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
4653794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
4663794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
4673794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\wintrust.dll)
4683794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wintrust.dll
4693794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4703794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4713794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll)
4723794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll
4733794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4743794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume5\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4753794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
4763794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\crypt32.dll)
4773794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\crypt32.dll
4783794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4793794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume5\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4803794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msasn1.dll)
4813794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msasn1.dll
4823794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4833794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4843794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msvcrt.dll)
4853794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msvcrt.dll
4863794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4873794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume5\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4883794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4893794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4903794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd68f00000 LB 0x0009e000 C:\Windows\System32\msvcrt.dll [fFlags=0x0]
4913794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4923794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67330000 LB 0x00012000 C:\Windows\System32\MSASN1.dll [fFlags=0x0]
4933794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4943794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67420000 LB 0x000fa000 C:\Windows\System32\ucrtbase.dll [fFlags=0x0]
4953794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ucrtbase.dll)
4963794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll
4973794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67520000 LB 0x001db000 C:\Windows\System32\CRYPT32.dll [fFlags=0x0]
4983794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
4993794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6a9c0000 LB 0x00122000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
5003794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5013794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67b20000 LB 0x00059000 C:\Windows\System32\Wintrust.dll [fFlags=0x0]
5023794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5033794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5043794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5053794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-synch-l1-2-0'
5063794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5073794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5083794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-fibers-l1-1-1'
5093794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5103794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5113794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-fibers-l1-1-1'
5123794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5133794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5143794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-synch-l1-2-0'
5153794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67b20000 'C:\Windows\system32\Wintrust.dll'
5163794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\bcrypt.dll)
5173794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\bcrypt.dll
5183794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5193794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67850000 LB 0x00026000 C:\Windows\System32\bcrypt.dll [fFlags=0x0]
5203794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5213794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67850000 'C:\Windows\system32\bcrypt.dll'
5223794.12fc: bcrypt.dll loaded at 00007ffd67850000, BCryptOpenAlgorithmProvider at 00007ffd67854d60, preloading providers:
5233794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll)
5243794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll
5253794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5263794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67720000 LB 0x0007e000 C:\Windows\System32\bcryptprimitives.dll [fFlags=0x0]
5273794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5283794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67720000 'C:\Windows\system32\bcryptprimitives.dll'
5293794.12fc: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000014df3d0)
5303794.12fc: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000014e0130)
5313794.12fc: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000014e0430)
5323794.12fc: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000014e0730)
5333794.12fc: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000014e0a30)
5343794.12fc: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000014e0d30)
5353794.12fc: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000014e1030)
5363794.12fc: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000014e1330)
5373794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67400000 LB 0x00017000 C:\Windows\System32\CRYPTSP.dll [fFlags=0x0]
5383794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\cryptsp.dll)
5393794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\cryptsp.dll
5403794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
5413794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\rsaenh.dll)
5423794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\rsaenh.dll
5433794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5443794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
5453794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5463794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5473794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5483794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd666c0000 LB 0x00033000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
5493794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5503794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
5513794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
5523794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\cryptbase.dll)
5533794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\cryptbase.dll
5543794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd66cd0000 LB 0x0000c000 C:\Windows\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
5553794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5563794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
5573794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5583794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
5593794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5603794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5613794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a490000 'C:\Windows\System32\kernel32.dll'
5623794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5633794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5643794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67b20000 'C:\Windows\System32\WINTRUST.DLL'
5653794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5663794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5673794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\CRYPT32.dll'
5683794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6ae60000 LB 0x0001d000 C:\Windows\System32\imagehlp.dll [fFlags=0x0]
5693794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\imagehlp.dll)
5703794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\imagehlp.dll
5713794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5723794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5733794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
5743794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6a880000 LB 0x0009e000 C:\Windows\System32\sechost.dll [fFlags=0x0]
5753794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
5763794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\sechost.dll)
5773794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\sechost.dll
5783794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5793794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
5803794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\gpapi.dll)
5813794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\gpapi.dll
5823794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65fe0000 LB 0x00022000 C:\Windows\SYSTEM32\gpapi.dll [fFlags=0x0]
5833794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
5843794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67350000 LB 0x00024000 C:\Windows\System32\profapi.dll [fFlags=0x0]
5853794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\profapi.dll)
5863794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\profapi.dll
5873794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5883794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
5893794.12fc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\cryptnet.dll)
5903794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\cryptnet.dll
5913794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5923794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume5\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5933794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5943794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5953794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5963794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5973794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5983794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5993794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6023794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6053794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6063794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6073794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6083794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd5a710000 LB 0x0002f000 C:\Windows\System32\cryptnet.dll [fFlags=0x0]
6093794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6103794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6113794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6123794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6133794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6143794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6153794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6163794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6173794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6183794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6193794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6203794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6213794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6223794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6233794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6243794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6253794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6263794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6273794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6283794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6293794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6303794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6313794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6323794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6333794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6343794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6353794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6363794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6373794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6383794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6393794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6403794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a710000 'C:\Windows\System32\cryptnet.dll'
6413794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6aaf0000 LB 0x000a3000 C:\Windows\System32\advapi32.dll [fFlags=0x0]
6423794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6433794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
6443794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
6453794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\advapi32.dll)
6463794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\advapi32.dll
6473794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6483794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6493794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6503794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6513794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
6523794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume5\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
6533794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\sechost.dll [lacks WinVerifyTrust]
6543794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6553794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6563794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6573794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6583794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
6593794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6603794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6613794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
6623794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
6633794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000001d9b5d0
6643794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
6653794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=935809315388A3C16E95E94F1CFE657F79E49B98
6663794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6673794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6683794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a9c0000 'C:\Windows\System32\rpcrt4.dll'
6693794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6703794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6713794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
6723794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6733794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6743794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
6753794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_861_for_KB4507469~31bf3856ad364e35~amd64~~10.0.1.5.cat'; file='\SystemRoot\System32\ntdll.dll'
6763794.12fc: g_pfnWinVerifyTrust=00007ffd67b26370
6773794.12fc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
6783794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6793794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6803794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
6813794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6823794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6833794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
6843794.12fc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\crypt32.dll'
6853794.12fc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
6863794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6873794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6883794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
6893794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll
6903794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6913794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
6923794.12fc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\wintrust.dll'
6933794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6943794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6953794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
6963794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
6973794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\advapi32.dll'
6983794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000390 pwszName=\Device\HarddiskVolume5\Windows\System32\cryptnet.dll
6993794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
7003794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
7013794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A71FAF93E7F6555CF5752D6A603A870E378E49E6
7023794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7033794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7043794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7053794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0316~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\cryptnet.dll'
7063794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7073794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\cryptnet.dll'
7083794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7093794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7103794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7113794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\profapi.dll'
7123794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7133794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7143794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7153794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\gpapi.dll'
7163794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7173794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7183794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7193794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\sechost.dll'
7203794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7213794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7223794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7233794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\imagehlp.dll'
7243794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7253794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7263794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7273794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\cryptbase.dll'
7283794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7293794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7303794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll
7313794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7323794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7333794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\rsaenh.dll'
7343794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll
7353794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7363794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7373794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7383794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\cryptsp.dll'
7393794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7403794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7413794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll'
7423794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7433794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7443794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\bcrypt.dll'
7453794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7463794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7473794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\ucrtbase.dll'
7483794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7493794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7503794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll'
7513794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7523794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7533794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\msasn1.dll'
7543794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7553794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7563794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll'
7573794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7583794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
7593794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7603794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
7613794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7623794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7633794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\KernelBase.dll'
7643794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
7653794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
7663794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\kernel32.dll'
7673794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\system32\crypt32.dll'
7683794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xc961a49ff28ef400 OU=Created by http://www.fiddler2.com, O=DO_NOT_TRUST, CN=DO_NOT_TRUST_FiddlerRoot
7693794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
7703794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
7713794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
7723794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x38d2461d3c99ba00 CN=ws36.dmd.local
7733794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
7743794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
7753794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
7763794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
7773794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
7783794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
7793794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
7803794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
7813794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
7823794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
7833794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
7843794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
7853794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
7863794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
7873794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
7883794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
7893794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
7903794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
7913794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
7923794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
7933794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
7943794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
7953794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x2fba703484f19900 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009
7963794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
7973794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xef62113787ebace5 C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2
7983794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
7993794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
8003794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
8013794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8023794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
8033794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8043794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x73e85f1bda5faa00 C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2
8053794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
8063794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
8073794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
8083794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
8093794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
8103794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
8113794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
8123794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
8133794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
8143794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
8153794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
8163794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
8173794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x4aa818939edea200 CN=*.inworkspace.biz
8183794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x28e581f2e00dbf00 C=RU, ST=Krasnoyarsk, L=Krasnoyarsk, O=DMD, CN=*.redeye.dmdevelopment.ru, Email=support@redeye.dmdevelopment.ru
8193794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x6a6c8318d86fac00 CN=CA, DC=vsphere, DC=dmd.local, C=US, ST=California, O=dmd-vcenter.dmd.local, OU=VMware Engineering
8203794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x99994fa1f6c7f500 DC=local, DC=dmd, CN=dmd-DMD-MAIL-CA
8213794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x1adfdfc73b4caf00 C=RU, ST=Krasnoyarsk, L=Krasnoyarsk, O=DMD, CN=dmdevelopment.ru
8223794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x99994fa1f6c7f500 DC=local, DC=dmd, CN=dmd-DMD-MAIL-CA
8233794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0x8b656493ee74cd00 DC=local, DC=dmd, CN=dmd-DMD-CA-CA
8243794.12fc: supR3HardenedWinIsDesiredRootCA: Adding 0xfdc6dcbf3d5e8f00 DC=local, DC=dmd, CN=dmd-DMD-CA-CA
8253794.12fc: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=57
8263794.12fc: SUPR3HardenedMain: Load Runtime...
8273794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
8283794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8293794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
8303794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
8313794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
8323794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
8333794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8343794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8353794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8363794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
8373794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
8383794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
8393794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ws2_32.dll) WinVerifyTrust
8403794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
8413794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8423794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8433794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll
8443794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8453794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8463794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8473794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8483794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll
8493794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
8503794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8513794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
8523794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
8533794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8543794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8553794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8563794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8573794.12fc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8583794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll)
8593794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll
8603794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
8613794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
8623794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
8633794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8643794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8653794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
8663794.12fc: supR3HardenedDllNotificationCallback: load 0000000068750000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
8673794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8683794.12fc: supR3HardenedDllNotificationCallback: load 0000000067bd0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
8693794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
8703794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6aba0000 LB 0x0006d000 C:\Windows\System32\WS2_32.dll [fFlags=0x0]
8713794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
8723794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd06920000 LB 0x005e0000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
8733794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8743794.12fc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8753794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
8763794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8773794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8783794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8793794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8803794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8813794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8823794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8833794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8843794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8853794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8863794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8873794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8883794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8893794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8903794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8913794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
8923794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8933794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8943794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8953794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8963794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8973794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8983794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8993794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9003794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9013794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
9023794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9033794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9043794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9053794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9063794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9073794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9083794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9093794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9103794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9113794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9123794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9133794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9143794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9153794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9163794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9173794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9183794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9193794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll
9203794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9213794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9223794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9233794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9243794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06920000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9253794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wintrust.dll
9263794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9273794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67b20000 'C:\Windows\system32\Wintrust.dll'
9283794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
9293794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
9303794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll
9313794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9323794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
9333794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
9343794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\system32\crypt32.dll'
9353794.12fc: SUPR3HardenedMain: Load TrustedMain...
9363794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
9373794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
9383794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxglobal.dll'.
9393794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
9403794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
9413794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
9423794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
9433794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
9443794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
9453794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
9463794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
9473794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
9483794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
9493794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
9503794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
9513794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
9523794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
9533794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume5\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
9543794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
9553794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
9563794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
9573794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
9583794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\winmm.dll) WinVerifyTrust
9593794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\winmm.dll
9603794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
9613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
9623794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9633794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9643794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll
9653794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9663794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume5\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9673794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\winmmbase.dll'.
9683794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9693794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\winmmbase.dll)
9703794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\winmmbase.dll
9713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9723794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9733794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll
9743794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
9753794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll
9763794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9773794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
9783794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
9793794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
9803794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
9813794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\oleaut32.dll) WinVerifyTrust
9823794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
9833794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
9843794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
9853794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9863794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9873794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll
9883794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9893794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9903794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\combase.dll'.
9913794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9923794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'bcryptprimitives.dll'.
9933794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\combase.dll)
9943794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\combase.dll
9953794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9963794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9973794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll'.
9983794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll)
9993794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll
10003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
10013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
10023794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll
10033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10053794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
10063794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
10073794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'rpcrt4.dll'.
10083794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'gdi32.dll'.
10093794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'user32.dll'.
10103794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'combase.dll'.
10113794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ole32.dll) WinVerifyTrust
10123794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ole32.dll
10133794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10143794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10153794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10163794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10173794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust]
10183794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10193794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10203794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\user32.dll'.
10213794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10223794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
10233794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\user32.dll)
10243794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\user32.dll
10253794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10263794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10273794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\gdi32.dll'.
10283794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\gdi32.dll)
10293794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\gdi32.dll
10303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10313794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10323794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10333794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10343794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10353794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10363794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10373794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\win32u.dll'.
10383794.12fc: '\Device\HarddiskVolume5\Windows\System32\win32u.dll' has no imports
10393794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\win32u.dll)
10403794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\win32u.dll
10413794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
10423794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
10433794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10443794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
10453794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\user32.dll) WinVerifyTrust
10463794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
10473794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
10483794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10493794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10503794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10513794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10523794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10533794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust]
10543794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
10553794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
10563794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
10573794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
10583794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
10593794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
10603794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
10613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
10623794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
10633794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10643794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10653794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10663794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10673794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10683794.12fc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
10693794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
10703794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
10713794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
10723794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
10733794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
10743794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
10753794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
10763794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
10773794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
10783794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
10793794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10803794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10813794.12fc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
10823794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
10833794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
10843794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
10853794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
10863794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
10873794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
10883794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
10893794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
10903794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
10913794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
10923794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
10933794.12fc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
10943794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
10953794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
10963794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
10973794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
10983794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
10993794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11003794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11013794.12fc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
11023794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
11033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11053794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11063794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11073794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11083794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
11093794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11103794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11113794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\shell32.dll'.
11123794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11133794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'user32.dll'.
11143794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'gdi32.dll'.
11153794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\shell32.dll)
11163794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\shell32.dll
11173794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11183794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11193794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11203794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11213794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11223794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
11233794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11243794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11253794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
11263794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11273794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11283794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11293794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11313794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11323794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11333794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11343794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
11353794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11363794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11373794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11383794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11393794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11403794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
11413794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11423794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11433794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11443794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
11453794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume5\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
11463794.12fc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume5\Windows\System32\opengl32.dll'.
11473794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11483794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
11493794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11503794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
11513794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
11523794.12fc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\opengl32.dll)
11533794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\opengl32.dll
11543794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11553794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11563794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
11573794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11583794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11593794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11603794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11623794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
11633794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
11643794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume5\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
11653794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\mpr.dll'.
11663794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\mpr.dll)
11673794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\mpr.dll
11683794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
11693794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
11703794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
11713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11723794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11733794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
11743794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11753794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11763794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
11773794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11783794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11793794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11803794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11813794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11823794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
11833794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
11843794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume5\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
11853794.12fc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume5\Windows\System32\glu32.dll'.
11863794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11873794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
11883794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
11893794.12fc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\glu32.dll)
11903794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\glu32.dll
11913794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11923794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11933794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11943794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11953794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11963794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
11973794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11983794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11993794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
12003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12023794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll
12033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12053794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12063794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12073794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12083794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
12093794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12103794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12113794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll
12123794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12133794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume5\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12143794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
12153794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12163794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12173794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
12183794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12193794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12203794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
12213794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12223794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12233794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
12243794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
12253794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
12263794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
12273794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
12283794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
12293794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12313794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
12323794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12333794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12343794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12353794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12363794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12373794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
12383794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12393794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12403794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust]
12413794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12423794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12433794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
12443794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12453794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12463794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
12473794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12483794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12493794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
12503794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12513794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12523794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12533794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
12543794.12fc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
12553794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12563794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12573794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
12583794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
12593794.12fc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
12603794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12623794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [redoing WinVerifyTrust]
12633794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
12643794.12fc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll'
12653794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12663794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12673794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
12683794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
12693794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
12703794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxglobal.dll'...
12713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxglobal.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxglobal.dll' [rcNtRedir=0xc0150008]
12723794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
12733794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
12743794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
12753794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12763794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
12773794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
12783794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
12793794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
12803794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
12813794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
12823794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
12833794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGlobal.dll) WinVerifyTrust
12843794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
12853794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12863794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume5\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12873794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
12883794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000052c pwszName=\Device\HarddiskVolume5\Windows\System32\opengl32.dll
12893794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
12903794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
12913794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F9EA7A084F8D34EE062D8C0EF5D96EF865883D56
12923794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12933794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12943794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12953794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12963794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
12973794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12983794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12993794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
13003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13023794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
13033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13053794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust]
13063794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13073794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13083794.12fc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
13093794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13103794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13113794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13123794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13133794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13143794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13153794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13163794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13173794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13183794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13193794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
13203794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
13213794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0112~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\opengl32.dll'
13223794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13233794.12fc: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\opengl32.dll'
13243794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
13253794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
13263794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll
13273794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
13283794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13293794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13303794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
13313794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
13323794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll
13333794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
13343794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
13353794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
13363794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67700000 LB 0x00020000 C:\Windows\System32\win32u.dll [fFlags=0x0]
13373794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
13383794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd684c0000 LB 0x000a0000 C:\Windows\System32\msvcp_win.dll [fFlags=0x0]
13393794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
13403794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd68320000 LB 0x00199000 C:\Windows\System32\gdi32full.dll [fFlags=0x0]
13413794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
13423794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
13433794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
13443794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
13453794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\gdi32full.dll)
13463794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\gdi32full.dll
13473794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6b270000 LB 0x00029000 C:\Windows\System32\GDI32.dll [fFlags=0x0]
13483794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
13493794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6a550000 LB 0x00197000 C:\Windows\System32\USER32.dll [fFlags=0x0]
13503794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [avoiding WinVerifyTrust]
13513794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd3a750000 LB 0x0002c000 C:\Windows\SYSTEM32\GLU32.dll [fFlags=0x0]
13523794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
13533794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd395e0000 LB 0x00127000 C:\Windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
13543794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll
13553794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd682d0000 LB 0x0004a000 C:\Windows\System32\cfgmgr32.dll [fFlags=0x0]
13563794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll)
13573794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll
13583794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd68bd0000 LB 0x0032c000 C:\Windows\System32\combase.dll [fFlags=0x0]
13593794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [avoiding WinVerifyTrust]
13603794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6ac10000 LB 0x000a8000 C:\Windows\System32\shcore.dll [fFlags=0x0]
13613794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13623794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
13633794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
13643794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\SHCore.dll)
13653794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\SHCore.dll
13663794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd673a0000 LB 0x0005d000 C:\Windows\System32\powrprof.dll [fFlags=0x0]
13673794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
13683794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\powrprof.dll)
13693794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\powrprof.dll
13703794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6b2a0000 LB 0x00052000 C:\Windows\System32\shlwapi.dll [fFlags=0x0]
13713794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
13723794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
13733794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
13743794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\shlwapi.dll)
13753794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\shlwapi.dll
13763794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67380000 LB 0x00011000 C:\Windows\System32\kernel.appcore.dll [fFlags=0x0]
13773794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
13783794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
13793794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll)
13803794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll
13813794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67b80000 LB 0x0074a000 C:\Windows\System32\windows.storage.dll [fFlags=0x0]
13823794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
13833794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
13843794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
13853794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
13863794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\windows.storage.dll)
13873794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\windows.storage.dll
13883794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd68fa0000 LB 0x014f0000 C:\Windows\System32\SHELL32.dll [fFlags=0x0]
13893794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
13903794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd68560000 LB 0x00155000 C:\Windows\System32\ole32.dll [fFlags=0x0]
13913794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
13923794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd57990000 LB 0x0001b000 C:\Windows\SYSTEM32\MPR.dll [fFlags=0x0]
13933794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
13943794.12fc: supR3HardenedDllNotificationCallback: load 00000000681e0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
13953794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13963794.12fc: supR3HardenedDllNotificationCallback: load 00007ffcfab30000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
13973794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13983794.12fc: supR3HardenedDllNotificationCallback: load 0000000067c70000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
13993794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
14003794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6ae80000 LB 0x000c4000 C:\Windows\System32\OLEAUT32.dll [fFlags=0x0]
14013794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
14023794.12fc: supR3HardenedDllNotificationCallback: load 00007ffcfb130000 LB 0x02387000 C:\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [fFlags=0x0]
14033794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
14043794.12fc: supR3HardenedDllNotificationCallback: load 0000000061570000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
14053794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
14063794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65130000 LB 0x0002d000 C:\Windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
14073794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14083794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65160000 LB 0x00024000 C:\Windows\SYSTEM32\WINMM.dll [fFlags=0x0]
14093794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll
14103794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd32b10000 LB 0x00188000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
14113794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
14123794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\windows.storage.dll'.
14133794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\windows.storage.dll' [rescheduled]
14143794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll'.
14153794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll' [rescheduled]
14163794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\shlwapi.dll'.
14173794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\shlwapi.dll' [rescheduled]
14183794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\powrprof.dll'.
14193794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\powrprof.dll' [rescheduled]
14203794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\SHCore.dll'.
14213794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\SHCore.dll' [rescheduled]
14223794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll'.
14233794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll' [rescheduled]
14243794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\gdi32full.dll'.
14253794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\gdi32full.dll' [rescheduled]
14263794.12fc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume5\Windows\System32\glu32.dll'.
14273794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\glu32.dll' [rescheduled]
14283794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\mpr.dll'.
14293794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\mpr.dll' [rescheduled]
14303794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\shell32.dll'.
14313794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rescheduled]
14323794.12fc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
14333794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
14343794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\win32u.dll'.
14353794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rescheduled]
14363794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\gdi32.dll'.
14373794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rescheduled]
14383794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\user32.dll'.
14393794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rescheduled]
14403794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll'.
14413794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rescheduled]
14423794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\combase.dll'.
14433794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rescheduled]
14443794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\winmmbase.dll'.
14453794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\winmmbase.dll' [rescheduled]
14463794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll
14473794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
14483794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
14493794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\profapi.dll
14503794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14513794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14523794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14533794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14543794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
14553794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll'.
14563794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll
14573794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14583794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14593794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [redoing WinVerifyTrust]
14603794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\combase.dll'.
14613794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\combase.dll
14623794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14633794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14643794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14653794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14663794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14673794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14683794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [redoing WinVerifyTrust]
14693794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\user32.dll'.
14703794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\user32.dll
14713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14723794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14733794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
14743794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\gdi32.dll'.
14753794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\gdi32.dll
14763794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14773794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14783794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14793794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14803794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14813794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14823794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [redoing WinVerifyTrust]
14833794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\combase.dll'.
14843794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\combase.dll
14853794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14863794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14873794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14883794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14893794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
14903794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
14913794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [redoing WinVerifyTrust]
14923794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\win32u.dll'.
14933794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\win32u.dll
14943794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14953794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14963794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [redoing WinVerifyTrust]
14973794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\user32.dll'.
14983794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\user32.dll
14993794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15013794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15023794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\gdi32.dll'.
15033794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\gdi32.dll
15043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
15053794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
15063794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
15073794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll'.
15083794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll
15093794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15103794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a490000 'C:\Windows\System32\kernel32.dll'
15113794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
15123794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15133794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-string-l1-1-0'
15143794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
15153794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15163794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-localization-l1-2-1'
15173794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
15183794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15193794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-datetime-l1-1-1'
15203794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
15213794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15223794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-localization-obsolete-l1-2-0'
15233794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\imm32.dll'.
15243794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
15253794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
15263794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\imm32.dll)
15273794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\imm32.dll
15283794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
15293794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
15303794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [redoing WinVerifyTrust]
15313794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\win32u.dll'.
15323794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\win32u.dll
15333794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15343794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15353794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [redoing WinVerifyTrust]
15363794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\user32.dll'.
15373794.12fc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume5\Windows\System32\user32.dll
15383794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
15393794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd68ba0000 LB 0x0002e000 C:\Windows\System32\IMM32.DLL [fFlags=0x0]
15403794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
15413794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68ba0000 'C:\Windows\system32\IMM32.DLL'
15423794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\imm32.dll'.
15433794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\imm32.dll' [rescheduled]
15443794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
15453794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15463794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6aaf0000 'C:\Windows\System32\ADVAPI32.DLL'
15473794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd32b10000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
15483794.12fc: SUPR3HardenedMain: Calling TrustedMain (00007ffd32b116c0)...
15493794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
15503794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
15513794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
15523794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
15533794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
15543794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
15553794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
15563794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
15573794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15583794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
15593794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
15603794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
15613794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
15623794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
15633794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15643794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15653794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15663794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15673794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15683794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15693794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15703794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15723794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15733794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
15743794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
15753794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
15763794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [redoing WinVerifyTrust]
15773794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
15783794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
15793794.12fc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\shell32.dll'
15803794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15813794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15823794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
15833794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
15843794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume5\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
15853794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll
15863794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
15873794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume5\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
15883794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\imm32.dll [redoing WinVerifyTrust]
15893794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
15903794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
15913794.12fc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\imm32.dll'
15923794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15933794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15943794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [redoing WinVerifyTrust]
15953794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
15963794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
15973794.12fc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\user32.dll'
15983794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15993794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
16003794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
16013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16023794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16033794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16043794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
16053794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
16063794.12fc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\gdi32.dll'
16073794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16083794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16093794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd55c30000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
16103794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16113794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd55c30000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
16123794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000630 pwszName=\Device\HarddiskVolume5\Windows\System32\uxtheme.dll
16133794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
16143794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
16153794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9E9C9DBAFB6FF286F236C72F471A61F524EAC54D
16163794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
16173794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
16183794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0315~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\uxtheme.dll'
16193794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
16203794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16213794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
16223794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
16233794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\uxtheme.dll) WinVerifyTrust
16243794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\uxtheme.dll
16253794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16263794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16273794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16283794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16293794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16313794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16323794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\uxtheme.dll
16333794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65510000 LB 0x0009c000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
16343794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\uxtheme.dll
16353794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd65510000 'C:\Windows\system32\uxtheme.dll'
16363794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a550000 'C:\Windows\system32\user32.dll'
16373794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll
16383794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16393794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68fa0000 'C:\Windows\system32\shell32.dll'
16403794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\SHCore.dll [redoing WinVerifyTrust]
16413794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
16423794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
16433794.12fc: supR3HardenedScreenImage/LdrLoadDll: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\SHCore.dll'
16443794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16453794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6ac10000 'C:\Windows\system32\SHCore.dll'
16463794.12fc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
16473794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Windows\system32\wintab32.dll'
16483794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16493794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'crypt32.dll'.
16503794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'cryptsp.dll'.
16513794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'win32u.dll'.
16523794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'user32.dll'.
16533794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'gdi32.dll'.
16543794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\dwmapi.dll)
16553794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\dwmapi.dll
16563794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65810000 LB 0x0002e000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
16573794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dwmapi.dll [avoiding WinVerifyTrust]
16583794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16593794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16603794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16623794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll
16633794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16643794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16653794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust]
16663794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cryptsp.dll'...
16673794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'cryptsp.dll' -> '\Device\HarddiskVolume5\Windows\System32\cryptsp.dll' [rcNtRedir=0xc0150008]
16683794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\cryptsp.dll
16693794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
16703794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume5\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
16713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16723794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16733794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
16743794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
16753794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\dwmapi.dll'
16763794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll
16773794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16783794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd65160000 'C:\Windows\system32\winmm.dll'
16793794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll
16803794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16813794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd65160000 'C:\Windows\system32\winmm.dll'
16823794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll
16833794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16843794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68fa0000 'C:\Windows\system32\shell32.dll'
16853794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\uxtheme.dll
16863794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16873794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd65510000 'C:\Windows\system32\uxtheme.dll'
16883794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
16893794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16903794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6aaf0000 'C:\Windows\system32\advapi32.dll'
16913794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
16923794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
16933794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
16943794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'profapi.dll'.
16953794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\userenv.dll) WinVerifyTrust
16963794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\userenv.dll
16973794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
16983794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
16993794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\profapi.dll
17003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17023794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll
17033794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17043794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\userenv.dll
17053794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd67260000 LB 0x00028000 C:\Windows\system32\userenv.dll [fFlags=0x0]
17063794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\userenv.dll
17073794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67260000 'C:\Windows\system32\userenv.dll'
17083794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll
17093794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17103794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a490000 'C:\Windows\System32\kernel32.dll'
17113794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6ad30000 LB 0x000a2000 C:\Windows\System32\clbcatq.dll [fFlags=0x0]
17123794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17133794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
17143794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\clbcatq.dll)
17153794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\clbcatq.dll
17163794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17173794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17183794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17193794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17203794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17213794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
17223794.440: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\clbcatq.dll'
17233794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17243794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
17253794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
17263794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
17273794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
17283794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
17293794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
17303794.440: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
17313794.440: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxC.dll
17323794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
17333794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
17343794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
17353794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
17363794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
17373794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
17383794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
17393794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
17403794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
17413794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
17423794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
17433794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
17443794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
17453794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll
17463794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
17473794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
17483794.440: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
17493794.440: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxC.dll
17503794.440: supR3HardenedDllNotificationCallback: load 00007ffd53e90000 LB 0x003a4000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
17513794.440: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxC.dll
17523794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd53e90000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
17533794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17543794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
17553794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
17563794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
17573794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
17583794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
17593794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
17603794.440: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
17613794.440: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
17623794.440: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
17633794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17643794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17653794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
17663794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
17673794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
17683794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
17693794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
17703794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
17713794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
17723794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
17733794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shlwapi.dll [redoing WinVerifyTrust]
17743794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17753794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
17763794.440: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\shlwapi.dll'
17773794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
17783794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
17793794.440: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll
17803794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
17813794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
17823794.440: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
17833794.440: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
17843794.440: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
17853794.440: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
17863794.440: supR3HardenedDllNotificationCallback: load 00007ffd58c80000 LB 0x000d5000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
17873794.440: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
17883794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd58c80000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
17893794.440: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
17903794.440: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
17913794.440: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6ae80000 'C:\Windows\System32\oleaut32.dll'
17923794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b270000 'C:\Windows\system32\gdi32.dll'
17933794.22a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17943794.22a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17953794.22a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
17963794.22a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
17973794.22a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
17983794.22a0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
17993794.22a0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
18003794.22a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18013794.22a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18023794.22a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
18033794.22a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
18043794.22a0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18053794.22a0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
18063794.22a0: supR3HardenedDllNotificationCallback: load 00007ffd590f0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
18073794.22a0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
18083794.22a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd590f0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
18093794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll
18103794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18113794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68fa0000 'C:\Windows\system32\shell32.dll'
18123794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd6af50000 LB 0x0016b000 C:\Windows\System32\MSCTF.dll [fFlags=0x0]
18133794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18143794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
18153794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
18163794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
18173794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
18183794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msctf.dll)
18193794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msctf.dll
18203794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
18213794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume5\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
18223794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\imm32.dll
18233794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
18243794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
18253794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18263794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
18273794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18283794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18293794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
18303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18313794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18323794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll
18333794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
18343794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
18353794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\msctf.dll'
18363794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009ac pwszName=\Device\HarddiskVolume5\Windows\System32\DataExchange.dll
18373794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
18383794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
18393794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=59F3AE35C1BD7FF73B733C35DF45575279B981AF
18403794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
18413794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
18423794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0310~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\DataExchange.dll'
18433794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
18443794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18453794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
18463794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'combase.dll'.
18473794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'd3d11.dll'.
18483794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'dcomp.dll'.
18493794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\DataExchange.dll) WinVerifyTrust
18503794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\DataExchange.dll
18513794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
18523794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume5\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
18533794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
18543794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
18553794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
18563794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
18573794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'oleaut32.dll'.
18583794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dxgi.dll'.
18593794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\dcomp.dll) WinVerifyTrust
18603794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\dcomp.dll
18613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
18623794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume5\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
18633794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rsaenh.dll
18643794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
18653794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume5\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
18663794.12fc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\dxgi.dll'.
18673794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18683794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
18693794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\dxgi.dll)
18703794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\dxgi.dll
18713794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18723794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18733794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll
18743794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
18753794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
18763794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
18773794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
18783794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
18793794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust]
18803794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
18813794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
18823794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust]
18833794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18843794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18853794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18863794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
18873794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
18883794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18893794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
18903794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
18913794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\d3d11.dll) WinVerifyTrust
18923794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\d3d11.dll
18933794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
18943794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
18953794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [redoing WinVerifyTrust]
18963794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
18973794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
18983794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust]
18993794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
19003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume5\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
19013794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
19023794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19043794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
19053794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
19063794.12fc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\combase.dll'
19073794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
19083794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume5\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
19093794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\SHCore.dll
19103794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19113794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19123794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
19133794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\DataExchange.dll
19143794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\d3d11.dll
19153794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dcomp.dll
19163794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dxgi.dll [avoiding WinVerifyTrust]
19173794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd66090000 LB 0x000c2000 C:\Windows\system32\dxgi.dll [fFlags=0x0]
19183794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dxgi.dll [avoiding WinVerifyTrust]
19193794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd63d30000 LB 0x0027e000 C:\Windows\system32\d3d11.dll [fFlags=0x0]
19203794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\d3d11.dll
19213794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd64570000 LB 0x001c3000 C:\Windows\system32\dcomp.dll [fFlags=0x0]
19223794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dcomp.dll
19233794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd3b9b0000 LB 0x00056000 C:\Windows\system32\dataexchange.dll [fFlags=0x0]
19243794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\DataExchange.dll
19253794.12fc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\dxgi.dll'.
19263794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume5\Windows\System32\dxgi.dll' [rescheduled]
19273794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll
19283794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19293794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b270000 'C:\Windows\System32\gdi32.dll'
19303794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3b9b0000 'C:\Windows\system32\dataexchange.dll'
19313794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
19323794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'rpcrt4.dll'.
19333794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
19343794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'msvcp_win.dll'.
19353794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll)
19363794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll
19373794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19383794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
19393794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\rmclient.dll)
19403794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\rmclient.dll
19413794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65840000 LB 0x00028000 C:\Windows\system32\RMCLIENT.dll [fFlags=0x0]
19423794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
19433794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd65600000 LB 0x0020d000 C:\Windows\system32\twinapi.appcore.dll [fFlags=0x0]
19443794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
19453794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19463794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
19473794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19483794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19493794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
19503794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
19513794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
19523794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
19533794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
19543794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll
19553794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19563794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
19573794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
19583794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume5\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
19593794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
19603794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
19613794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
19623794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\rmclient.dll'
19633794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
19643794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
19653794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll'
19663794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\SHCore.dll
19673794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19683794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6ac10000 'C:\Windows\system32\Shcore.dll'
19693794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19703794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
19713794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
19723794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
19733794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll)
19743794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll
19753794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19763794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
19773794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
19783794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll)
19793794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll
19803794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19813794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
19823794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll)
19833794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll
19843794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ntmarta.dll)
19853794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ntmarta.dll
19863794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
19873794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
19883794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'bcryptprimitives.dll'.
19893794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\WinTypes.dll)
19903794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\WinTypes.dll
19913794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd66340000 LB 0x00031000 C:\Windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
19923794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
19933794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd64790000 LB 0x000e2000 C:\Windows\System32\CoreMessaging.dll [fFlags=0x0]
19943794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
19953794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd62660000 LB 0x00153000 C:\Windows\SYSTEM32\wintypes.dll [fFlags=0x0]
19963794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
19973794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd62800000 LB 0x00322000 C:\Windows\System32\CoreUIComponents.dll [fFlags=0x0]
19983794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
19993794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd62c10000 LB 0x00095000 C:\Windows\System32\TextInputFramework.dll [fFlags=0x0]
20003794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
20013794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
20023794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
20033794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll
20043794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20053794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20063794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20073794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20083794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll
20093794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20103794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20113794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20123794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20133794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
20143794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume5\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
20153794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\SHCore.dll
20163794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
20173794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume5\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
20183794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
20193794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20203794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20213794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
20223794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume5\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
20233794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
20243794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
20253794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume5\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
20263794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
20273794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20283794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20293794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20313794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20323794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20333794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\WinTypes.dll'
20343794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20353794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20363794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\ntmarta.dll'
20373794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20383794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20393794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll'
20403794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20413794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20423794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll'
20433794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20443794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20453794.12fc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll'
20463794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
20473794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20483794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a550000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
20493794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
20503794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20513794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a550000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
20523794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
20533794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20543794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68bd0000 'api-ms-win-core-com-l1-1-0.dll'
20553794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msctf.dll
20563794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
20573794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6af50000 'C:\Windows\System32\MSCTF.dll'
20583794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll
20593794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20603794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68fa0000 'C:\Windows\system32\shell32.dll'
20613794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68fa0000 'C:\Windows\system32\shell32.dll'
20623794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll
20633794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20643794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68560000 'C:\Windows\System32\ole32.dll'
20653794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6ae80000 'C:\Windows\System32\OLEAUT32.dll'
20663794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b30 pwszName=\Device\HarddiskVolume5\Windows\System32\wbem\wbemprox.dll
20673794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
20683794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
20693794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=61B08AF50BF6163BDE34EB0C9B6605297BA2441A
20703794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20713794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20723794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_680_for_KB4507469~31bf3856ad364e35~amd64~~10.0.1.5.cat'; file='\Device\HarddiskVolume5\Windows\System32\wbem\wbemprox.dll'
20733794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20743794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20753794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
20763794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
20773794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
20783794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wbem\wbemprox.dll
20793794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
20803794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume5\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
20813794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b3c pwszName=\Device\HarddiskVolume5\Windows\System32\wbemcomn.dll
20823794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
20833794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
20843794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=585E55607969886FF9DCECA6C86E3FD6D59F65D2
20853794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
20863794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
20873794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\wbemcomn.dll'
20883794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20893794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20903794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
20913794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
20923794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\wbemcomn.dll) WinVerifyTrust
20933794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wbemcomn.dll
20943794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
20953794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
20963794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
20973794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20983794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20993794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21003794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
21013794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
21023794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
21033794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
21043794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcrypt.dll
21053794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21063794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21073794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21083794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbem\wbemprox.dll
21093794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbemcomn.dll
21103794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd5aa50000 LB 0x00085000 C:\Windows\SYSTEM32\wbemcomn.dll [fFlags=0x0]
21113794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbemcomn.dll
21123794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd5a5a0000 LB 0x00011000 C:\Windows\system32\wbem\wbemprox.dll [fFlags=0x0]
21133794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbem\wbemprox.dll
21143794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
21153794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21163794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
21173794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a5a0000 'C:\Windows\system32\wbem\wbemprox.dll'
21183794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a3c pwszName=\Device\HarddiskVolume5\Windows\System32\wbem\wbemsvc.dll
21193794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
21203794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
21213794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2479751D59078C3499423233D67A94D93457E663
21223794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
21233794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
21243794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_680_for_KB4507469~31bf3856ad364e35~amd64~~10.0.1.5.cat'; file='\Device\HarddiskVolume5\Windows\System32\wbem\wbemsvc.dll'
21253794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21263794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21273794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
21283794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
21293794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wbem\wbemsvc.dll
21303794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21313794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21323794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21333794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21343794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21353794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbem\wbemsvc.dll
21363794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd59ee0000 LB 0x00014000 C:\Windows\system32\wbem\wbemsvc.dll [fFlags=0x0]
21373794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbem\wbemsvc.dll
21383794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd59ee0000 'C:\Windows\system32\wbem\wbemsvc.dll'
21393794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
21403794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21413794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-localization-l1-2-0.dll'
21423794.12fc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
21433794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21443794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67880000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
21453794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000984 pwszName=\Device\HarddiskVolume5\Windows\System32\wbem\fastprox.dll
21463794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
21473794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
21483794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5D738E4890595C8890290239456518F354997BFD
21493794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
21503794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
21513794.12fc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\wbem\fastprox.dll'
21523794.12fc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21533794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21543794.12fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'wbemcomn.dll'.
21553794.12fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
21563794.12fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wbem\fastprox.dll
21573794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
21583794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume5\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
21593794.12fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbemcomn.dll
21603794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21613794.12fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21623794.12fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21633794.12fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbem\fastprox.dll
21643794.12fc: supR3HardenedDllNotificationCallback: load 00007ffd59f00000 LB 0x000f1000 C:\Windows\system32\wbem\fastprox.dll [fFlags=0x0]
21653794.12fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wbem\fastprox.dll
21663794.12fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd59f00000 'C:\Windows\system32\wbem\fastprox.dll'
21673794.e0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
21683794.e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21693794.e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
21703794.e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
21713794.e0c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
21723794.e0c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
21733794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21743794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21753794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
21763794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
21773794.e0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
21783794.e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
21793794.e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
21803794.e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
21813794.e0c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxREM.dll) WinVerifyTrust
21823794.e0c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxREM.dll
21833794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21843794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
21853794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21863794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21873794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
21883794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
21893794.e0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
21903794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21913794.e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21923794.e0c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21933794.e0c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
21943794.e0c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxREM.dll
21953794.e0c: supR3HardenedDllNotificationCallback: load 0000000061460000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
21963794.e0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxREM.dll
21973794.e0c: supR3HardenedDllNotificationCallback: load 00007ffd06190000 LB 0x00331000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
21983794.e0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
21993794.e0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06190000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
22003794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22013794.53c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cc8 pwszName=\Device\HarddiskVolume5\Windows\System32\NetSetupShim.dll
22023794.53c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
22033794.53c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
22043794.53c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CC61036AB838E0B96E969BECC28E9A5C4950ECB5
22053794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22063794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
22073794.53c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_638_for_KB4503327~31bf3856ad364e35~amd64~~10.0.1.7.cat'; file='\Device\HarddiskVolume5\Windows\System32\NetSetupShim.dll'
22083794.53c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22093794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
22103794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
22113794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'oleaut32.dll'.
22123794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'ws2_32.dll'.
22133794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'netsetupapi.dll'.
22143794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'setupapi.dll'.
22153794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'devrtl.dll'.
22163794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\NetSetupShim.dll) WinVerifyTrust
22173794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\NetSetupShim.dll
22183794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devrtl.dll'...
22193794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devrtl.dll' -> '\Device\HarddiskVolume5\Windows\System32\devrtl.dll' [rcNtRedir=0xc0150008]
22203794.53c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cdc pwszName=\Device\HarddiskVolume5\Windows\System32\devrtl.dll
22213794.53c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
22223794.53c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
22233794.53c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9620C5F1DBCEC911C088602DD5FE1F576B1B6DD9
22243794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22253794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\crypt32.dll
22263794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22273794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
22283794.53c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0316~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\devrtl.dll'
22293794.53c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22303794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\devrtl.dll) WinVerifyTrust
22313794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\devrtl.dll
22323794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
22333794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
22343794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22353794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
22363794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22373794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
22383794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'cfgmgr32.dll'.
22393794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
22403794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\setupapi.dll) WinVerifyTrust
22413794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\setupapi.dll
22423794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netsetupapi.dll'...
22433794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'netsetupapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\netsetupapi.dll' [rcNtRedir=0xc0150008]
22443794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
22453794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
22463794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcrypt.dll
22473794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
22483794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
22493794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
22503794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22513794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22523794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22533794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22543794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22553794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
22563794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22573794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
22583794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\NetSetupApi.dll) WinVerifyTrust
22593794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\NetSetupApi.dll
22603794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
22613794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
22623794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
22633794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22643794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22653794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22663794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22673794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
22683794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
22693794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
22703794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22713794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22723794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22733794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22743794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22753794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
22763794.53c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll'
22773794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupShim.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22783794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\NetSetupShim.dll
22793794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\NetSetupApi.dll
22803794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\devrtl.dll
22813794.53c: supR3HardenedDllNotificationCallback: load 00007ffd5b1c0000 LB 0x00025000 C:\Windows\System32\NetSetupApi.dll [fFlags=0x0]
22823794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\NetSetupApi.dll
22833794.53c: supR3HardenedDllNotificationCallback: load 00007ffd686c0000 LB 0x00476000 C:\Windows\System32\setupapi.dll [fFlags=0x0]
22843794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\setupapi.dll
22853794.53c: supR3HardenedDllNotificationCallback: load 00007ffd64e30000 LB 0x00013000 C:\Windows\System32\DEVRTL.dll [fFlags=0x0]
22863794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\devrtl.dll
22873794.53c: supR3HardenedDllNotificationCallback: load 00007ffd54860000 LB 0x00081000 C:\Windows\System32\NetSetupShim.dll [fFlags=0x0]
22883794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\NetSetupShim.dll
22893794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd54860000 'C:\Windows\System32\NetSetupShim.dll'
22903794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
22913794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
22923794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22933794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
22943794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'nsi.dll'.
22953794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'winnsi.dll'.
22963794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\NetSetupEngine.dll) WinVerifyTrust
22973794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\NetSetupEngine.dll
22983794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
22993794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume5\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
23003794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
23013794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
23023794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
23033794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
23043794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\winnsi.dll) WinVerifyTrust
23053794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\winnsi.dll
23063794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
23073794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume5\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
23083794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
23093794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume5\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
23103794.53c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume5\Windows\System32\nsi.dll'.
23113794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\nsi.dll)
23123794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\nsi.dll
23133794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23143794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23153794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
23163794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
23173794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\nsi.dll) WinVerifyTrust
23183794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23193794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23203794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23213794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23223794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupEngine.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23233794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\NetSetupEngine.dll
23243794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winnsi.dll
23253794.53c: supR3HardenedDllNotificationCallback: load 00007ffd6a9b0000 LB 0x00008000 C:\Windows\System32\NSI.dll [fFlags=0x0]
23263794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\nsi.dll [avoiding WinVerifyTrust]
23273794.53c: supR3HardenedDllNotificationCallback: load 00007ffd630a0000 LB 0x0000b000 C:\Windows\SYSTEM32\WINNSI.DLL [fFlags=0x0]
23283794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winnsi.dll
23293794.53c: supR3HardenedDllNotificationCallback: load 00007ffd48da0000 LB 0x000cd000 C:\Windows\System32\NetSetupEngine.dll [fFlags=0x0]
23303794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\NetSetupEngine.dll
23313794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd48da0000 'C:\Windows\System32\NetSetupEngine.dll'
23323794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
23333794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
23343794.53c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume5\Windows\System32\nsi.dll'
23353794.17fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
23363794.17fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23373794.17fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23383794.17fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23393794.17fc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
23403794.17fc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
23413794.17fc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23423794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23433794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23443794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23453794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23463794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
23473794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
23483794.17fc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23493794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23503794.17fc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23513794.17fc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23523794.17fc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23533794.17fc: supR3HardenedDllNotificationCallback: load 00007ffd590e0000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
23543794.17fc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23553794.17fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd590e0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
23563794.17fc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a550000 'C:\Windows\system32\User32.dll'
23573794.1444: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
23583794.1444: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23593794.1444: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
23603794.1444: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23613794.1444: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
23623794.1444: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
23633794.1444: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23643794.1444: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23653794.1444: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
23663794.1444: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
23673794.1444: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23683794.1444: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23693794.1444: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll
23703794.1444: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23713794.1444: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
23723794.1444: supR3HardenedDllNotificationCallback: load 00007ffd590d0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
23733794.1444: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
23743794.1444: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd590d0000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
23753794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd68fa0000 'C:\Windows\system32\Shell32.dll'
23763794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23773794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23783794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06190000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
23793794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
23803794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23813794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23823794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
23833794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
23843794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
23853794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
23863794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
23873794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23883794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23893794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23903794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23913794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23923794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23933794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23943794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23953794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23963794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23973794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23983794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
23993794.53c: supR3HardenedDllNotificationCallback: load 00007ffd57a60000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
24003794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24013794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd57a60000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
24023794.53c: supR3HardenedDllNotificationCallback: Unload 00007ffd57a60000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
24033794.53c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000d30 pwszName=\Device\HarddiskVolume5\Windows\System32\WinHvPlatform.dll
24043794.53c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001d9b5d0
24053794.53c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001d9b5d0
24063794.53c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9143E96BE13DAE364B45A7FAC5B6C12AFE680873
24073794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24083794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
24093794.53c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume5\Windows\System32\WinHvPlatform.dll'
24103794.53c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24113794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vid.dll'.
24123794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\WinHvPlatform.dll) WinVerifyTrust
24133794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\WinHvPlatform.dll
24143794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vid.dll'...
24153794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vid.dll' -> '\Device\HarddiskVolume5\Windows\System32\vid.dll' [rcNtRedir=0xc0150008]
24163794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24173794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
24183794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\vid.dll) WinVerifyTrust
24193794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\vid.dll
24203794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WinHvPlatform.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24213794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\WinHvPlatform.dll
24223794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\vid.dll
24233794.53c: supR3HardenedDllNotificationCallback: load 00007ffd57da0000 LB 0x00017000 C:\Windows\SYSTEM32\vid.dll [fFlags=0x0]
24243794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\vid.dll
24253794.53c: supR3HardenedDllNotificationCallback: load 00007ffd58240000 LB 0x0001f000 C:\Windows\system32\WinHvPlatform.dll [fFlags=0x0]
24263794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\WinHvPlatform.dll
24273794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd58240000 'C:\Windows\system32\WinHvPlatform.dll'
24283794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\vid.dll
24293794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\vid.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24303794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd57da0000 'C:\Windows\system32\vid.dll'
24313794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24323794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
24333794.53c: '\Device\HarddiskVolume5\Windows\System32\ntdll.dll' has no imports
24343794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ntdll.dll) WinVerifyTrust
24353794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ntdll.dll
24363794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\NTDLL.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24373794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b330000 'C:\Windows\system32\NTDLL.DLL'
24383794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24393794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24403794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24413794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
24423794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24433794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
24443794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
24453794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
24463794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
24473794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
24483794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
24493794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
24503794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
24513794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD.dll
24523794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
24533794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
24543794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24553794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd67520000 'C:\Windows\System32\crypt32.dll'
24563794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
24573794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
24583794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\IPHLPAPI.DLL
24593794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24603794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24613794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
24623794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
24633794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll
24643794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
24653794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
24663794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\setupapi.dll
24673794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24683794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24693794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
24703794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
24713794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24723794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24733794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24743794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24753794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24763794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
24773794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24783794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
24793794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
24803794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24813794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24823794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24833794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24843794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
24853794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24863794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24873794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
24883794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
24893794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
24903794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
24913794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDDU.dll
24923794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24933794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24943794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
24953794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
24963794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
24973794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24983794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24993794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25003794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25013794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
25023794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
25033794.53c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\setupapi.dll
25043794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25053794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25063794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25073794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25083794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25093794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25103794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25113794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD.dll
25123794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDDU.dll
25133794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25143794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\IPHLPAPI.DLL
25153794.53c: supR3HardenedDllNotificationCallback: load 00007ffd56830000 LB 0x00064000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
25163794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDDU.dll
25173794.53c: supR3HardenedDllNotificationCallback: load 00007ffd57a50000 LB 0x0005c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
25183794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25193794.53c: supR3HardenedDllNotificationCallback: load 00007ffd668c0000 LB 0x0003d000 C:\Windows\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
25203794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\IPHLPAPI.DLL
25213794.53c: supR3HardenedDllNotificationCallback: load 00007ffcef130000 LB 0x009d9000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
25223794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD.dll
25233794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcef130000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
25243794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25253794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
25263794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25273794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
25283794.53c: supR3HardenedDllNotificationCallback: load 00007ffd52810000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
25293794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
25303794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd52810000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
25313794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25323794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxC.dll
25333794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25343794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd53e90000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
25353794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25363794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxDD2.dll
25373794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25383794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd57a50000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
25393794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25403794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25413794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25423794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25433794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
25443794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
25453794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25463794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25473794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25483794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25493794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25503794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
25513794.53c: supR3HardenedDllNotificationCallback: load 00007ffd57d80000 LB 0x0001e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
25523794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
25533794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd57d80000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
25543794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25553794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25563794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25573794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25583794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
25593794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
25603794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25613794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25623794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25633794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25643794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25653794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
25663794.53c: supR3HardenedDllNotificationCallback: load 00007ffd55c10000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
25673794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
25683794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd55c10000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
25693794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25703794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25713794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25723794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25733794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
25743794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
25753794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25763794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25773794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25783794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25793794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25803794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
25813794.53c: supR3HardenedDllNotificationCallback: load 00007ffd555b0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
25823794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
25833794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd555b0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
25843794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25853794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
25863794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25873794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25883794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
25893794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
25903794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25913794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25923794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25933794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25943794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25953794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
25963794.53c: supR3HardenedDllNotificationCallback: load 00007ffd54840000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
25973794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
25983794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd54840000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
25993794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26003794.1710: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26013794.1710: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26023794.1710: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
26033794.1710: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
26043794.1710: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
26053794.1710: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
26063794.1710: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26073794.1710: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26083794.1710: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
26093794.1710: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
26103794.1710: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26113794.1710: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26123794.1710: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26133794.1710: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26143794.1710: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
26153794.1710: supR3HardenedDllNotificationCallback: load 00007ffd54270000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
26163794.1710: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
26173794.1710: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd54270000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
26183794.1ee8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26193794.1ee8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26203794.1ee8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
26213794.1ee8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
26223794.1ee8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
26233794.1ee8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
26243794.1ee8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
26253794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26263794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26273794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
26283794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
26293794.1ee8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26303794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
26313794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
26323794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26333794.1ee8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26343794.1ee8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26353794.1ee8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
26363794.1ee8: supR3HardenedDllNotificationCallback: load 00007ffd58d60000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
26373794.1ee8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
26383794.1ee8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd58d60000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
26393794.1174: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26403794.1174: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26413794.1174: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
26423794.1174: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
26433794.1174: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
26443794.1174: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
26453794.1174: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26463794.1174: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26473794.1174: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
26483794.1174: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
26493794.1174: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26503794.1174: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26513794.1174: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26523794.1174: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
26533794.1174: supR3HardenedDllNotificationCallback: load 00007ffd58c40000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
26543794.1174: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
26553794.1174: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd58c40000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
26563794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26573794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26583794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26593794.53c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26603794.53c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
26613794.53c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26623794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26633794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26643794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26653794.53c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26663794.53c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26673794.53c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26683794.53c: supR3HardenedDllNotificationCallback: load 00007ffd64e20000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
26693794.53c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26703794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd64e20000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
26713794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd06190000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
26723794.53c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd666c0000 'C:\Windows\system32\rsaenh.dll'
26732278.339c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0xcfffffff (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 59671836 ms, the end);
2674fe4.3530: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xcfffffff (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 59672254 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy